Static task
static1
Behavioral task
behavioral1
Sample
374ac67e3da63c07ef250736f9578970.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
374ac67e3da63c07ef250736f9578970.exe
Resource
win10v2004-20231215-en
General
-
Target
374ac67e3da63c07ef250736f9578970
-
Size
511KB
-
MD5
374ac67e3da63c07ef250736f9578970
-
SHA1
5773669593b4968e9307a74b525ede316089745f
-
SHA256
113b78495d9a921ba72ca9c57e368388fab85865eb3d6e80e5d5f7c87ab8a725
-
SHA512
8319d4117ba7a87fdd186a0b58041504e2181d0876ef79af269780c1c84489053ad30e01e5aee348ae064a0ba7d4dc223ac615e588f7d2ea51005930eabddd48
-
SSDEEP
6144:m1tq8NbUipau39pjGkGSKRO1u0vogRZkflCbk+00qX9Gb6esgD5at1TdLS5EzzI9:mDguNcklK040VbSlCl0lg5suuz0Wjzp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 374ac67e3da63c07ef250736f9578970
Files
-
374ac67e3da63c07ef250736f9578970.exe windows:4 windows x86 arch:x86
b80a8f2db16b916e67669f40c63d883a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseColorW
gdi32
PolyTextOutA
CreateFontIndirectW
CreateColorSpaceW
CreateDIBitmap
GetROP2
GetMetaFileW
GetColorSpace
SetBkColor
user32
CheckRadioButton
DdeCreateStringHandleW
SetPropA
RegisterClassA
SetClipboardData
CountClipboardFormats
IsCharAlphaW
SetMenuDefaultItem
EnableWindow
AdjustWindowRectEx
BroadcastSystemMessage
RegisterClassExA
GetProcessWindowStation
TabbedTextOutA
InsertMenuItemA
DrawTextA
EnumDisplaySettingsW
SetClassLongA
MapVirtualKeyExW
GetSystemMenu
GetMessageTime
InsertMenuA
CallWindowProcW
CreateWindowExW
wininet
GopherGetLocatorTypeW
RetrieveUrlCacheEntryStreamW
UpdateUrlCacheContentPath
HttpSendRequestA
HttpOpenRequestA
GetUrlCacheEntryInfoW
HttpAddRequestHeadersW
InternetSetOptionExW
InternetSetDialState
kernel32
GetStdHandle
LocalLock
GetModuleHandleA
SetUnhandledExceptionFilter
GetTimeZoneInformation
TlsSetValue
SetFilePointer
InterlockedExchange
DeleteCriticalSection
GetConsoleMode
FreeEnvironmentStringsW
LocalReAlloc
CreateWaitableTimerA
VirtualAlloc
FindFirstFileA
GetOEMCP
GetConsoleOutputCP
lstrcat
WideCharToMultiByte
RtlUnwind
FindResourceExW
GetProcAddress
SetLocalTime
WriteConsoleW
InterlockedIncrement
SetEnvironmentVariableA
CreateSemaphoreA
IsDebuggerPresent
CreateMutexA
GetCurrentThreadId
GetUserDefaultLCID
GetCPInfo
GetConsoleCP
FileTimeToSystemTime
LCMapStringA
ReadFile
GetTickCount
SetConsoleCtrlHandler
WriteFile
CreateFileA
CompareStringW
InitializeCriticalSection
GetCurrentProcessId
FreeLibrary
HeapCreate
GetFileType
TlsGetValue
HeapDestroy
TlsAlloc
GetPrivateProfileSectionA
VirtualFree
ExpandEnvironmentStringsA
GetVolumeInformationA
GetStringTypeW
TlsFree
GetProcessHeap
WriteConsoleA
GetStringTypeA
InterlockedDecrement
HeapFree
GetEnvironmentStrings
IsValidLocale
SetStdHandle
LCMapStringW
GetSystemTimeAsFileTime
RemoveDirectoryA
FreeEnvironmentStringsA
LoadLibraryA
MultiByteToWideChar
HeapReAlloc
Sleep
EnterCriticalSection
SetConsoleCursorPosition
SetHandleCount
CloseHandle
QueryPerformanceCounter
GetACP
HeapSize
GetCommandLineA
GetEnvironmentStringsW
OpenMutexA
FlushFileBuffers
ExitProcess
GetLocaleInfoA
LeaveCriticalSection
GetTimeFormatA
GetCurrentThread
VirtualQuery
GetDateFormatA
UnhandledExceptionFilter
GetModuleFileNameA
GetLocaleInfoW
HeapAlloc
CompareStringA
GetCurrentProcess
GetVersionExA
SetLastError
IsValidCodePage
GetCompressedFileSizeA
TerminateProcess
GetStartupInfoA
GetLastError
EnumSystemLocalesA
comctl32
InitCommonControlsEx
shell32
ShellAboutW
SHEmptyRecycleBinA
SHGetFileInfoW
ShellExecuteA
SHGetSpecialFolderLocation
Sections
.text Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ