Static task
static1
Behavioral task
behavioral1
Sample
182e2ee791e94db2cb76e32c14f907b4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
182e2ee791e94db2cb76e32c14f907b4.exe
Resource
win10v2004-20231215-en
General
-
Target
182e2ee791e94db2cb76e32c14f907b4
-
Size
570KB
-
MD5
182e2ee791e94db2cb76e32c14f907b4
-
SHA1
fd41bb17525048f1a6e08887d10a0df9197a3bf2
-
SHA256
22de66ddc47e5c4f3c93bcccfa8f6db46ff173504abe03abeebb0e5afbe3055d
-
SHA512
67ed7b968a76ad93ad040d937cfc177da8e96e802764ad2507d29e37ae1f84028020eac3d6254e8677dfbd41aed76d8d75c7e6970cc1c8f9c52188ce5df78e2b
-
SSDEEP
6144:M0GdNOP2uZLbxosOgHrMnJKjAMyPahmroMj3Xy/Kb/9ba72AGtCKVwfIkq1i/pQe:M02+bC+FjAMyUyJiGWCtwfs1i+IShM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 182e2ee791e94db2cb76e32c14f907b4
Files
-
182e2ee791e94db2cb76e32c14f907b4.exe windows:5 windows x86 arch:x86
dee0e5adf2b64b791570cf9e2a6bff48
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FreeLibrary
GetProcAddress
LoadLibraryA
DeleteFileA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
FindFirstFileA
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
GetFileAttributesA
GetLastError
MultiByteToWideChar
WideCharToMultiByte
Sleep
GlobalFree
GlobalAlloc
Beep
CreateThread
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetFullPathNameA
GetModuleHandleA
GetTickCount
user32
SendMessageA
DispatchMessageA
AppendMenuA
CreatePopupMenu
GetCursorPos
DefWindowProcA
EndDialog
TrackPopupMenuEx
TranslateMessage
RegisterWindowMessageA
LoadIconA
SetForegroundWindow
DestroyMenu
PostQuitMessage
RegisterClassExA
GetMessageA
DialogBoxParamA
LoadImageA
SetLayeredWindowAttributes
SetWindowPos
SetWindowLongA
IsDialogMessageA
CopyImage
CreateDialogParamA
DestroyWindow
GetSysColor
LoadCursorA
InsertMenuA
TrackPopupMenu
SendMessageW
SetTimer
CreateWindowExA
GetWindowLongA
GetDlgItem
ShowWindow
MessageBoxA
KillTimer
GetDlgCtrlID
EnableWindow
gdi32
SetBkMode
SetTextColor
GetStockObject
SetBkColor
CreateSolidBrush
CreateFontA
comdlg32
GetOpenFileNameW
shell32
Shell_NotifyIconA
ShellExecuteA
ole32
CoInitializeEx
CLSIDFromProgID
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
SysAllocString
SysFreeString
winmm
PlaySoundA
msvcp90
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPADII@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
wininet
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
InternetReadFile
msvcr90
__CxxFrameHandler3
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
strcpy_s
tolower
strncmp
strncpy_s
isdigit
fseek
ftell
fread
??2@YAPAXI@Z
fclose
fwrite
fopen_s
vsprintf_s
memset
malloc
free
??3@YAXPAX@Z
sscanf_s
Sections
.text Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 490KB - Virtual size: 489KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ