Static task
static1
Behavioral task
behavioral1
Sample
22ec8f54bafa6509c77fa859ab692a70.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
22ec8f54bafa6509c77fa859ab692a70.exe
Resource
win10v2004-20231222-en
General
-
Target
22ec8f54bafa6509c77fa859ab692a70
-
Size
588KB
-
MD5
22ec8f54bafa6509c77fa859ab692a70
-
SHA1
f04966828b4cf664008353f829ef5849479471a2
-
SHA256
ceb0349bfbe47a8bca8571eac8fd63452f42988bcfbfb6ab09e8a36e2c7ed73a
-
SHA512
8bd6fdfaacd257f75255db276bd428e29d9a9eb376caff86c337a5a8fd5c33cf8a9482156d24b8a15e1d813f70f200b020cec83f09c9a5b5604e20de3f98e79d
-
SSDEEP
12288:whiFcWjlJA3cx/JXghx6KJ8XIy52DLySRB82WqIC+XrpBPBu:wg/jvG0/JXovJ8YNd82Wqz+7p1B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22ec8f54bafa6509c77fa859ab692a70
Files
-
22ec8f54bafa6509c77fa859ab692a70.exe windows:4 windows x86 arch:x86
e7bc1193935fc509c6d7c332ff2c662c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_LoadImageA
ImageList_Destroy
ImageList_GetIcon
ImageList_AddIcon
DrawStatusText
ImageList_LoadImageW
ImageList_SetBkColor
DrawStatusTextA
ImageList_DragMove
InitMUILanguage
GetEffectiveClientRect
ImageList_DragLeave
InitCommonControlsEx
CreateStatusWindow
ImageList_SetOverlayImage
CreateToolbarEx
ImageList_GetImageInfo
ImageList_Draw
ImageList_SetDragCursorImage
user32
ShowWindow
CallNextHookEx
FindWindowExW
GetUpdateRect
OpenClipboard
SetWindowRgn
wsprintfA
HideCaret
DdeQueryStringW
EnumDisplaySettingsW
DdeInitializeW
CharUpperBuffW
LoadBitmapW
GetMenuItemCount
CharLowerBuffA
IsClipboardFormatAvailable
WindowFromDC
UnregisterDeviceNotification
VkKeyScanW
CreateCursor
RealChildWindowFromPoint
SendDlgItemMessageA
RealGetWindowClass
RegisterClassA
AdjustWindowRect
CreateIcon
TabbedTextOutW
CreateWindowStationW
EnableScrollBar
RegisterClassW
DefWindowProcA
CreateWindowExW
DestroyIcon
SetMenu
GetCursor
CharUpperBuffA
MessageBeep
GetMessagePos
OpenDesktopA
LoadAcceleratorsA
GrayStringW
ImpersonateDdeClientWindow
DefWindowProcW
SetProcessWindowStation
RemovePropW
ScrollWindow
SendNotifyMessageA
DragDetect
GetMenuContextHelpId
InSendMessageEx
DdeNameService
DlgDirListComboBoxA
RegisterClassExA
DrawTextExA
DestroyWindow
PaintDesktop
ChangeClipboardChain
GetWindowLongW
MapDialogRect
MessageBoxA
CreatePopupMenu
SystemParametersInfoW
kernel32
InterlockedIncrement
DeleteCriticalSection
SetFilePointer
LCMapStringA
GetTickCount
GetTimeZoneInformation
GetStringTypeW
GetStartupInfoA
GetCommandLineA
TerminateProcess
GetModuleHandleA
LeaveCriticalSection
GetVersion
HeapCreate
FreeEnvironmentStringsA
EnterCriticalSection
GetProcAddress
GetCommandLineW
GetCPInfo
GetModuleFileNameW
GetLocalTime
TlsAlloc
GetSystemTime
SetLastError
ExitProcess
SetEnvironmentVariableA
GetEnvironmentStrings
InitializeCriticalSection
GlobalGetAtomNameA
GetModuleFileNameA
TlsFree
QueryPerformanceCounter
FreeEnvironmentStringsW
SetHandleCount
GetCurrentThread
GetProfileStringA
HeapFree
GetCurrentProcessId
VirtualFree
InterlockedExchange
HeapReAlloc
RtlUnwind
GetDiskFreeSpaceExW
GetStartupInfoW
SetConsoleScreenBufferSize
CreateMutexA
GetCurrentProcess
VirtualQuery
WriteFile
IsBadWritePtr
InterlockedDecrement
FlushFileBuffers
GetCurrentThreadId
GetVolumeInformationW
HeapAlloc
GetEnvironmentStringsW
TlsGetValue
CloseHandle
MultiByteToWideChar
GetStringTypeA
TlsSetValue
GetFileType
GetSystemTimeAsFileTime
LCMapStringW
LoadLibraryA
VirtualAlloc
GetLastError
HeapDestroy
ReadFile
SetStdHandle
VirtualFreeEx
UnhandledExceptionFilter
CreateRemoteThread
GetStdHandle
WideCharToMultiByte
WriteConsoleOutputCharacterA
CompareStringW
SetConsoleTitleA
CompareStringA
OpenMutexA
shell32
DoEnvironmentSubstA
ShellExecuteExW
Sections
.text Size: 200KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 248KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ