Static task
static1
Behavioral task
behavioral1
Sample
0875ec392e4497c0e7b278b9d5fbc48a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0875ec392e4497c0e7b278b9d5fbc48a.exe
Resource
win10v2004-20231215-en
General
-
Target
0875ec392e4497c0e7b278b9d5fbc48a
-
Size
204KB
-
MD5
0875ec392e4497c0e7b278b9d5fbc48a
-
SHA1
beb25d80f2a038cbe73b4b6866c6666cb05ff8dc
-
SHA256
dfa8b483659aa60121980e7cd5959b241e61ef07072dd0f3c695ae63ad8c4eaa
-
SHA512
15a910106e33c67b9e8b747270c56dc7050f4b86584bb5b8fccf0b532ca54b1e644c3c2b0aac49178df9f606d903156815271da62c0f46456953fb08601b11d8
-
SSDEEP
6144:i+zoGAc2XQ9syUKGhAxnIZx3H9X/2EKepEn9hF7myl:jzGc2XQ9syUKAAxIr3HN/dUhVp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0875ec392e4497c0e7b278b9d5fbc48a
Files
-
0875ec392e4497c0e7b278b9d5fbc48a.exe windows:4 windows x86 arch:x86
ea32708c0e63948cc6ec7e61120285e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
GopherFindFirstFileA
InternetSetCookieW
DeleteUrlCacheEntry
DeleteUrlCacheEntryA
IsHostInProxyBypassList
FtpDeleteFileW
FindNextUrlCacheContainerA
InternetQueryOptionA
FtpGetCurrentDirectoryA
InternetConfirmZoneCrossingA
InternetReadFile
FindFirstUrlCacheEntryA
UnlockUrlCacheEntryFileA
FreeUrlCacheSpaceA
FtpSetCurrentDirectoryA
InternetFortezzaCommand
GopherCreateLocatorW
InternetConnectW
InternetGetCertByURLA
FtpRemoveDirectoryA
UnlockUrlCacheEntryStream
HttpSendRequestW
InternetConfirmZoneCrossing
InternetGetCookieW
InternetTimeFromSystemTimeA
InternetGoOnlineA
RetrieveUrlCacheEntryStreamW
SetUrlCacheEntryInfoW
InternetGetLastResponseInfoW
FtpRemoveDirectoryW
HttpEndRequestA
CreateUrlCacheEntryA
InternetErrorDlg
FtpFindFirstFileA
InternetTimeToSystemTimeA
RegisterUrlCacheNotification
SetUrlCacheGroupAttributeW
user32
GetScrollPos
MessageBoxExW
GetWindowRect
EnumDisplayDevicesW
RegisterClassExA
SetWindowTextW
SendIMEMessageExA
WINNLSGetEnableStatus
DdeAccessData
GetDesktopWindow
GetClassInfoExW
CreateMDIWindowW
GetClassInfoA
ExcludeUpdateRgn
GetNextDlgTabItem
GetMenuBarInfo
DdeDisconnectList
SetMessageQueue
DdeCreateDataHandle
GetKeyNameTextW
SetUserObjectInformationA
SetRect
DdeReconnect
EnumWindows
GetMenuCheckMarkDimensions
SystemParametersInfoW
GetLastActivePopup
SetParent
DrawStateW
GetDialogBaseUnits
RegisterWindowMessageA
CountClipboardFormats
GetScrollInfo
GetMenu
SendDlgItemMessageA
GetCaretBlinkTime
SetShellWindow
EnumPropsExA
BlockInput
WindowFromDC
DrawMenuBar
SetClassWord
SetTimer
RegisterWindowMessageW
GetMenuStringW
IsCharAlphaA
CreateWindowExW
GetCapture
GetDlgItemTextA
GetMessageW
SetActiveWindow
CreateAcceleratorTableW
wvsprintfA
CreateDialogIndirectParamW
ActivateKeyboardLayout
IsCharUpperA
CallMsgFilterW
DrawTextA
IsDialogMessageA
GetScrollBarInfo
LoadBitmapA
DdeQueryStringW
DdeGetLastError
CreateDialogParamW
BeginPaint
DdeConnectList
TranslateMDISysAccel
DrawTextExA
BroadcastSystemMessageA
GetSystemMenu
GetClipCursor
MsgWaitForMultipleObjects
GetMonitorInfoW
DestroyCursor
SetClipboardViewer
VkKeyScanA
InsertMenuA
GetDlgItemTextW
DrawIcon
FrameRect
SetMenuItemInfoA
CascadeChildWindows
AppendMenuW
IsCharLowerA
GetWindowTextA
OpenWindowStationW
DdeSetUserHandle
GetClassLongW
GetAltTabInfo
NotifyWinEvent
SendNotifyMessageW
DlgDirSelectComboBoxExA
DrawCaption
CharUpperW
GetWindowModuleFileNameA
GetWindowPlacement
GetWindowLongA
GetClientRect
ScrollWindowEx
ChangeDisplaySettingsA
InsertMenuItemW
SetCaretBlinkTime
FreeDDElParam
SetKeyboardState
SetDeskWallpaper
SetMessageExtraInfo
MapVirtualKeyW
UnhookWindowsHook
CloseClipboard
GetComboBoxInfo
GetListBoxInfo
ToUnicodeEx
GetKeyboardLayoutList
GetQueueStatus
GetClassNameA
MessageBoxA
WinHelpW
VkKeyScanW
WinHelpA
BroadcastSystemMessage
LoadMenuIndirectW
UnregisterDeviceNotification
ClipCursor
PeekMessageW
CopyRect
IsZoomed
HideCaret
GetGuiResources
DrawFrameControl
RemovePropW
GetMenuItemCount
CharLowerW
CallMsgFilter
PostMessageW
DefWindowProcA
EndDialog
IsDialogMessage
InSendMessage
MapVirtualKeyExA
MoveWindow
TrackPopupMenuEx
SetCaretPos
EnumWindowStationsW
EnumDisplaySettingsExW
UnregisterClassW
GetCaretPos
OpenIcon
RemovePropA
GetClassInfoW
DdeKeepStringHandle
CharPrevExA
GetClipboardViewer
GetInputState
SetPropA
OpenDesktopA
LoadAcceleratorsW
TrackMouseEvent
MessageBoxIndirectW
IsCharAlphaNumericW
DdeCreateStringHandleA
RedrawWindow
SetCursor
UnloadKeyboardLayout
FindWindowExA
DragObject
MapWindowPoints
CharLowerBuffA
DdeCreateStringHandleW
GetDlgItemInt
DrawFocusRect
OpenWindowStationA
CallMsgFilterA
GetScrollRange
InvalidateRgn
ChildWindowFromPoint
DefFrameProcA
EnumPropsA
LockWindowUpdate
SetPropW
GetKeyState
ClientToScreen
SetRectEmpty
IsClipboardFormatAvailable
GetAsyncKeyState
EndMenu
GetWindowTextLengthA
LoadKeyboardLayoutA
BeginDeferWindowPos
GetSystemMetrics
DefMDIChildProcW
BroadcastSystemMessageW
GetPriorityClipboardFormat
SetLastErrorEx
SendMessageTimeoutA
SetMenuInfo
GetUserObjectInformationW
DefWindowProcW
PtInRect
GetFocus
BringWindowToTop
CreateCursor
ShowCursor
GetUserObjectInformationA
SetWindowContextHelpId
ModifyMenuW
GetMessageExtraInfo
ShowWindowAsync
InSendMessageEx
IsIconic
EditWndProc
DdeCmpStringHandles
DrawTextExW
DdeDisconnect
InsertMenuItemA
DdeInitializeA
SendMessageW
ShowCaret
GetMenuContextHelpId
DestroyAcceleratorTable
SetWindowTextA
IsWindowEnabled
GetTabbedTextExtentW
SetMenuItemInfoW
TrackPopupMenu
GetAncestor
SystemParametersInfoA
CharUpperA
CreateWindowStationW
GetTitleBarInfo
CreateIconFromResourceEx
VkKeyScanExA
DdeFreeStringHandle
comdlg32
LoadAlterBitmap
PrintDlgA
PageSetupDlgW
ChooseFontA
ChooseColorW
kernel32
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapReAlloc
HeapAlloc
HeapFree
VirtualAlloc
GetFileInformationByHandle
GetQueuedCompletionStatus
WaitForMultipleObjectsEx
lstrcmpiW
EnumDateFormatsExW
WriteConsoleA
GetTempPathW
GetPrivateProfileSectionNamesW
WriteProfileStringA
GetNumberFormatW
GetConsoleTitleW
ReadFile
SetCurrentDirectoryA
WideCharToMultiByte
ReadConsoleOutputW
SetConsoleTitleA
GlobalUnfix
GetCommandLineW
SetEvent
ReleaseSemaphore
WaitForSingleObject
WaitForSingleObjectEx
GetEnvironmentStrings
FoldStringA
GetSystemDirectoryA
FindResourceA
GetConsoleCursorInfo
EnumSystemCodePagesW
FileTimeToLocalFileTime
SleepEx
EnumTimeFormatsA
WriteConsoleW
RtlZeroMemory
LocalFileTimeToFileTime
InterlockedDecrement
GetLocaleInfoW
ReadConsoleOutputA
GlobalFindAtomW
GlobalFlags
WaitCommEvent
GetSystemInfo
GetLargestConsoleWindowSize
Module32Next
Heap32ListNext
EnumDateFormatsA
LocalAlloc
OpenWaitableTimerA
WritePrivateProfileSectionW
CreateMutexA
FileTimeToDosDateTime
VirtualProtect
DisconnectNamedPipe
HeapUnlock
GetProcessPriorityBoost
WriteFileGather
TlsGetValue
FillConsoleOutputAttribute
FlushViewOfFile
SetConsoleCursorInfo
EnumResourceTypesW
FindCloseChangeNotification
GetLogicalDriveStringsA
GetStringTypeW
GetPrivateProfileStructW
SetLastError
DeleteFileA
ReadConsoleInputW
HeapDestroy
SetConsoleOutputCP
GetEnvironmentVariableW
WriteConsoleInputW
lstrcmpi
TlsFree
RtlFillMemory
DeleteCriticalSection
lstrcpyA
ResumeThread
lstrcpyW
InterlockedCompareExchange
GetPrivateProfileIntA
GlobalFree
GetPrivateProfileStructA
GetStartupInfoA
SetConsoleCursorPosition
GetFileAttributesExW
GetModuleFileNameW
GlobalWire
IsValidLocale
SetVolumeLabelW
WriteProcessMemory
IsDebuggerPresent
GetSystemPowerStatus
Heap32Next
CreatePipe
SetLocaleInfoW
VirtualProtectEx
GetDateFormatW
GetEnvironmentStringsA
GetComputerNameW
MoveFileExA
TransmitCommChar
GetShortPathNameW
WritePrivateProfileSectionA
GetSystemDefaultLangID
InterlockedIncrement
RtlMoveMemory
lstrlenA
GetProcessHeap
SetThreadPriorityBoost
SetThreadAffinityMask
HeapValidate
Heap32First
GetWindowsDirectoryW
FreeLibrary
GetCalendarInfoA
CreateWaitableTimerA
Toolhelp32ReadProcessMemory
lstrcmpiA
GlobalLock
GetFileSize
FindNextFileA
GetCurrencyFormatA
RemoveDirectoryW
TlsSetValue
SetThreadContext
EnumSystemLocalesA
FlushFileBuffers
GetPrivateProfileSectionNamesA
lstrcatW
GetAtomNameA
ReadFileEx
SetEndOfFile
GlobalMemoryStatus
GlobalHandle
DefineDosDeviceW
SetFileTime
GetStartupInfoW
WaitForMultipleObjects
VirtualFreeEx
InitializeCriticalSection
CreateDirectoryW
GetProfileIntW
CreateNamedPipeW
SetConsoleMode
DefineDosDeviceA
FreeEnvironmentStringsA
EnumSystemCodePagesA
WriteFile
GetProfileStringW
Module32First
FindResourceExW
LocalLock
UpdateResourceA
SetConsoleCtrlHandler
GlobalFix
VirtualLock
GetThreadLocale
GetConsoleCP
VirtualUnlock
SuspendThread
GetProfileSectionA
EnumResourceLanguagesA
SetConsoleWindowInfo
Thread32First
MoveFileW
SystemTimeToTzSpecificLocalTime
CreateEventA
CopyFileA
FindFirstFileA
AllocConsole
FreeConsole
SetFilePointer
GlobalGetAtomNameW
IsValidCodePage
CreateDirectoryA
ExpandEnvironmentStringsA
GetProcessVersion
EnumTimeFormatsW
ExitThread
VirtualAllocEx
CreateMailslotW
EnumResourceNamesA
SetEnvironmentVariableW
GetSystemDefaultLCID
GetProcessTimes
OpenMutexA
GetComputerNameA
FormatMessageW
CreateToolhelp32Snapshot
SetLocaleInfoA
FreeLibraryAndExitThread
GetDiskFreeSpaceExA
GetDriveTypeA
SetConsoleTitleW
UnlockFile
FoldStringW
GetProcAddress
CreateFileW
PeekNamedPipe
HeapLock
ReadConsoleInputA
GetTimeZoneInformation
DisableThreadLibraryCalls
GetDiskFreeSpaceA
SetConsoleScreenBufferSize
GetProfileStringA
GlobalUnWire
GetNamedPipeHandleStateW
EnumResourceNamesW
FindAtomA
lstrcat
FindFirstChangeNotificationW
GetSystemTimeAdjustment
GetNumberOfConsoleMouseButtons
EnumSystemLocalesW
FillConsoleOutputCharacterW
GetProfileSectionW
GetDiskFreeSpaceW
ReadDirectoryChangesW
GetProcessHeaps
GetNamedPipeHandleStateA
SetPriorityClass
GetWindowsDirectoryA
ReadProcessMemory
SetThreadPriority
SetEnvironmentVariableA
GetProcessShutdownParameters
UnlockFileEx
SetFileAttributesA
ReadConsoleW
GetConsoleOutputCP
CreateWaitableTimerW
GetProcessAffinityMask
GetTimeFormatW
CopyFileExA
AddAtomA
Sleep
FlushConsoleInputBuffer
OpenProcess
DeleteFiber
GetLogicalDrives
GetThreadPriorityBoost
GetStringTypeExW
LocalFlags
GetMailslotInfo
GetTempFileNameA
FreeResource
GetStdHandle
EnumResourceLanguagesW
FindAtomW
PulseEvent
lstrlen
SetThreadIdealProcessor
GetDriveTypeW
LocalHandle
GetThreadSelectorEntry
GetVersion
FlushInstructionCache
DeleteFileW
SetCriticalSectionSpinCount
lstrlenW
FindFirstFileExW
advapi32
RegSetValueExW
CryptSetProviderW
CryptAcquireContextW
CryptGetDefaultProviderA
RegCreateKeyA
CryptGetProvParam
RegSetValueA
CryptExportKey
RegQueryValueA
RegEnumKeyA
CreateServiceW
RegSetValueW
RegReplaceKeyA
RegEnumKeyExW
InitiateSystemShutdownA
LookupSecurityDescriptorPartsW
RegDeleteValueW
Sections
.text Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE