Static task
static1
Behavioral task
behavioral1
Sample
0de662501ab7dd9645d95c5ec5d2885f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0de662501ab7dd9645d95c5ec5d2885f.exe
Resource
win10v2004-20231215-en
General
-
Target
0de662501ab7dd9645d95c5ec5d2885f
-
Size
640KB
-
MD5
0de662501ab7dd9645d95c5ec5d2885f
-
SHA1
b410789c9640d5ee68eaba0d6df12eb6e9a944cb
-
SHA256
dd28d96923edb26cdb9cf1ea8e093bd6a720372e68688d9283d5f84f9d64cc49
-
SHA512
51ca4a1b5206001e06868e4034dec36d515fa2a9044ecbf34cd2a5e6c9d1ff1908c3fcbe6cb144a89d2f6fcf9d66adf5d2612087b266617b50a0f5e9a0feea0e
-
SSDEEP
12288:MtOXF5sdWnnUe+GTPvuxquAofIKIYUMBhrVk7pWlXkag6QaPAhMaH5b:Mtq5sdWn6GTPvKuOIKNUMKFUD9PWPZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0de662501ab7dd9645d95c5ec5d2885f
Files
-
0de662501ab7dd9645d95c5ec5d2885f.exe windows:4 windows x86 arch:x86
5a433131834229e305493178a513ba57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ChangeMenuW
SetMenuContextHelpId
RegisterClassExA
SetUserObjectInformationA
GetClassInfoExA
BroadcastSystemMessage
DefWindowProcA
SetClassWord
SendDlgItemMessageW
DestroyWindow
EnumWindows
SetClipboardData
WaitForInputIdle
SendIMEMessageExA
VkKeyScanExA
GetMenuItemCount
CheckRadioButton
DrawTextExA
GetClipCursor
SendDlgItemMessageA
IsRectEmpty
CharLowerW
GetSystemMetrics
DdeConnectList
GetClassNameA
SetWindowTextW
GetDCEx
SetPropW
DestroyIcon
DlgDirSelectExW
GetAltTabInfo
GetClipboardFormatNameW
GetQueueStatus
SubtractRect
EndDeferWindowPos
DdeNameService
OpenWindowStationA
SetRectEmpty
SetWindowPos
CopyAcceleratorTableW
SetShellWindow
LookupIconIdFromDirectory
EnumPropsW
DefDlgProcA
RegisterClassA
ChildWindowFromPointEx
MessageBoxIndirectA
LoadStringA
DrawStateA
InternalGetWindowText
EnumWindowStationsW
LoadKeyboardLayoutW
GetMonitorInfoW
BlockInput
CreateMDIWindowA
CreateDialogIndirectParamA
SendMessageW
EndMenu
GetScrollInfo
gdi32
GetCharABCWidthsFloatW
SelectObject
CreateDCA
FillPath
Arc
GetDeviceCaps
OffsetWindowOrgEx
RestoreDC
GetLogColorSpaceW
DeleteMetaFile
CreateFontIndirectA
GetColorAdjustment
PolyPolygon
GetDeviceGammaRamp
Rectangle
CreateDIBSection
AbortPath
ScaleWindowExtEx
GetObjectW
GetColorSpace
CreateDCW
DeleteDC
ExtCreatePen
GetTextExtentPoint32A
kernel32
SetStdHandle
CreateNamedPipeA
lstrcmpA
FindFirstFileW
VirtualLock
GlobalHandle
GetCurrentThread
FindResourceW
TlsGetValue
GetStringTypeW
DosDateTimeToFileTime
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetProcAddress
GetProfileIntW
InterlockedExchange
SetHandleCount
GetShortPathNameA
CreateMutexW
IsValidLocale
CreateProcessW
EnterCriticalSection
GetDiskFreeSpaceW
SetThreadContext
FillConsoleOutputCharacterW
QueryPerformanceCounter
LCMapStringA
GetUserDefaultLCID
TransactNamedPipe
GetCurrentProcessId
CreateFileA
TlsFree
MapViewOfFile
GetFileAttributesW
ReadFile
WideCharToMultiByte
LeaveCriticalSection
GetCPInfo
VirtualQuery
RtlUnwind
VirtualAlloc
VirtualFree
CreateDirectoryW
GetLocaleInfoW
GetCurrentProcess
GetEnvironmentStringsW
FindAtomA
HeapFree
GetDateFormatA
DeleteCriticalSection
GetPrivateProfileSectionW
HeapSize
SetConsoleWindowInfo
GetProcAddress
UnhandledExceptionFilter
TlsAlloc
GetACP
GetOEMCP
SetThreadAffinityMask
FreeEnvironmentStringsA
GetCommandLineA
FindResourceExW
VirtualProtectEx
CompareStringA
GetLastError
InitializeCriticalSection
GetFileType
ExitProcess
IsValidCodePage
GetVersionExA
SetPriorityClass
GetEnvironmentStrings
OpenWaitableTimerA
EnumSystemLocalesA
FlushFileBuffers
GetSystemTime
RemoveDirectoryW
RaiseException
SetLastError
ReadConsoleW
FlushConsoleInputBuffer
FindFirstFileExW
FindClose
SuspendThread
SetLocaleInfoW
UnmapViewOfFile
GetTickCount
CreateMutexA
HeapDestroy
ResumeThread
GetTimeFormatA
LoadLibraryA
GetLogicalDriveStringsW
DeleteFileW
LCMapStringW
GetSystemInfo
GetStringTypeA
GetCurrencyFormatW
GlobalAddAtomA
GlobalFindAtomA
SetFilePointer
GetTimeZoneInformation
SetCurrentDirectoryW
TerminateProcess
HeapCreate
GetComputerNameA
GetCurrentThreadId
MultiByteToWideChar
FreeEnvironmentStringsW
LocalUnlock
SetFileAttributesW
VirtualProtect
GetStdHandle
GetLocaleInfoA
GetSystemDirectoryW
TlsSetValue
IsBadWritePtr
WriteFile
SetEnvironmentVariableA
HeapAlloc
GetStartupInfoA
GetTimeFormatW
EnumResourceTypesW
GetSystemTimeAsFileTime
LoadLibraryExA
HeapReAlloc
OpenMutexA
GetFullPathNameW
CompareStringW
MapViewOfFileEx
comctl32
ImageList_DragMove
ImageList_ReplaceIcon
ImageList_Duplicate
CreatePropertySheetPage
ImageList_Merge
ImageList_DrawEx
CreatePropertySheetPageW
DestroyPropertySheetPage
CreateToolbarEx
InitCommonControlsEx
ImageList_GetIconSize
CreateToolbar
ImageList_SetFlags
ImageList_GetIcon
ImageList_GetImageRect
CreateMappedBitmap
Sections
.text Size: 184KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ