Static task
static1
Behavioral task
behavioral1
Sample
40c7dc8fcfaffd36aa7f24409664cef1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
40c7dc8fcfaffd36aa7f24409664cef1.exe
Resource
win10v2004-20231215-en
General
-
Target
40c7dc8fcfaffd36aa7f24409664cef1
-
Size
4.4MB
-
MD5
40c7dc8fcfaffd36aa7f24409664cef1
-
SHA1
8ac105338fb5f9817ab763b7762628636cf7d1b6
-
SHA256
80c6464fafb7bbec1cd9be67dc0e3fec42b7762403232a1a62e42ce839cb3295
-
SHA512
fb41e3b007690ab8089a217c85e28ee572dc5174bec0f509a0b8c54d2e86591cb145d7fc69dc22098d7fa3ec5921a23399c9b0a2d7e404762650df792133017e
-
SSDEEP
98304:eraaWWxMqYj0HL5CQWaWEFZX7IzgoqVaOewDLwhzXXXXcVX7BZe:QaaWQYbCFN+gAwDLwhye
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40c7dc8fcfaffd36aa7f24409664cef1
Files
-
40c7dc8fcfaffd36aa7f24409664cef1.exe windows:5 windows x86 arch:x86
72385ead3e40447ff085769d559d2e80
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
PlaySoundA
user32
IsWindowVisible
FindWindowExA
GetWindowThreadProcessId
GetSystemMenu
DrawMenuBar
EnableScrollBar
SetScrollInfo
EndPaint
BeginPaint
PostQuitMessage
DestroyMenu
DestroyWindow
DefWindowProcA
MessageBoxA
EnableMenuItem
GetWindowTextA
GetWindowTextLengthA
SetFocus
RemovePropA
GetPropA
SetPropA
ClientToScreen
GetForegroundWindow
PostMessageA
GetWindowRgn
DestroyCursor
SubtractRect
MapVirtualKeyExA
IsCharLowerA
GetDoubleClickTime
CharUpperBuffA
CopyIcon
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetUpdateRect
FrameRect
IsClipboardFormatAvailable
SetMenuDefaultItem
WaitMessage
IsMenu
UpdateLayeredWindow
UnionRect
MonitorFromPoint
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
GetNextDlgGroupItem
GetIconInfo
HideCaret
InvertRect
GetMenuDefaultItem
LockWindowUpdate
BringWindowToTop
SetCursorPos
SetRect
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
DrawFrameControl
DrawEdge
DrawIconEx
DrawStateA
MessageBeep
ReleaseCapture
SetCapture
LoadMenuW
WindowFromPoint
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
OffsetRect
IsRectEmpty
CopyImage
CharUpperA
UnregisterClassA
PostThreadMessageA
RealChildWindowFromPoint
LoadCursorW
ModifyMenuA
GetMenu
DispatchMessageA
TranslateMessage
GetMessageA
SetClassLongA
CreateWindowExA
SetMenu
AppendMenuA
CreateMenu
RegisterClassA
LoadIconA
LoadBitmapW
SetWindowPos
wsprintfA
GetClassNameA
LoadCursorA
SetCursor
CloseDesktop
OpenDesktopA
SetWindowLongA
UpdateWindow
SetWindowTextW
GetWindowLongA
DestroyIcon
FindWindowA
KillTimer
GetActiveWindow
IsWindow
DeleteMenu
GetMenuItemCount
InsertMenuA
SystemParametersInfoA
SetForegroundWindow
GetCursorPos
ShowWindow
InvalidateRect
GetSysColor
DrawIcon
GetSystemMetrics
IsIconic
GetClientRect
SetLayeredWindowAttributes
EnumDisplayMonitors
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetWindowRect
ReleaseDC
GetDC
SetTimer
SetRectEmpty
GetSysColorBrush
MapVirtualKeyA
GetKeyNameTextA
NotifyWinEvent
DrawFocusRect
IntersectRect
MapDialogRect
GetAsyncKeyState
MoveWindow
SetWindowTextA
IsDialogMessageA
GetMessagePos
CheckDlgButton
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetDesktopWindow
CreatePopupMenu
LoadImageA
SendMessageA
LoadIconW
EnableWindow
RegisterWindowMessageA
ValidateRect
PeekMessageA
GetKeyState
CallNextHookEx
SetWindowsHookExA
RemoveMenu
GetSubMenu
GetMenuItemID
GetMenuStringA
GetMenuState
RegisterClipboardFormatA
IsWindowEnabled
GetLastActivePopup
GetParent
UnhookWindowsHookEx
EndDialog
GetNextDlgTabItem
GetDlgItem
CreateDialogIndirectParamA
SetActiveWindow
FillRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ScreenToClient
GetWindowDC
CopyRect
InflateRect
GetMenuItemInfoA
CheckMenuItem
GetFocus
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ShowOwnedPopups
GetWindow
PtInRect
CallWindowProcA
GetDlgCtrlID
GetWindowPlacement
SetWindowPlacement
GetScrollInfo
DeferWindowPos
EqualRect
AdjustWindowRectEx
GetClassInfoA
GetClassInfoExA
RedrawWindow
ShowScrollBar
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
TrackPopupMenu
ScrollWindow
MapWindowPoints
GetMonitorInfoA
MonitorFromWindow
kernel32
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
GetCPInfo
GetOEMCP
FindResourceExW
GetFileAttributesExA
GetFileSizeEx
GetFileTime
SetErrorMode
GetTempFileNameA
GetWindowsDirectoryA
GetNumberFormatA
GetProfileIntA
SearchPathA
lstrcmpiA
HeapFree
DecodePointer
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapAlloc
ExitThread
CreateThread
HeapSetInformation
GetStartupInfoW
RtlUnwind
HeapReAlloc
RaiseException
VirtualAlloc
VirtualQuery
ExitProcess
SetStdHandle
GetFileType
HeapSize
HeapQueryInformation
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
GetStringTypeW
HeapCreate
GetTimeZoneInformation
LCMapStringW
GetStdHandle
IsProcessorFeaturePresent
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetDriveTypeW
GetConsoleCP
GetConsoleMode
CompareStringW
GetCurrentDirectoryW
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
GetACP
GlobalFlags
GetSystemDirectoryW
GetCurrentDirectoryA
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
WriteFile
FileTimeToSystemTime
VirtualProtect
GlobalGetAtomNameA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
lstrcmpW
GlobalAddAtomA
FindResourceA
FreeResource
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetTickCount
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
LoadLibraryExA
CompareStringA
ActivateActCtx
DeactivateActCtx
lstrcmpA
GetModuleHandleW
InterlockedExchange
SetLastError
GlobalSize
FormatMessageA
lstrlenW
MulDiv
SuspendThread
GetCurrentThreadId
SetThreadPriority
OpenEventA
GetLocalTime
GetPrivateProfileSectionA
WritePrivateProfileStringA
GetPrivateProfileSectionNamesA
GetCurrentProcessId
GlobalFree
ReleaseSemaphore
CreateSemaphoreA
GlobalAlloc
GlobalUnlock
GlobalLock
RemoveDirectoryA
WaitForSingleObject
CopyFileA
CreateDirectoryA
DeleteFileA
GetTempPathA
GetFileAttributesA
GetSystemInfo
GetProcAddress
GetModuleHandleA
GetPrivateProfileStringW
GetCurrentProcess
GetCurrentThread
LocalAlloc
lstrlenA
LocalFree
GetPrivateProfileSectionW
GetLocaleInfoA
OutputDebugStringA
GetPrivateProfileIntA
GetVersionExA
GlobalDeleteAtom
lstrcpyA
GetExitCodeThread
GetModuleFileNameA
SetEvent
CreateEventA
Sleep
InterlockedDecrement
FreeLibrary
LoadLibraryA
CloseHandle
ReleaseMutex
CreateMutexA
GetCommandLineA
MultiByteToWideChar
GlobalFindAtomA
GetPrivateProfileStringA
GetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
ResetEvent
WaitForMultipleObjects
ResumeThread
ReadFile
FindClose
CreateFileA
IsValidCodePage
gdi32
ExtFloodFill
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
SetPixelV
GetTextFaceA
GetWindowOrgEx
LPtoDP
Rectangle
SetPixel
StretchBlt
SetDIBColorTable
GetRgnBox
OffsetRgn
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
Polygon
Ellipse
Polyline
CreateEllipticRgn
GetTextColor
GetBkColor
CreatePolygonRgn
CreateRoundRectRgn
CreateDIBSection
EnumFontFamiliesExA
GetTextCharsetInfo
EnumFontFamiliesA
CreateCompatibleBitmap
CreateDIBitmap
DPtoLP
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateHatchBrush
CreateSolidBrush
GetObjectType
SelectPalette
CreateBitmap
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkColor
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
TextOutA
PatBlt
LineTo
MoveToEx
SelectObject
SetTextColor
SetBkMode
GetTextMetricsA
GetStockObject
BitBlt
CreateCompatibleDC
GetObjectA
GetTextExtentPoint32A
DeleteObject
CreatePen
GetDeviceCaps
CreateFontIndirectA
SetPaletteEntries
GetBoundsRect
comdlg32
GetSaveFileNameA
GetFileTitleA
winspool.drv
OpenPrinterA
ClosePrinter
GetPrinterA
DocumentPropertiesA
advapi32
RegDeleteValueA
RegEnumValueA
RegCreateKeyExA
FreeSid
AllocateAndInitializeSid
OpenProcessToken
OpenThreadToken
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetTokenInformation
EqualSid
RegDeleteKeyA
RegEnumKeyExA
RegEnumKeyA
RegQueryValueA
shell32
DragFinish
SHGetDesktopFolder
SHGetFileInfoA
Shell_NotifyIconA
SHGetFolderPathA
SHGetPathFromIDListA
SHBrowseForFolderA
SHAppBarMessage
DoEnvironmentSubstA
ShellExecuteA
ShellExecuteW
SHGetMalloc
SHGetSpecialFolderLocation
DragQueryFileA
comctl32
InitCommonControlsEx
ImageList_GetIconSize
shlwapi
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFileExistsA
ole32
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CoInitialize
DoDragDrop
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitializeEx
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
OleRun
CoCreateInstance
CoUninitialize
oleaut32
VariantCopy
SafeArrayGetLBound
SafeArrayGetUBound
VariantChangeType
SysAllocString
SysFreeString
SysAllocStringLen
SystemTimeToVariantTime
SysStringLen
VarBstrFromDate
SafeArrayGetElement
VariantClear
VariantInit
SafeArrayGetDim
VariantTimeToSystemTime
GetErrorInfo
oledlg
ord8
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
oleacc
AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject
gdiplus
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
msimg32
AlphaBlend
TransparentBlt
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 332KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 195KB - Virtual size: 195KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ