Static task
static1
Behavioral task
behavioral1
Sample
08dda9a244b18be734aa4f412858b998.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
08dda9a244b18be734aa4f412858b998.exe
Resource
win10v2004-20231215-en
General
-
Target
08dda9a244b18be734aa4f412858b998
-
Size
229KB
-
MD5
08dda9a244b18be734aa4f412858b998
-
SHA1
e27d3ed55f7e4ebbfa60638230265a989c47327f
-
SHA256
03925fbdd25012efbf0bdcef49fc668e61d871445f9f254d59e134702f9ced68
-
SHA512
a17f45ea52f845b1b624c8cdcb8dd78998fc1b38ba36b967c3e5843ccfe794671f5db6aee6b8e2684a03dcdf2d9cfc1e0f4d909cd68bf16596e3fbb0c7a6ab00
-
SSDEEP
6144:+WjfLfAkfImEbmpiKZ8cbU9PYsybWn8yBlfdxOy1RNo2g1:j7AqEKZU9PaABhNoN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08dda9a244b18be734aa4f412858b998
Files
-
08dda9a244b18be734aa4f412858b998.exe windows:4 windows x86 arch:x86
b7751bfc571fecd4de04785f1c080d5e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapReAlloc
HeapAlloc
HeapFree
VirtualAlloc
GetTempFileNameA
ReadConsoleA
GetDiskFreeSpaceW
GetComputerNameW
SetConsoleTextAttribute
FindNextFileW
ReadConsoleInputA
VirtualLock
LoadLibraryExA
FileTimeToLocalFileTime
WriteFile
LocalCompact
LoadModule
GetLocaleInfoW
CreateNamedPipeW
FindResourceW
FreeConsole
GetSystemTime
EnumTimeFormatsW
EnumResourceNamesW
Module32First
SetConsoleActiveScreenBuffer
LoadLibraryW
FindFirstFileExA
GetTempFileNameW
ExitThread
GetStartupInfoA
CreateProcessA
WriteConsoleOutputA
SetConsoleCtrlHandler
FindResourceA
GetACP
WritePrivateProfileStructA
GetFileAttributesExA
SetFileTime
FoldStringW
OpenProcess
Toolhelp32ReadProcessMemory
WaitNamedPipeW
TerminateThread
CreateEventA
SetThreadLocale
FreeLibrary
GetUserDefaultLCID
GetUserDefaultLangID
WaitCommEvent
TransactNamedPipe
lstrcpynA
TryEnterCriticalSection
CreateDirectoryA
Heap32ListNext
FreeEnvironmentStringsW
LocalShrink
UpdateResourceW
GetConsoleMode
VirtualProtectEx
GetProfileSectionA
FindAtomA
CopyFileA
FindFirstFileW
InitializeCriticalSection
OpenFileMappingA
GetPrivateProfileSectionA
SystemTimeToTzSpecificLocalTime
RtlMoveMemory
lstrcpyW
GetPrivateProfileStructA
GetStartupInfoW
ReadFile
VirtualProtect
CreatePipe
SetConsoleCP
VirtualUnlock
InterlockedDecrement
AllocConsole
WriteConsoleA
GlobalFindAtomA
SetFilePointer
VirtualFreeEx
FoldStringA
EnumDateFormatsW
GetNumberOfConsoleMouseButtons
GetLongPathNameW
CreateMutexA
PeekConsoleInputA
GetDateFormatW
GetCompressedFileSizeW
CreateNamedPipeA
TlsAlloc
GetProcessShutdownParameters
ReadFileScatter
SetConsoleCursorPosition
SetConsoleWindowInfo
PulseEvent
CreateFileMappingW
GetEnvironmentVariableA
OpenWaitableTimerW
InitAtomTable
ReadConsoleOutputW
DuplicateHandle
SleepEx
EnumResourceTypesA
GetThreadTimes
BeginUpdateResourceA
WaitForDebugEvent
ResetEvent
GetNumberFormatW
MapViewOfFile
GlobalUnfix
FlushFileBuffers
FindFirstFileA
GetCommandLineW
FreeLibraryAndExitThread
GetFileAttributesExW
LockFile
CreateSemaphoreW
SearchPathA
GetLogicalDriveStringsW
GetMailslotInfo
lstrcat
SetLocaleInfoW
GetProcessAffinityMask
InitializeCriticalSectionAndSpinCount
SetLastError
SetWaitableTimer
LockFileEx
GlobalCompact
GetFullPathNameA
GetConsoleScreenBufferInfo
LocalSize
ReadProcessMemory
CloseHandle
MoveFileW
Module32Next
GetFullPathNameW
GetDiskFreeSpaceA
GetNamedPipeHandleStateA
GetConsoleCP
comdlg32
ChooseColorW
FindTextA
PageSetupDlgA
user32
UnhookWindowsHook
DialogBoxIndirectParamW
MapVirtualKeyA
MonitorFromPoint
DialogBoxIndirectParamA
HideCaret
LoadKeyboardLayoutA
SetScrollInfo
DragObject
IsDialogMessageA
MonitorFromWindow
GetClipboardFormatNameA
WaitForInputIdle
SetMenuItemBitmaps
SetClipboardViewer
SendIMEMessageExA
GetPropA
MessageBoxExA
SetWindowRgn
SetRect
SetMenuItemInfoW
GetMenuItemInfoA
ValidateRect
InsertMenuItemW
AppendMenuA
EndDeferWindowPos
DdeConnectList
ScrollWindowEx
GetSystemMenu
IsWindowVisible
InsertMenuW
SetActiveWindow
GetMenuCheckMarkDimensions
CreateCaret
SetUserObjectSecurity
ChildWindowFromPoint
RegisterWindowMessageA
InternalGetWindowText
ToUnicode
DispatchMessageW
OpenInputDesktop
GetClipboardData
DdeDisconnectList
TranslateAcceleratorW
GetMenu
DrawTextExW
ChangeDisplaySettingsA
DdeNameService
CreateDialogIndirectParamA
ShowOwnedPopups
GetCaretBlinkTime
DlgDirSelectComboBoxExW
CallMsgFilter
GetWindowTextA
DrawAnimatedRects
ImpersonateDdeClientWindow
SystemParametersInfoA
GetUserObjectSecurity
SetWindowsHookW
GetClipboardOwner
CallMsgFilterW
WINNLSEnableIME
WINNLSGetIMEHotkey
DdeFreeDataHandle
GetQueueStatus
SetUserObjectInformationA
OemToCharBuffA
ReleaseCapture
LoadImageA
GetGUIThreadInfo
DdeCmpStringHandles
MsgWaitForMultipleObjects
GetWindowRgn
CreateMDIWindowA
ScrollWindow
SetShellWindow
BlockInput
IsDialogMessage
EnumDisplayDevicesA
CharUpperBuffA
GetSystemMetrics
SetPropA
IsWindowEnabled
EnumDesktopWindows
GetKeyboardLayoutList
ModifyMenuW
BroadcastSystemMessage
GetScrollPos
GetMessageExtraInfo
GetKBCodePage
EndPaint
SendInput
SetDlgItemInt
TabbedTextOutW
SwitchDesktop
GetMenuDefaultItem
DdeUninitialize
GetClipboardFormatNameW
BringWindowToTop
DdeKeepStringHandle
LoadMenuIndirectW
DdeAccessData
GrayStringA
GrayStringW
GetProcessDefaultLayout
SetDebugErrorLevel
CreateWindowExA
LoadStringA
CreateMenu
MoveWindow
ReuseDDElParam
GetShellWindow
ScrollDC
InSendMessage
CreateAcceleratorTableA
SetMenuDefaultItem
MapDialogRect
SetForegroundWindow
GetClassNameA
VkKeyScanExA
SetMenu
GetTitleBarInfo
NotifyWinEvent
AdjustWindowRectEx
RegisterClassW
CharNextExA
DialogBoxParamA
DeleteMenu
IsIconic
CopyAcceleratorTableA
DdeQueryNextServer
SetWinEventHook
CreateDialogParamW
wsprintfW
GetWindowTextLengthA
InSendMessageEx
LoadCursorFromFileA
ChangeMenuW
RegisterClassA
DrawIconEx
ShowWindowAsync
GetMessagePos
GetWindowInfo
GetClassInfoExW
GetTabbedTextExtentA
DrawMenuBar
GetMenuStringA
FindWindowExW
SetCursor
LoadBitmapW
WindowFromDC
LoadMenuW
MessageBoxExW
WinHelpA
PostThreadMessageW
LockWindowUpdate
SetSystemCursor
UnregisterClassW
GetCursorInfo
EnumDisplaySettingsExA
GetWindowWord
wvsprintfW
TranslateAccelerator
DefWindowProcA
DefMDIChildProcW
GetMessageTime
DispatchMessageA
ShowCursor
GetNextDlgGroupItem
UpdateWindow
SetTimer
GetKeyboardLayoutNameW
DefFrameProcW
LoadAcceleratorsW
EnumWindowStationsW
UnhookWinEvent
GetCapture
DdeClientTransaction
IsZoomed
CheckMenuRadioItem
DrawTextExA
RegisterClassExA
ShowWindow
ReplyMessage
RegisterClassExW
SetMenuItemInfoA
ValidateRgn
DlgDirListA
PostMessageA
RegisterHotKey
SetPropW
EnumClipboardFormats
CheckMenuItem
LookupIconIdFromDirectoryEx
VkKeyScanW
PaintDesktop
IsMenu
MessageBoxW
DrawCaption
SetWindowTextW
MapWindowPoints
SetClassWord
SendDlgItemMessageA
CountClipboardFormats
GetKeyState
SetMenuInfo
LoadStringW
GetKeyNameTextW
GetClientRect
OemToCharW
GetClassInfoW
LoadAcceleratorsA
CopyImage
SetWindowTextA
EditWndProc
DefDlgProcW
GetClassInfoA
SendNotifyMessageW
GetUserObjectInformationW
GetGuiResources
SetWindowContextHelpId
TrackMouseEvent
RealGetWindowClass
EmptyClipboard
CharLowerBuffW
GetScrollBarInfo
DrawStateA
DrawStateW
TrackPopupMenuEx
EnableMenuItem
GetAsyncKeyState
SendMessageW
SetKeyboardState
LookupIconIdFromDirectory
GetWindowTextLengthW
CharToOemA
DestroyMenu
CallMsgFilterA
GetMonitorInfoA
CreateIcon
CreateAcceleratorTableW
GetClipboardViewer
ChildWindowFromPointEx
DdeCreateStringHandleA
SetDlgItemTextW
GetAncestor
WinHelpW
VkKeyScanA
DrawFrameControl
GetOpenClipboardWindow
DrawEdge
SetProcessDefaultLayout
CharNextA
LoadMenuA
DefWindowProcW
LoadKeyboardLayoutW
CopyAcceleratorTableW
BeginPaint
DefDlgProcA
GetClassWord
LoadIconW
CharUpperA
OpenClipboard
BeginDeferWindowPos
ClientToScreen
UnpackDDElParam
DdeQueryStringA
MessageBoxIndirectA
SetDeskWallpaper
ChangeDisplaySettingsExA
GetWindowDC
SetMessageExtraInfo
SendMessageTimeoutA
SetWindowsHookExA
GetDlgItemTextW
GetDlgCtrlID
DestroyCursor
GetIconInfo
DlgDirListComboBoxA
RealChildWindowFromPoint
PackDDElParam
GetPropW
MsgWaitForMultipleObjectsEx
CheckRadioButton
DragDetect
SetCursorPos
GetAltTabInfo
EnumWindowStationsA
TranslateMDISysAccel
EnumDisplaySettingsExW
SetCaretBlinkTime
GetActiveWindow
SwitchToThisWindow
CharLowerA
BroadcastSystemMessageA
GetWindowLongA
IsDlgButtonChecked
GetForegroundWindow
UnloadKeyboardLayout
InvalidateRect
SetParent
TileChildWindows
PostMessageW
GetDlgItemInt
CreateIconFromResource
CopyIcon
DlgDirSelectComboBoxExA
GetKeyboardLayoutNameA
TranslateAcceleratorA
GetClipCursor
DestroyIcon
GetWindowPlacement
GetClipboardSequenceNumber
DdeSetUserHandle
DrawFrame
GetCursor
SetMenuContextHelpId
ToAsciiEx
LoadImageW
TrackPopupMenu
RegisterClipboardFormatA
RemoveMenu
EnumPropsExA
DlgDirListW
GetClassLongW
GetFocus
SetScrollRange
GetMenuItemRect
TabbedTextOutA
CascadeWindows
SubtractRect
GetLastActivePopup
GetMenuBarInfo
LoadIconA
CreateWindowStationA
DdeSetQualityOfService
GetKeyNameTextA
SetProcessWindowStation
IsWindowUnicode
ShowScrollBar
AdjustWindowRect
CascadeChildWindows
VkKeyScanExW
ShowCaret
LoadBitmapA
CreateDialogParamA
RegisterClipboardFormatW
CreateWindowExW
GetTopWindow
ReleaseDC
GetDialogBaseUnits
ToAscii
SendDlgItemMessageW
SendMessageTimeoutW
GetTabbedTextExtentW
ArrangeIconicWindows
DdeDisconnect
GetDC
OemToCharA
ClipCursor
wsprintfA
GetMessageW
WINNLSGetEnableStatus
GetClassLongA
CloseWindow
InflateRect
GetClassNameW
SetCaretPos
GetMenuItemCount
SetClipboardData
SendIMEMessageExW
IsChild
DrawFocusRect
CloseWindowStation
DdeUnaccessData
wininet
InternetReadFileExW
HttpOpenRequestW
IsUrlCacheEntryExpiredW
InternetDialW
FindNextUrlCacheEntryW
FtpOpenFileW
SetUrlCacheHeaderData
HttpSendRequestExA
DeleteUrlCacheEntry
InternetErrorDlg
InternetAttemptConnect
InternetGetConnectedState
CommitUrlCacheEntryA
InternetHangUp
InternetGetCertByURL
InternetConnectA
InternetFindNextFileW
GetUrlCacheGroupAttributeW
GetUrlCacheEntryInfoA
InternetQueryOptionW
RegisterUrlCacheNotification
InternetConfirmZoneCrossingW
InternetCanonicalizeUrlW
ShowClientAuthCerts
InternetTimeFromSystemTimeA
RunOnceUrlCache
FtpGetCurrentDirectoryW
InternetConfirmZoneCrossingA
RetrieveUrlCacheEntryFileA
DeleteUrlCacheEntryW
SetUrlCacheEntryGroup
ResumeSuspendedDownload
InternetReadFile
FtpPutFileEx
DeleteUrlCacheContainerA
GopherGetLocatorTypeW
FindFirstUrlCacheEntryExW
FindFirstUrlCacheContainerW
GetUrlCacheEntryInfoExA
FindNextUrlCacheEntryA
InternetSetDialStateA
FindCloseUrlCache
InternetCloseHandle
HttpAddRequestHeadersA
InternetAutodialHangup
FtpDeleteFileW
ReadUrlCacheEntryStream
HttpOpenRequestA
FtpCreateDirectoryA
DeleteUrlCacheContainerW
HttpSendRequestExW
CreateUrlCacheContainerW
SetUrlCacheGroupAttributeA
FtpSetCurrentDirectoryW
InternetGetLastResponseInfoW
HttpSendRequestA
FindNextUrlCacheContainerW
InternetGetConnectedStateEx
SetUrlCacheEntryInfoW
FtpFindFirstFileA
InternetCreateUrlA
FtpGetFileEx
FindFirstUrlCacheEntryExA
GopherCreateLocatorA
InternetOpenA
InternetSetOptionA
InternetSetOptionW
DetectAutoProxyUrl
GetUrlCacheEntryInfoExW
InternetCanonicalizeUrlA
InternetQueryFortezzaStatus
InternetCombineUrlA
InternetDialA
SetUrlCacheGroupAttributeW
InternetSetCookieA
FindFirstUrlCacheEntryA
GetUrlCacheConfigInfoW
FtpGetCurrentDirectoryA
ShowX509EncodedCertificate
CreateUrlCacheGroup
InternetGetConnectedStateExA
FreeUrlCacheSpaceA
RetrieveUrlCacheEntryStreamA
FtpRemoveDirectoryW
GopherGetLocatorTypeA
InternetWriteFileExA
InternetGetCookieA
InternetSetFilePointer
SetUrlCacheConfigInfoW
FindFirstUrlCacheContainerA
InternetLockRequestFile
HttpEndRequestA
FtpPutFileW
SetUrlCacheEntryGroupA
InternetOpenW
CreateUrlCacheEntryW
IsHostInProxyBypassList
HttpAddRequestHeadersW
InternetGoOnline
FtpSetCurrentDirectoryA
GopherFindFirstFileA
InternetSetDialState
InternetAlgIdToStringW
InternetCheckConnectionA
FindFirstUrlCacheEntryW
UnlockUrlCacheEntryFileW
FtpOpenFileA
UnlockUrlCacheEntryFileA
InternetWriteFileExW
UnlockUrlCacheEntryStream
RetrieveUrlCacheEntryStreamW
InternetGetCertByURLA
InternetGoOnlineW
InternetUnlockRequestFile
FtpRenameFileW
GetUrlCacheConfigInfoA
FtpCommandW
FtpRemoveDirectoryA
GopherFindFirstFileW
InternetOpenUrlA
HttpSendRequestW
InternetFortezzaCommand
HttpEndRequestW
DeleteUrlCacheEntryA
GopherGetAttributeA
FtpGetFileW
FtpGetFileSize
InternetShowSecurityInfoByURLA
FtpDeleteFileA
InternetTimeToSystemTimeA
InternetFindNextFileA
UrlZonesDetach
InternetCreateUrlW
InternetGetCookieW
FtpRenameFileA
GetUrlCacheEntryInfoW
FindNextUrlCacheEntryExW
FreeUrlCacheSpaceW
FtpGetFileA
UnlockUrlCacheEntryFile
InternetGetConnectedStateExW
GopherOpenFileW
FindNextUrlCacheGroup
InternetGoOnlineA
InternetConfirmZoneCrossing
InternetOpenUrlW
InternetWriteFile
InternetSecurityProtocolToStringW
InternetInitializeAutoProxyDll
FtpCommandA
UpdateUrlCacheContentPath
InternetTimeToSystemTime
InternetConnectW
InternetAutodial
InternetCombineUrlW
CreateUrlCacheContainerA
InternetQueryOptionA
InternetSetOptionExW
InternetQueryDataAvailable
ShowSecurityInfo
InternetShowSecurityInfoByURL
InternetSetDialStateW
FtpPutFileA
InternetTimeFromSystemTime
FtpCreateDirectoryW
InternetAlgIdToStringA
InternetTimeToSystemTimeW
SetUrlCacheEntryGroupW
InternetSetCookieW
InternetCheckConnectionW
HttpQueryInfoW
FindFirstUrlCacheGroup
FindNextUrlCacheContainerA
InternetSecurityProtocolToStringA
InternetSetOptionExA
CommitUrlCacheEntryW
GopherGetAttributeW
CreateUrlCacheEntryA
shell32
ExtractIconExA
DragQueryFileA
ShellHookProc
ExtractAssociatedIconW
SHGetSpecialFolderPathA
SHGetInstanceExplorer
SHAppBarMessage
SHGetNewLinkInfo
SHFreeNameMappings
SHGetPathFromIDListW
ExtractIconW
ShellAboutW
SHGetDataFromIDListA
SHFileOperationW
DuplicateIcon
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHQueryRecycleBinW
SHGetMalloc
CommandLineToArgvW
ShellExecuteExA
DragQueryPoint
ShellExecuteW
SHEmptyRecycleBinW
SheGetDirA
FindExecutableA
SHGetFileInfoW
SHGetSettings
SHBrowseForFolderW
SHBrowseForFolder
FindExecutableW
ShellAboutA
SHFormatDrive
FreeIconList
SheChangeDirA
ExtractAssociatedIconExW
ExtractIconEx
SHFileOperationA
SHEmptyRecycleBinA
DragQueryFile
DoEnvironmentSubstW
ShellExecuteEx
ExtractAssociatedIconA
SHAddToRecentDocs
advapi32
CryptGetDefaultProviderA
CryptSetProviderW
DuplicateTokenEx
CryptHashSessionKey
RegCreateKeyExW
ReportEventA
LookupAccountNameA
CryptEncrypt
RegCreateKeyA
CryptSetKeyParam
RegOpenKeyExW
RegOpenKeyExA
CryptGetKeyParam
RegQueryValueExW
CreateServiceA
LogonUserW
CryptGetProvParam
RegDeleteKeyW
LookupPrivilegeValueA
LookupSecurityDescriptorPartsW
RegQueryMultipleValuesW
CryptSignHashA
RegConnectRegistryW
CryptSetProvParam
AbortSystemShutdownA
CryptEnumProviderTypesA
CryptSetHashParam
CryptGenKey
RegEnumKeyExW
CryptGetHashParam
StartServiceA
RegRestoreKeyW
RegQueryMultipleValuesA
LogonUserA
StartServiceW
RegEnumValueW
RegCloseKey
CryptExportKey
RegNotifyChangeKeyValue
RegEnumValueA
CryptSetProviderExA
RegFlushKey
RegQueryInfoKeyA
CryptSetProviderA
GetUserNameW
CryptEnumProvidersW
RegLoadKeyA
CryptDeriveKey
RegConnectRegistryA
RegSetKeySecurity
CryptAcquireContextA
LookupAccountSidA
GetUserNameA
InitializeSecurityDescriptor
CryptSignHashW
CryptGenRandom
CryptSetProviderExW
CryptGetUserKey
CryptDestroyKey
LookupPrivilegeNameA
RegReplaceKeyW
CryptReleaseContext
RegCreateKeyW
CryptDuplicateKey
CryptCreateHash
InitiateSystemShutdownA
LookupPrivilegeDisplayNameA
CreateServiceW
CryptGetDefaultProviderW
RevertToSelf
LookupPrivilegeDisplayNameW
AbortSystemShutdownW
RegQueryValueA
RegSetValueExA
RegSetValueW
RegDeleteValueA
RegOpenKeyW
LookupSecurityDescriptorPartsA
CryptDuplicateHash
LookupAccountSidW
CryptDecrypt
CryptImportKey
ReportEventW
RegSetValueExW
CryptContextAddRef
CryptEnumProviderTypesW
LookupAccountNameW
LookupPrivilegeValueW
CryptAcquireContextW
CryptEnumProvidersA
InitiateSystemShutdownW
RegQueryValueExA
RegOpenKeyA
CryptVerifySignatureW
CryptVerifySignatureA
RegDeleteKeyA
RegLoadKeyW
RegDeleteValueW
RegSaveKeyA
LookupPrivilegeNameW
RegSaveKeyW
RegEnumKeyA
CryptHashData
RegSetValueA
RegReplaceKeyA
RegQueryValueW
RegRestoreKeyA
CryptDestroyHash
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ