Static task
static1
Behavioral task
behavioral1
Sample
0ab7ec3a49b7b96ef564ee21c79a26ed.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ab7ec3a49b7b96ef564ee21c79a26ed.exe
Resource
win10v2004-20231215-en
General
-
Target
0ab7ec3a49b7b96ef564ee21c79a26ed
-
Size
652KB
-
MD5
0ab7ec3a49b7b96ef564ee21c79a26ed
-
SHA1
94f413bf4a246c0d971342901aaccb6fcb6df0a9
-
SHA256
e015b76bef3690963ee646ca7c61d2dc19268e4203effcdfdf0f2fd10d6b9995
-
SHA512
dfc962ee970032b24931bd63b3af317b79fde2270c844a1d09494a98e53ac6f07bf412730ec777449f6e8d5792164197912192afe3cb3111f78ab7c769b11838
-
SSDEEP
12288:PDhUSgUNYt2qrHd9Edkoq768d5/WqbhMx8tWkBtJAd0nWSik:PD6SgUNYzdqdkF9bhRw6sk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ab7ec3a49b7b96ef564ee21c79a26ed
Files
-
0ab7ec3a49b7b96ef564ee21c79a26ed.exe windows:4 windows x86 arch:x86
d5477c42de8e014e0acd45ddaee7d92a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdiplus
GdipGetImageThumbnail
GdipDrawImageRectI
GdipCloneImage
GdipImageGetFrameDimensionsCount
GdipDrawImageRect
GdipDisposeImage
GdipCreateTexture
GdipGraphicsClear
GdipLoadImageFromFile
GdipCreateBitmapFromScan0
GdipGetImageWidth
GdipGetImageHeight
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdiplusShutdown
GdipReversePath
GdipCreatePen1
GdipCreatePath
GdipGetPathLastPoint
GdipClonePath
GdipDeletePath
GdipAddPathLine
GdipWidenPath
GdipGetPathPoints
GdipWindingModeOutline
GdipAddPathPath
GdipDeletePen
GdipSetPixelOffsetMode
GdipGetRegionScans
GdipCombineRegionPath
GdipCloneRegion
GdipCombineRegionRegion
GdipDrawCachedBitmap
GdipSetInterpolationMode
GdipCreateCachedBitmap
GdipDeleteMatrix
GdipSetCompositingQuality
GdipFillRectangle
GdipGetWorldTransform
GdipDeleteRegion
GdipGetRegionScansCount
GdipCreateRegionPath
GdipCombineRegionRect
GdipTranslateMatrix
GdipCreateRegionRect
GdipTranslateRegion
GdipSetSmoothingMode
GdipTransformRegion
GdipGetImageGraphicsContext
GdipFillRegion
GdipCreateMatrix
GdipCreateLineBrushFromRect
GdipSetClipRegion
GdipDeleteCachedBitmap
GdipDeleteStringFormat
GdipCreateStringFormat
GdipCreateFromHDC
GdipCreateFontFamilyFromName
GdipDrawString
GdipCreateFont
GdipAlloc
GdipCreateSolidFill
GdipDeleteFontFamily
GdipSetStringFormatAlign
GdipDeleteGraphics
GdipDeleteFont
GdipSetStringFormatLineAlign
GdipCloneBrush
GdipFree
GdipDeleteBrush
kernel32
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
FreeLibrary
LoadLibraryA
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
LCMapStringW
LCMapStringA
LoadLibraryW
WideCharToMultiByte
GetFileType
WriteConsoleW
OutputDebugStringA
WriteFile
GetStdHandle
DebugBreak
GetCurrentThread
SetLastError
TlsFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsGetValue
GetCPInfo
GetOEMCP
GetACP
ExitProcess
GetProcAddress
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapReAlloc
GetModuleFileNameA
FatalAppExitA
RtlUnwind
RaiseException
GetStartupInfoA
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
GetCommandLineA
CloseHandle
OutputDebugStringW
Sleep
FindFirstFileA
FindClose
FindNextFileA
MultiByteToWideChar
ResumeThread
GetSystemTimeAsFileTime
GetModuleFileNameW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsBadReadPtr
HeapValidate
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
CreateThread
ExitThread
SetFilePointer
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
CompareStringA
CompareStringW
GetModuleHandleA
SetEnvironmentVariableA
GetLastError
user32
EndPaint
SetWindowRgn
GetWindowRect
PostQuitMessage
SetForegroundWindow
GetParent
LoadCursorW
SetFocus
BeginPaint
PtInRect
GetDC
TranslateMessage
RegisterClassExW
LoadIconW
InvalidateRect
GetWindowLongW
SetWindowTextW
GetClientRect
PeekMessageW
ReleaseDC
SetWindowLongW
SetWindowPos
GetCursorPos
LoadBitmapW
CreateWindowExW
MessageBoxW
SendMessageW
UpdateWindow
DefWindowProcW
DispatchMessageW
SetCursor
LoadImageW
ShowCursor
SetClassLongW
ShowWindow
MoveWindow
gdi32
CreateCompatibleBitmap
SelectObject
DeleteObject
StretchBlt
DeleteDC
BitBlt
GetStockObject
CreateFontW
Rectangle
SetBkColor
SetTextColor
CreateEllipticRgn
CreateCompatibleDC
winmm
PlaySoundW
shlwapi
PathRemoveFileSpecA
Sections
.text Size: 216KB - Virtual size: 213KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 368KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ