Static task
static1
Behavioral task
behavioral1
Sample
0f1ada39fbf13586539cf691c34e5a8e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0f1ada39fbf13586539cf691c34e5a8e.exe
Resource
win10v2004-20231215-en
General
-
Target
0f1ada39fbf13586539cf691c34e5a8e
-
Size
836KB
-
MD5
0f1ada39fbf13586539cf691c34e5a8e
-
SHA1
340aa85a724eca387d5e76f9868033adcc018cec
-
SHA256
57ebe41c389dc6cdd973274d6bba8289b3269bdb52ee9013ad2c9bb98ae7dc2f
-
SHA512
73854731841c9ca502f1e6347d7d8074c91fe2414817a3f01f3d1a520ddc4c2501bbda82e8e6708312371fef6f41a72ada74b96f0511baacfab4feae3d6c6a8e
-
SSDEEP
24576:lXTvLi9yj9BLsuOrfssfrnD1I1YYNb1oLf:BTrLLsuOTvrD1IWwCLf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f1ada39fbf13586539cf691c34e5a8e
Files
-
0f1ada39fbf13586539cf691c34e5a8e.exe windows:5 windows x64 arch:x64
81bb2ad6fd27cdbab77fe91fc0b47745
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetModuleHandleW
SetErrorMode
RtlLookupFunctionEntry
RtlUnwindEx
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
RaiseException
RtlPcToFileHeader
HeapFree
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapReAlloc
HeapQueryInformation
HeapSize
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
GetStdHandle
HeapSetInformation
HeapCreate
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
CreateFileW
SetEndOfFile
FlushFileBuffers
SetFilePointer
ReadFile
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetModuleFileNameW
FormatMessageA
LocalFree
MulDiv
GetFileAttributesA
GlobalFree
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
lstrcmpA
GlobalAlloc
FreeResource
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
CompareStringA
lstrcmpW
GetVersionExA
GlobalLock
GlobalUnlock
GetModuleHandleA
GlobalGetAtomNameA
GlobalAddAtomA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError
SetLastError
FindResourceA
LoadResource
LockResource
SizeofResource
LoadLibraryA
GetProcAddress
Sleep
DeleteFileA
GetCurrentProcess
SetPriorityClass
GetCurrentThread
GetProcessHeap
SetThreadPriority
ExitProcess
IsDebuggerPresent
GetCurrentProcessId
OpenProcess
CheckRemoteDebuggerPresent
CreateFileA
WriteFile
InitializeCriticalSectionAndSpinCount
CloseHandle
user32
UnregisterClassA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassLongPtrA
SetPropA
GetPropA
RemovePropA
GetFocus
GetWindowTextA
GetForegroundWindow
DispatchMessageA
GetTopWindow
DestroyWindow
GetWindowLongPtrA
SetWindowLongPtrA
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
MessageBoxA
GetClassInfoExA
RegisterClassA
PtInRect
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetClassNameA
GetSysColor
ReleaseDC
DestroyMenu
WinHelpA
SetFocus
GetWindowThreadProcessId
IsWindowEnabled
GetDlgItem
GetDlgCtrlID
GetKeyState
LoadIconA
SetCursor
PeekMessageA
GetCapture
SetActiveWindow
IsWindowVisible
UpdateWindow
IsIconic
GetClassInfoA
CopyRect
GetLastActivePopup
PostMessageA
SetMenu
GetDesktopWindow
ShowWindow
GetWindow
AdjustWindowRectEx
SetWindowPos
GetClientRect
GetWindowLongA
IsWindow
EnableWindow
GetDC
ClientToScreen
GrayStringA
GetActiveWindow
CreateWindowExA
GetParent
GetMenuItemCount
GetSubMenu
GetMenuItemID
SendMessageA
GetMenu
LoadCursorA
GetSysColorBrush
EndPaint
BeginPaint
DrawTextExA
DrawTextA
TabbedTextOutA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
gdi32
SetMapMode
DeleteObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
RestoreDC
SaveDC
GetDeviceCaps
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
shell32
SHChangeNotify
ShellExecuteA
shlwapi
PathFindExtensionA
PathFindFileNameA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
VariantInit
VariantChangeType
VariantClear
Sections
.text Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 530KB - Virtual size: 554KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ