Static task
static1
Behavioral task
behavioral1
Sample
09055fd4f24d047748e4a7c55bc40c70.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
09055fd4f24d047748e4a7c55bc40c70.exe
Resource
win10v2004-20231222-en
General
-
Target
09055fd4f24d047748e4a7c55bc40c70
-
Size
748KB
-
MD5
09055fd4f24d047748e4a7c55bc40c70
-
SHA1
007c707a87a73c61ce87fe1a3921250859e68953
-
SHA256
ac7d2c205ff10433f7626a29d708d868bf2bba37ebba4d1ac45f7413a5c3fb6e
-
SHA512
7b06a0b51c09f848a61df6e5d9a3c4f05f43c838685fd6a6f68ebb1a4f63f6b01a20f34956fab8cdd5a98090779049b5541c5456fa3e5f234a2681183caf7838
-
SSDEEP
12288:pT90JLLXzelrbe/q7dsYUVc5h0vPbJV/22ix4IXx0VXTy2sszHNLyZZ2L6lxGF6+:f0tcraOafG70N9lix3XmeLwcz2LpQW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09055fd4f24d047748e4a7c55bc40c70
Files
-
09055fd4f24d047748e4a7c55bc40c70.exe windows:4 windows x86 arch:x86
77e16b347690b461f021756df2239a72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
DestroyPropertySheetPage
ImageList_SetImageCount
ImageList_LoadImageA
_TrackMouseEvent
ImageList_GetImageCount
ImageList_GetBkColor
DrawStatusText
ImageList_Remove
InitCommonControlsEx
GetEffectiveClientRect
ImageList_Copy
ImageList_BeginDrag
ImageList_SetFlags
ImageList_GetFlags
ImageList_LoadImage
ImageList_SetDragCursorImage
CreateMappedBitmap
comdlg32
ChooseFontW
PrintDlgA
GetOpenFileNameW
user32
DefWindowProcA
GetClipboardFormatNameW
SystemParametersInfoW
SetThreadDesktop
RegisterClassExA
CreateIconIndirect
CreateAcceleratorTableA
GetMenuStringW
MapVirtualKeyA
ShowWindow
FindWindowExW
OpenClipboard
OpenInputDesktop
EnableMenuItem
DlgDirListW
ReleaseCapture
SendMessageW
ScrollDC
DefFrameProcW
DdeQueryConvInfo
RegisterClassA
GetProcessDefaultLayout
VkKeyScanExW
GetSubMenu
CheckDlgButton
AppendMenuW
FreeDDElParam
TranslateAcceleratorW
SetRect
BroadcastSystemMessageA
CallNextHookEx
AppendMenuA
GetCaretPos
CascadeChildWindows
GetClassInfoW
UnregisterClassW
VkKeyScanExA
DestroyWindow
CreateWindowExW
CharToOemA
IsChild
MessageBoxA
EnumDisplaySettingsW
IsCharUpperW
SystemParametersInfoA
CharToOemW
InvalidateRgn
DdeCreateStringHandleA
CreateDialogIndirectParamA
gdi32
GetStretchBltMode
CloseFigure
SetGraphicsMode
CreatePenIndirect
CreateHatchBrush
GetCharacterPlacementA
gdiPlaySpoolStream
SetICMProfileW
EnumEnhMetaFile
GetCharacterPlacementW
CloseEnhMetaFile
SetDeviceGammaRamp
CreateDIBPatternBrush
CreateScalableFontResourceA
kernel32
SetStdHandle
GetTimeFormatA
IsValidCodePage
TlsGetValue
ReadFile
TlsFree
RaiseException
UnmapViewOfFile
IsBadReadPtr
lstrlenA
ExitProcess
GetStringTypeW
GetCommandLineW
GetModuleFileNameA
HeapCreate
GetLocaleInfoW
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
GetLocaleInfoA
InterlockedExchange
EnumSystemLocalesA
OpenMutexA
GetCurrentThread
SetUnhandledExceptionFilter
GetAtomNameW
GetStartupInfoA
WritePrivateProfileStringW
InterlockedIncrement
GetModuleFileNameW
SetHandleCount
VirtualProtect
GetFileType
HeapSize
lstrcpyn
GetConsoleOutputCP
VirtualAlloc
LoadModule
CompareStringW
FreeEnvironmentStringsW
GetCurrentProcess
LoadLibraryA
TerminateProcess
GetCommandLineA
GetTickCount
HeapFree
GlobalAddAtomA
HeapAlloc
DebugBreak
WideCharToMultiByte
QueryPerformanceCounter
DeleteAtom
GetCurrentDirectoryA
MultiByteToWideChar
GetOEMCP
LCMapStringA
GetProcAddress
GlobalGetAtomNameW
TlsAlloc
UnhandledExceptionFilter
InterlockedDecrement
GetStringTypeA
SetEnvironmentVariableA
SetLastError
CreateFileA
CloseHandle
GetCurrentThreadId
LeaveCriticalSection
CompareStringA
HeapValidate
GetModuleHandleA
OutputDebugStringW
HeapDestroy
GetUserDefaultLCID
IsDebuggerPresent
RtlUnwind
SetFilePointer
GetTimeZoneInformation
GetModuleHandleW
CommConfigDialogW
CreateMutexA
EnterCriticalSection
FreeLibrary
GetSystemTimeAsFileTime
GetStdHandle
GetCurrencyFormatW
FlushFileBuffers
GetDateFormatA
GetExitCodeProcess
WriteConsoleW
HeapReAlloc
IsValidLocale
SetEnvironmentVariableW
LoadLibraryW
GetLastError
GetConsoleMode
GetEnvironmentStringsW
WaitNamedPipeA
VirtualFree
TlsSetValue
WriteFile
GetCPInfo
LCMapStringW
VirtualQuery
GetComputerNameA
GetConsoleCP
FillConsoleOutputCharacterW
GetStartupInfoW
GetProcessHeap
OutputDebugStringA
GetACP
GlobalFindAtomW
SetConsoleCtrlHandler
Sleep
DeleteCriticalSection
Sections
.text Size: 312KB - Virtual size: 311KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 296KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ