Static task
static1
Behavioral task
behavioral1
Sample
230875bfa1f9992883c463848e889bb8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
230875bfa1f9992883c463848e889bb8.exe
Resource
win10v2004-20231215-en
General
-
Target
230875bfa1f9992883c463848e889bb8.exe
-
Size
185KB
-
MD5
230875bfa1f9992883c463848e889bb8
-
SHA1
51dbb44b60e741b5ac9176cefa02931edc093f3d
-
SHA256
54aa874e2de6ec5a3fed3a22748bf68ba5b79a53801095ff6a84ad54a5f3cdb8
-
SHA512
5424f0abbdc50be0b497b98aa5a7d161b4afc9edb54a19bd537ebf3f5c69f8199e071da35ce5687246ff4d35351c95403b9ed0eaf9cb3cce02005920460115ef
-
SSDEEP
3072:Wx5uHhUGYSSuaAWCRDoMeiMQ3VMqhMsyj7a4dD7+FFBDufwRyMnZXb:MmaGkdoCqhMzXl7+1rMMZX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 230875bfa1f9992883c463848e889bb8.exe
Files
-
230875bfa1f9992883c463848e889bb8.exe.exe windows:4 windows x86 arch:x86
d029c1782b2a1da05eeee3648d1cca26
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCalendarInfoW
MultiByteToWideChar
DeleteCriticalSection
FindClose
InterlockedCompareExchange
LoadLibraryA
TlsFree
CloseHandle
GetDateFormatW
GetThreadPriority
TlsSetValue
UnhandledExceptionFilter
InterlockedExchange
ReadFile
FreeLibrary
lstrlenW
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
GetProcAddress
GetSystemInfo
GetCurrentProcessId
GetUserDefaultLangID
ReleaseSemaphore
GetCurrentProcess
GetLocaleInfoA
GetTickCount
LocalAlloc
Sleep
GetCurrentDirectoryA
TlsGetValue
GetSystemDefaultLCID
EnumResourceNamesA
lstrcmpW
GlobalLock
GlobalSize
SetCurrentDirectoryA
GetTempPathW
WaitForSingleObject
GetThreadLocale
GetProfileStringW
GetFileSize
IsDebuggerPresent
FindNextFileA
GetCurrentThreadId
IsProcessorFeaturePresent
FindFirstFileA
GetTimeFormatA
CreateFileA
GetFileTime
GlobalFree
CreateSemaphoreA
GetDateFormatA
InitializeCriticalSection
GetACP
GlobalAlloc
GetLastError
InterlockedIncrement
GetLocalTime
DeleteFileW
GetCurrentThread
SetThreadPriority
ExitProcess
EnterCriticalSection
GetVersionExA
QueryPerformanceCounter
GlobalUnlock
ReleaseMutex
WideCharToMultiByte
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
TerminateProcess
LeaveCriticalSection
GetSystemDirectoryA
CreateMutexA
GetEnvironmentVariableW
GetTimeFormatW
RaiseException
gdi32
StrokePath
CloseFigure
GetWorldTransform
GetClipBox
StartDocW
SetWorldTransform
GetObjectA
SetMiterLimit
SetDIBits
FillPath
ModifyWorldTransform
GetCurrentObject
SelectObject
CreatePatternBrush
SelectClipPath
IntersectClipRect
SaveDC
ExtCreatePen
GetDIBColorTable
LineTo
SetPolyFillMode
ExtEscape
SetBrushOrgEx
ExtSelectClipRgn
MoveToEx
Escape
GetRgnBox
CreateICW
SetStretchBltMode
StretchDIBits
BeginPath
OffsetRgn
ResetDCW
GetGraphicsMode
Rectangle
CombineRgn
CreatePolyPolygonRgn
GetRegionData
GetDeviceCaps
RealizePalette
RestoreDC
DeleteDC
CreateDCW
CreateRectRgn
PatBlt
BitBlt
CreateBrushIndirect
EqualRgn
SetGraphicsMode
PolyBezierTo
EndPath
AbortDoc
EndDoc
DeleteObject
GetStockObject
CreateCompatibleBitmap
CreateCompatibleDC
EndPage
CreateBitmap
GetViewportOrgEx
CreateDIBSection
SelectClipRgn
StartPage
PolylineTo
SelectPalette
SetROP2
CreatePalette
StretchBlt
PolyDraw
shlwapi
PathRemoveFileSpecA
PathAppendA
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
msimg32
AlphaBlend
ole32
OleUninitialize
CreateILockBytesOnHGlobal
CoTaskMemFree
CLSIDFromProgID
OleIsCurrentClipboard
CoRetireServer
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
OleFlushClipboard
CoRevokeClassObject
CoUninitialize
CoCreateInstance
StgOpenStorageOnILockBytes
CoFreeUnusedLibraries
CoInitialize
CoGetClassObject
CoRegisterMessageFilter
OleInitialize
CLSIDFromString
user32
DefWindowProcA
GetSystemMetrics
GetDC
ReleaseDC
GetActiveWindow
ScrollWindowEx
RegisterClassA
GetMonitorInfoA
SetWindowPos
CreateWindowExA
SetActiveWindow
MonitorFromWindow
GetWindowRect
EnumDisplayMonitors
MonitorFromPoint
DestroyWindow
LoadCursorA
GetDesktopWindow
LoadIconA
OffsetRect
CharNextW
GetClientRect
WindowFromDC
UnregisterClassA
Sections
.text Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ