Static task
static1
Behavioral task
behavioral1
Sample
03c56c8650fbd2042233702af20c73db.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
03c56c8650fbd2042233702af20c73db.exe
Resource
win10v2004-20231215-en
General
-
Target
03c56c8650fbd2042233702af20c73db
-
Size
434KB
-
MD5
03c56c8650fbd2042233702af20c73db
-
SHA1
f15c7110e7e7e4f7b703084773b424d0a5ce067b
-
SHA256
9e7b8a2179d86f4e8a289ae40693624c29d51ff197f8cbfefef2dd7732c45d43
-
SHA512
013648012d706d7de39baa92f811e0866e8d11198bc550dfcae9be0bab2ee3e285fcc2a88b211c3220c5646900367ddda75d0f785f4a1b42103349172657c1dc
-
SSDEEP
12288:TuIeWoBBHYyE3NbRKvxXr6oeWlKp+MNb:FEB4LNaxzSB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03c56c8650fbd2042233702af20c73db
Files
-
03c56c8650fbd2042233702af20c73db.exe windows:4 windows x86 arch:x86
ef7c3431a2364425aa9f3d117bb14db1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapReAlloc
HeapAlloc
HeapFree
VirtualAlloc
ReadConsoleOutputCharacterW
OpenMutexW
Process32Next
GetConsoleOutputCP
SetWaitableTimer
GetLargestConsoleWindowSize
GetVersionExA
SetConsoleScreenBufferSize
DefineDosDeviceA
HeapCreate
SetCurrentDirectoryA
lstrcpynW
WriteProfileStringW
GetThreadPriorityBoost
FormatMessageW
GetStartupInfoW
GetProfileSectionA
GetModuleFileNameW
CreateMutexA
SetEnvironmentVariableA
SetLastError
GetTempPathW
GlobalFree
TlsSetValue
MapViewOfFile
CreatePipe
GetEnvironmentStrings
GetSystemDefaultLangID
WriteConsoleInputW
SetConsoleActiveScreenBuffer
CreateRemoteThread
GetPrivateProfileStringW
GetConsoleScreenBufferInfo
CreateNamedPipeW
GetStartupInfoA
EnumResourceLanguagesA
FindResourceExW
SetLocaleInfoW
AddAtomA
FindFirstFileW
GetCurrentDirectoryA
GlobalUnlock
GetDriveTypeA
GetAtomNameA
UnlockFile
FindFirstChangeNotificationA
DefineDosDeviceW
Module32Next
WaitNamedPipeW
FreeResource
WritePrivateProfileStructA
FindNextFileW
SuspendThread
GetStringTypeExA
WriteConsoleOutputCharacterA
CompareFileTime
WriteConsoleOutputA
SetFileAttributesA
CreateFileA
CreateFileW
GetPrivateProfileIntW
UpdateResourceA
FindNextFileA
SetConsoleWindowInfo
GetFullPathNameA
GlobalUnfix
CreateEventA
FlushInstructionCache
GetDiskFreeSpaceExW
WriteFileGather
SetCriticalSectionSpinCount
GetVersionExW
lstrcatA
WideCharToMultiByte
GetProcAddress
CloseHandle
InterlockedIncrement
GetNamedPipeInfo
SetThreadLocale
FileTimeToSystemTime
LocalUnlock
FindAtomW
GlobalAddAtomW
LeaveCriticalSection
GetSystemDirectoryA
EnumDateFormatsExW
EnumCalendarInfoA
GetConsoleMode
GetProcessTimes
GetPrivateProfileStringA
TlsAlloc
lstrcat
MultiByteToWideChar
GetLongPathNameA
WritePrivateProfileStringW
HeapDestroy
VirtualFree
GlobalSize
LoadResource
RtlFillMemory
lstrcmpiW
GetDriveTypeW
OpenWaitableTimerW
FreeEnvironmentStringsW
MulDiv
SetConsoleCursorInfo
GetDateFormatA
Sleep
CreateMailslotW
EnumDateFormatsExA
SetSystemTimeAdjustment
GetSystemPowerStatus
GetNumberFormatA
GetTimeZoneInformation
UpdateResourceW
ReadFile
WaitForSingleObjectEx
MoveFileW
WriteConsoleOutputCharacterW
WriteFileEx
SetFileAttributesW
ConvertDefaultLocale
GetWindowsDirectoryA
DisconnectNamedPipe
CreateEventW
FoldStringW
GetUserDefaultLCID
WriteConsoleOutputAttribute
SetThreadContext
lstrcpyW
LocalAlloc
SetComputerNameW
CreateSemaphoreA
SetEvent
GetDiskFreeSpaceA
SetFileTime
GlobalMemoryStatus
SetConsoleMode
LocalFree
GetAtomNameW
DeleteFileA
GetEnvironmentVariableA
CompareStringA
OpenProcess
GetNamedPipeHandleStateW
OpenEventW
WaitForSingleObject
AllocConsole
CopyFileA
EnumResourceNamesA
GetComputerNameA
CreateWaitableTimerA
ReadFileScatter
SearchPathW
SetComputerNameA
EnumSystemLocalesW
GetLogicalDriveStringsA
GetPriorityClass
HeapSize
GetNumberOfConsoleMouseButtons
SetFilePointer
WriteConsoleOutputW
EnumTimeFormatsA
SetSystemTime
GetThreadSelectorEntry
TryEnterCriticalSection
GetVolumeInformationW
GetLocaleInfoW
MoveFileA
GetNumberOfConsoleInputEvents
GetThreadPriority
WaitCommEvent
GetFileInformationByHandle
FindAtomA
SetPriorityClass
CreateNamedPipeA
ReadConsoleInputW
GetSystemTimeAdjustment
OpenEventA
GetProfileIntW
OpenSemaphoreA
Module32First
ExitThread
GetStringTypeW
SetConsoleCursorPosition
Heap32First
CreateSemaphoreW
FillConsoleOutputCharacterW
GetWindowsDirectoryW
WinExec
lstrcpyA
CommConfigDialogA
DeleteFileW
Toolhelp32ReadProcessMemory
ReleaseSemaphore
CreateMailslotA
CommConfigDialogW
AddAtomW
CreateWaitableTimerW
GetStdHandle
GetFileAttributesExA
SetThreadPriorityBoost
GetCommandLineA
lstrcmpiA
GlobalDeleteAtom
lstrlen
CreateToolhelp32Snapshot
FileTimeToDosDateTime
DuplicateHandle
GetEnvironmentStringsW
UnmapViewOfFile
EnumCalendarInfoExA
GetCompressedFileSizeA
SetCurrentDirectoryW
SetThreadIdealProcessor
GetVersion
EnumDateFormatsW
lstrcpynA
GetConsoleCP
WriteConsoleA
GlobalAlloc
GlobalAddAtomA
GetCompressedFileSizeW
GetProcessAffinityMask
GetLocalTime
SetEnvironmentVariableW
FindNextChangeNotification
GetDateFormatW
GetProcessPriorityBoost
WriteProfileSectionW
FindResourceW
GetSystemDefaultLCID
GetSystemDirectoryW
GetQueuedCompletionStatus
GlobalUnWire
InitAtomTable
UnlockFileEx
FindFirstFileExW
UnhandledExceptionFilter
EscapeCommFunction
WriteProcessMemory
ContinueDebugEvent
TransactNamedPipe
GetCalendarInfoA
GetEnvironmentStringsA
EnterCriticalSection
CreateFileMappingA
ReadConsoleOutputA
WriteFile
CreateTapePartition
GetFileType
lstrcpyn
VirtualLock
FillConsoleOutputAttribute
GetFileAttributesA
FillConsoleOutputCharacterA
FreeConsole
Thread32First
SetConsoleTitleA
advapi32
CryptEnumProvidersA
CryptSignHashA
RevertToSelf
RegConnectRegistryA
RegReplaceKeyW
RegDeleteValueA
wininet
FindNextUrlCacheEntryW
InternetInitializeAutoProxyDll
DeleteUrlCacheEntryW
SetUrlCacheConfigInfoW
HttpAddRequestHeadersA
SetUrlCacheEntryInfoW
RunOnceUrlCache
InternetGetLastResponseInfoW
InternetFortezzaCommand
GetUrlCacheConfigInfoA
FindFirstUrlCacheContainerA
FindFirstUrlCacheContainerW
InternetReadFileExA
DeleteUrlCacheEntry
InternetSecurityProtocolToStringA
DetectAutoProxyUrl
RetrieveUrlCacheEntryFileW
Sections
.text Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 254KB - Virtual size: 254KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ