Static task
static1
Behavioral task
behavioral1
Sample
1721e973602afc75bee11206b3ca2a04.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1721e973602afc75bee11206b3ca2a04.exe
Resource
win10v2004-20231215-en
General
-
Target
1721e973602afc75bee11206b3ca2a04
-
Size
327KB
-
MD5
1721e973602afc75bee11206b3ca2a04
-
SHA1
c1c7db503fb3187b1b107a0f522f85602a1bf105
-
SHA256
7f5430c0d524a2f74aaac9b91c3cd734b69f914bc40069d2c1a6e89011bfccf4
-
SHA512
e5cd56af6ffe12aa6c21ad68adf6fa3d46cf643cee78a09faa5b1ddc45aafddc44dda9ba276354318430edef9a4d5ac54e1aff05d5f686123c5f7a125c3fc198
-
SSDEEP
6144:sHsKc86VopdwwOLTpvQpXdkWPpi4vBiTOyDew+1D5KJpMkzma88o4VTS:sHsvorATZLMi8YPKOJmkP854RS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1721e973602afc75bee11206b3ca2a04
Files
-
1721e973602afc75bee11206b3ca2a04.exe windows:4 windows x86 arch:x86
f4cd5c95bbfc94cc7f8e9e6cba2c785f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetDefaultCommConfigA
Beep
CreateSemaphoreW
SetPriorityClass
BuildCommDCBAndTimeoutsA
ReadProcessMemory
GetLongPathNameW
IsDBCSLeadByte
GetHandleInformation
SetConsoleMode
GetStartupInfoW
CompareFileTime
EnumDateFormatsA
DeleteFileW
QueryPerformanceFrequency
GetMailslotInfo
VerLanguageNameA
EnumSystemLocalesA
FileTimeToSystemTime
LocalFree
WriteProfileStringA
EnumCalendarInfoA
SetDefaultCommConfigW
SetThreadPriorityBoost
ConvertDefaultLocale
CallNamedPipeA
LocalHandle
FreeConsole
GetProcessPriorityBoost
LocalAlloc
lstrcpyW
Module32Next
PrepareTape
HeapFree
GlobalFix
UnhandledExceptionFilter
lstrcpynA
SetFileAttributesA
DeleteAtom
GetCurrentDirectoryA
CloseHandle
EnumSystemCodePagesW
TerminateProcess
GetNumberFormatW
GetSystemDirectoryW
GetTapeStatus
BackupWrite
SetSystemPowerState
GetCurrentThread
GetAtomNameA
LocalShrink
IsBadHugeWritePtr
OpenWaitableTimerA
MapViewOfFile
SetConsoleWindowInfo
CreateEventA
CreateSemaphoreA
lstrcmpiW
GetSystemDefaultLCID
IsDBCSLeadByteEx
SetConsoleTextAttribute
ScrollConsoleScreenBufferW
GlobalSize
GlobalHandle
CreateMutexW
GetShortPathNameA
LocalReAlloc
CommConfigDialogW
GetDateFormatW
FlushConsoleInputBuffer
SetCalendarInfoA
Sleep
InitAtomTable
GlobalCompact
GetCommProperties
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetLastError
GetWindowsDirectoryA
GetTapePosition
OpenFileMappingA
GetCalendarInfoA
GetPrivateProfileSectionNamesW
GetCurrentThreadId
SetLastError
GetModuleHandleW
GetPrivateProfileSectionW
WritePrivateProfileStringA
FindResourceW
SetFileAttributesW
GetSystemTimeAsFileTime
LoadLibraryA
WriteProfileStringW
GetVersionExA
QueryPerformanceCounter
GetPrivateProfileStringW
GetDiskFreeSpaceA
CreateDirectoryExA
GetLogicalDriveStringsA
WritePrivateProfileStringW
GetProcessShutdownParameters
DeviceIoControl
MultiByteToWideChar
WinExec
GetFullPathNameW
WriteProfileSectionW
GetConsoleCP
FatalExit
GetDriveTypeA
VerLanguageNameW
CreateThread
Heap32Next
TlsFree
GetProfileIntW
WriteFile
Toolhelp32ReadProcessMemory
Thread32Next
OpenFile
FindFirstFileExA
FindCloseChangeNotification
SearchPathW
SetConsoleTitleW
LoadModule
GlobalDeleteAtom
UnlockFile
GetSystemDirectoryA
SetCommTimeouts
IsBadHugeReadPtr
FillConsoleOutputAttribute
GetBinaryTypeA
lstrcpyA
ReadConsoleOutputA
SleepEx
AllocConsole
CreateNamedPipeA
_lwrite
VirtualAllocEx
CreateFiber
GetCommandLineW
ResetEvent
SetUnhandledExceptionFilter
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetCalendarInfoW
GetExitCodeProcess
SetConsoleOutputCP
GetVolumeInformationW
OpenWaitableTimerW
GetCurrencyFormatA
WritePrivateProfileSectionA
ReadConsoleOutputW
GetNumberOfConsoleMouseButtons
OpenSemaphoreA
GetUserDefaultLCID
FreeResource
SetComputerNameW
GetStartupInfoA
GetNumberOfConsoleInputEvents
FindFirstFileA
HeapValidate
InterlockedExchange
GetCPInfoExW
EnumTimeFormatsA
PulseEvent
IsProcessorFeaturePresent
GetDiskFreeSpaceExA
QueryDosDeviceW
SetConsoleScreenBufferSize
OpenEventW
GetProcessTimes
SetEndOfFile
GetLocaleInfoW
ReadConsoleOutputCharacterW
CreateIoCompletionPort
IsBadWritePtr
VirtualQueryEx
DebugBreak
WriteConsoleInputA
VirtualProtectEx
GetThreadLocale
ExpandEnvironmentStringsA
GetStringTypeW
GetLongPathNameA
GetThreadContext
GetThreadPriorityBoost
GlobalAddAtomW
IsBadReadPtr
CopyFileExW
SetThreadContext
TlsSetValue
ReadFileEx
WaitForSingleObject
FindFirstFileExW
EnumCalendarInfoW
EnumSystemLocalesW
GetModuleHandleA
DeleteCriticalSection
SetVolumeLabelA
WideCharToMultiByte
GetBinaryTypeW
GetConsoleOutputCP
GetCommMask
GetTempPathA
CreateToolhelp32Snapshot
SetProcessPriorityBoost
ReadConsoleA
GetStringTypeExA
WriteProcessMemory
FlushFileBuffers
ExitProcess
GetCurrentProcessId
GetDriveTypeW
GetFileSize
TerminateThread
HeapWalk
PeekNamedPipe
GetEnvironmentStringsW
GlobalFree
GetThreadSelectorEntry
GetACP
GetProcAddress
SetEnvironmentVariableA
BuildCommDCBAndTimeoutsW
SetCommState
SetWaitableTimer
Module32First
lstrcmpA
GetUserDefaultLangID
lstrcpynW
ReadFile
MulDiv
CreateWaitableTimerA
SystemTimeToFileTime
WriteConsoleOutputA
GetNamedPipeHandleStateA
QueueUserAPC
CreateNamedPipeW
GetProcessWorkingSetSize
GetCurrentProcess
OpenFileMappingW
WaitForMultipleObjectsEx
MoveFileExA
FreeLibrary
GetPrivateProfileIntA
WriteConsoleOutputAttribute
LCMapStringA
GetOverlappedResult
SetThreadPriority
GetCPInfoExA
GetCommConfig
GetNamedPipeHandleStateW
GetWriteWatch
VirtualLock
DisconnectNamedPipe
GetSystemDefaultLangID
GetTempFileNameW
LoadLibraryW
MoveFileExW
FlushInstructionCache
CreateWaitableTimerW
lstrcmpiA
GetSystemTimeAdjustment
GetCurrentDirectoryW
ResetWriteWatch
SetHandleInformation
GetDiskFreeSpaceW
GetTempPathW
GetEnvironmentVariableW
SetThreadIdealProcessor
LocalSize
CallNamedPipeW
user32
DefMDIChildProcW
EnumWindows
SetLastErrorEx
SetDlgItemTextW
DlgDirSelectComboBoxExW
PtInRect
SendMessageA
TranslateMDISysAccel
DrawMenuBar
LoadImageA
GetDlgItem
GetSubMenu
SetMenuItemBitmaps
EnumPropsW
SetWindowRgn
GetWindowLongW
ShowOwnedPopups
GetWindowWord
DestroyCaret
DispatchMessageW
GetClassLongW
GetMenuItemInfoA
CreateWindowStationA
WaitMessage
EnumWindowStationsW
EnumDesktopWindows
ClipCursor
WinHelpA
PostQuitMessage
EnumChildWindows
DestroyCursor
GetProcessWindowStation
DlgDirSelectComboBoxExA
GetKeyboardState
ChangeMenuW
LockWindowUpdate
IsWindowEnabled
SetMenu
SetClassLongA
GetPriorityClipboardFormat
DialogBoxIndirectParamA
GetClassNameW
SetCapture
OemToCharBuffW
SetWindowsHookExW
LoadImageW
SendMessageW
CharLowerBuffA
SetThreadDesktop
ChangeDisplaySettingsExW
SetMenuItemInfoW
MapDialogRect
CreateMenu
LoadIconW
SetWindowContextHelpId
GetClassNameA
GetUpdateRect
GetKBCodePage
ScreenToClient
CharToOemW
GetParent
RedrawWindow
PostThreadMessageW
MapVirtualKeyA
SetMenuDefaultItem
LoadBitmapW
RegisterWindowMessageW
SetWindowsHookA
GetMessageExtraInfo
OemToCharBuffA
GetShellWindow
IsDialogMessageA
ScrollDC
ReplyMessage
DrawTextExW
EndDeferWindowPos
ScrollWindow
CreateDesktopA
DragObject
GetTabbedTextExtentA
EnumDesktopsW
GetClipboardFormatNameA
GetThreadDesktop
CheckMenuRadioItem
DestroyWindow
GetClassInfoW
SetPropW
CharUpperW
DragDetect
MessageBoxExA
ChangeDisplaySettingsA
SetMessageQueue
EnumPropsExW
GetDlgItemInt
IsCharAlphaW
IsDialogMessageW
SetWindowPos
DlgDirListW
AdjustWindowRectEx
SystemParametersInfoA
IsCharLowerW
ToAscii
GetCursorPos
InvertRect
ShowCursor
VkKeyScanA
ChildWindowFromPoint
CharLowerA
GetDC
GetWindowContextHelpId
GetAsyncKeyState
CharNextW
LoadCursorW
IsIconic
GetScrollRange
ChangeClipboardChain
SwitchToThisWindow
GetWindowTextLengthA
DrawTextExA
CloseClipboard
CreateMDIWindowA
GetClassLongA
GetSysColorBrush
CreatePopupMenu
CopyImage
SetRect
LoadAcceleratorsW
GetDlgItemTextW
LoadMenuIndirectA
FillRect
SendDlgItemMessageA
AdjustWindowRect
ScrollWindowEx
DrawFocusRect
RegisterClassA
VkKeyScanW
ChangeDisplaySettingsW
HideCaret
GetTabbedTextExtentW
LoadKeyboardLayoutW
IsRectEmpty
AttachThreadInput
DrawStateA
CallMsgFilterW
LookupIconIdFromDirectoryEx
SetMessageExtraInfo
GetKeyboardLayoutNameA
DrawIconEx
MapVirtualKeyExA
GetKeyboardType
GetTopWindow
KillTimer
EnableWindow
InternalGetWindowText
LoadBitmapA
IsChild
CheckRadioButton
IsMenu
CreateWindowStationW
UnregisterHotKey
SetFocus
WindowFromDC
LoadIconA
SetSysColors
DrawTextA
PostThreadMessageA
MessageBoxA
PaintDesktop
DefDlgProcW
SetWindowsHookExA
DrawIcon
GetDoubleClickTime
VkKeyScanExA
WindowFromPoint
DlgDirSelectExA
GetWindowThreadProcessId
RemoveMenu
TranslateAcceleratorA
IsCharAlphaA
CreateWindowExA
GetKeyboardLayoutNameW
SendNotifyMessageW
FindWindowA
EnumWindowStationsA
BeginDeferWindowPos
CascadeWindows
SetDoubleClickTime
DeferWindowPos
keybd_event
GetPropA
MapVirtualKeyW
mouse_event
ChangeDisplaySettingsExA
GrayStringW
TileWindows
CreateDialogIndirectParamW
DeleteMenu
SetMenuContextHelpId
CharToOemBuffW
RegisterClipboardFormatA
UnregisterClassA
GetMenuContextHelpId
GetNextDlgGroupItem
ShowScrollBar
GetSystemMenu
GetForegroundWindow
CallNextHookEx
DrawTextW
SetClipboardViewer
EnumPropsExA
OpenDesktopA
GetDlgCtrlID
IsCharAlphaNumericA
CallMsgFilterA
CloseWindow
EnableMenuItem
ToUnicode
LoadMenuIndirectW
CreateAcceleratorTableW
IsWindowVisible
FrameRect
GetScrollInfo
CreateDialogParamW
WaitForInputIdle
GetMenuStringA
HiliteMenuItem
SetMenuItemInfoA
GetWindowTextW
OffsetRect
gdi32
GetWorldTransform
IntersectClipRect
SetAbortProc
ExtFloodFill
FlattenPath
EndPage
GetEnhMetaFileBits
CreatePolygonRgn
GetMetaFileA
GetGlyphOutlineA
SetArcDirection
ColorMatchToTarget
DeleteObject
SetDeviceGammaRamp
GdiFlush
GetBrushOrgEx
EnumICMProfilesA
AnimatePalette
SetMapperFlags
SetTextJustification
GetSystemPaletteUse
CloseMetaFile
PatBlt
CreateCompatibleDC
SetColorSpace
InvertRgn
GetKerningPairsA
GetBitmapDimensionEx
PlayEnhMetaFile
GetGlyphOutlineW
PolyTextOutA
EnumObjects
GetCharWidthFloatA
PolyBezierTo
GetCharacterPlacementW
CreateRectRgnIndirect
GetBkColor
CreateFontIndirectW
GetROP2
CreateHalftonePalette
ExtEscape
GetKerningPairsW
RemoveFontResourceW
CreateSolidBrush
PathToRegion
GetWindowOrgEx
GetCharWidthW
Polygon
GetObjectW
CreateHatchBrush
GetClipRgn
GetViewportExtEx
SelectPalette
GetTextMetricsW
ResetDCA
ChoosePixelFormat
GetBoundsRect
CreateICA
GetNearestColor
Arc
PlayMetaFile
GetTextFaceA
GetTextColor
GetMiterLimit
SetStretchBltMode
SetTextColor
ScaleWindowExtEx
DeleteEnhMetaFile
CreateEllipticRgnIndirect
PlgBlt
ResetDCW
SetPixelFormat
GetSystemPaletteEntries
FloodFill
CreateDiscardableBitmap
CreateRectRgn
CreateMetaFileA
Polyline
CreatePen
CloseEnhMetaFile
GetICMProfileA
RoundRect
EnumEnhMetaFile
EnumFontsW
FillRgn
SetTextAlign
EnumFontsA
EnumFontFamiliesExW
UpdateICMRegKeyA
PolyBezier
CreateFontA
GetEnhMetaFilePaletteEntries
GetObjectType
GetCharABCWidthsFloatW
SetPolyFillMode
GetDeviceGammaRamp
GetTextExtentPoint32W
GetICMProfileW
SetWinMetaFileBits
CloseFigure
SetBitmapBits
GetOutlineTextMetricsA
CreateICW
OffsetClipRgn
GetTextExtentExPointA
GetCurrentPositionEx
CopyEnhMetaFileW
CreateMetaFileW
GetEnhMetaFileA
GetCharWidthFloatW
TextOutA
PolyPolygon
GetMetaFileBitsEx
Chord
CreatePolyPolygonRgn
CreateDIBSection
StartPage
MaskBlt
GetNearestPaletteIndex
GetStockObject
GetEnhMetaFileHeader
ScaleViewportExtEx
CancelDC
ExtSelectClipRgn
comdlg32
FindTextW
PageSetupDlgA
ChooseFontA
GetSaveFileNameA
GetFileTitleA
ChooseColorA
PageSetupDlgW
ReplaceTextA
FindTextA
PrintDlgW
GetSaveFileNameW
advapi32
BuildSecurityDescriptorW
IsValidSecurityDescriptor
ReportEventA
GetExplicitEntriesFromAclW
AdjustTokenGroups
QueryServiceLockStatusW
OpenBackupEventLogW
RegQueryInfoKeyA
RegReplaceKeyA
LookupPrivilegeValueA
GetSecurityDescriptorGroup
NotifyChangeEventLog
ImpersonateSelf
GetSecurityDescriptorOwner
BuildExplicitAccessWithNameW
InitializeSecurityDescriptor
ObjectOpenAuditAlarmA
CryptDuplicateHash
CryptCreateHash
UnlockServiceDatabase
ReadEventLogW
AddAccessDeniedAce
RegSetValueExA
LookupPrivilegeValueW
ObjectCloseAuditAlarmW
ObjectOpenAuditAlarmW
CryptGetProvParam
RegEnumKeyExW
BuildTrusteeWithSidA
ObjectCloseAuditAlarmA
CryptEnumProvidersA
PrivilegedServiceAuditAlarmA
RegDeleteValueA
StartServiceCtrlDispatcherW
RegCreateKeyExA
CloseEventLog
CreateServiceA
EqualSid
CryptVerifySignatureW
CryptExportKey
CryptSetProviderExW
LockServiceDatabase
GetSecurityDescriptorControl
CryptGetDefaultProviderW
GetMultipleTrusteeW
GetUserNameW
StartServiceW
GetAuditedPermissionsFromAclW
AddAccessAllowedAce
CreateProcessAsUserW
MapGenericMask
SetServiceStatus
SetSecurityInfo
RegOpenKeyA
ClearEventLogW
FreeSid
GetMultipleTrusteeOperationW
ChangeServiceConfigA
RegOpenKeyExA
IsValidAcl
LookupAccountSidW
SetNamedSecurityInfoA
CryptAcquireContextW
CryptEnumProviderTypesW
StartServiceCtrlDispatcherA
RegDeleteKeyA
BuildSecurityDescriptorA
ReadEventLogA
BuildImpersonateExplicitAccessWithNameA
RegCreateKeyW
QueryServiceConfigW
GetSecurityDescriptorDacl
RegNotifyChangeKeyValue
PrivilegeCheck
RegEnumKeyW
CryptImportKey
DeleteAce
SetSecurityDescriptorSacl
GetServiceDisplayNameA
LookupPrivilegeDisplayNameA
GetExplicitEntriesFromAclA
ObjectDeleteAuditAlarmW
CryptGetKeyParam
DeleteService
AreAllAccessesGranted
SetPrivateObjectSecurity
RegQueryMultipleValuesA
ClearEventLogA
AddAce
GetServiceKeyNameW
GetTrusteeTypeW
LogonUserA
EnumServicesStatusA
CryptSetProviderExA
GetSidIdentifierAuthority
GetOldestEventLogRecord
GetTrusteeTypeA
SetThreadToken
BuildTrusteeWithNameA
ChangeServiceConfigW
RegUnLoadKeyA
RegGetKeySecurity
EqualPrefixSid
RegLoadKeyA
SetFileSecurityW
RevertToSelf
CryptHashData
QueryServiceLockStatusA
GetSecurityInfo
EnumServicesStatusW
GetNumberOfEventLogRecords
GetUserNameA
QueryServiceObjectSecurity
DuplicateToken
ObjectDeleteAuditAlarmA
LookupSecurityDescriptorPartsW
OpenThreadToken
GetServiceDisplayNameW
shell32
SHGetFileInfoA
SHGetSpecialFolderPathA
SHInvokePrinterCommandW
SHFileOperationA
SHBrowseForFolderA
SHFormatDrive
SHGetInstanceExplorer
SHGetDesktopFolder
ShellExecuteExW
SHAppBarMessage
FindExecutableA
Shell_NotifyIconA
SHAddToRecentDocs
SHGetSpecialFolderPathW
DoEnvironmentSubstA
DragQueryFileA
ExtractAssociatedIconExA
ShellExecuteExA
ord179
SHFileOperationW
SHGetSpecialFolderLocation
ShellAboutW
SHChangeNotify
ExtractAssociatedIconExW
SHGetFileInfoW
ExtractIconW
SHQueryRecycleBinW
msvcrt
_acmdln
_XcptFilter
_exit
strlen
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 279KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE