Static task
static1
Behavioral task
behavioral1
Sample
f3351384be8b0f09dffc326f662f9052eed3ef2934021e7d537407b2686053b5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f3351384be8b0f09dffc326f662f9052eed3ef2934021e7d537407b2686053b5.exe
Resource
win10v2004-20231222-en
General
-
Target
f3351384be8b0f09dffc326f662f9052eed3ef2934021e7d537407b2686053b5
-
Size
1.0MB
-
MD5
9a9617c341f0844ea317c819bd990658
-
SHA1
1805c708ec1c141a62995c19f0ef6fb6b52c9b88
-
SHA256
f3351384be8b0f09dffc326f662f9052eed3ef2934021e7d537407b2686053b5
-
SHA512
d1499d512966865d232465c4db797cc9331a7d805c6679789e73a072bd3a93b3c3e02a47960b56b65de4c38078fad8b54a8ae3de183cc1b0aeb21535ce514cab
-
SSDEEP
24576:k3Uu4DZFZoiIbvPs6DzvNBc+FXfIgqwFNFhKhwAzeBoYgh:+Ps6Dzv5qwvb6eB7k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3351384be8b0f09dffc326f662f9052eed3ef2934021e7d537407b2686053b5
Files
-
f3351384be8b0f09dffc326f662f9052eed3ef2934021e7d537407b2686053b5.exe windows:4 windows x86 arch:x86
9e13a46db78be9314e8e45dacc090728
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeThread
WaitForMultipleObjects
GetTickCount
WritePrivateProfileStringW
GetSystemDirectoryW
GetExitCodeProcess
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
LocalAlloc
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSize
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
LocalFree
InterlockedCompareExchange
OutputDebugStringW
GetWindowsDirectoryW
GetLocalTime
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateEventW
TerminateThread
CreateDirectoryW
RemoveDirectoryW
DeleteFileW
GetFileAttributesExW
FindClose
FindNextFileW
FindFirstFileW
GetFileSizeEx
SetFilePointer
WriteFile
OpenEventW
SetEvent
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
Module32FirstW
CreateProcessW
GetVersionExW
InterlockedExchange
GetPrivateProfileStringW
GetPrivateProfileIntW
CreateMutexW
CreateFileW
GetFileSize
ReadFile
FreeResource
LoadLibraryExW
SetLastError
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
CreateThread
GetCurrentThreadId
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
lstrlenW
WideCharToMultiByte
lstrlenA
RaiseException
WaitForSingleObject
GetFileAttributesW
Sleep
CloseHandle
GetModuleFileNameW
GetModuleHandleW
LoadLibraryW
GetProcAddress
FreeLibrary
GetCurrentProcess
FlushInstructionCache
MultiByteToWideChar
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
GetSystemTimeAsFileTime
user32
GetCursorPos
CopyRect
SetRect
SetWindowLongW
CreateWindowExW
DestroyWindow
GetWindowLongW
SendMessageW
MoveWindow
SetWindowPos
GetWindowRect
GetClientRect
InvalidateRect
IsChild
IsWindow
InflateRect
GetClassInfoExW
LoadCursorW
GetParent
GetDlgItem
RegisterClassExW
DefWindowProcW
RegisterWindowMessageW
MapWindowPoints
SystemParametersInfoW
GetWindow
ShowWindow
IsDialogMessageW
GetFocus
CharNextW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
ReleaseDC
GetDC
LoadImageW
LoadBitmapW
SwitchToThisWindow
GetLastActivePopup
IsIconic
FindWindowW
GetDesktopWindow
SetActiveWindow
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
EnableWindow
IsWindowEnabled
GetActiveWindow
SetRectEmpty
PostMessageW
ClientToScreen
UpdateWindow
PostThreadMessageW
CallWindowProcW
PtInRect
GetDlgCtrlID
DrawTextW
EqualRect
IsWindowVisible
OffsetRect
SetCursor
IsRectEmpty
DestroyIcon
DrawFrameControl
LoadIconW
DrawIconEx
KillTimer
IntersectRect
ScreenToClient
SetCapture
SetFocus
GetNextDlgTabItem
GetMonitorInfoW
MonitorFromWindow
UpdateLayeredWindow
BeginPaint
EndPaint
ReleaseCapture
UnregisterClassA
GetScrollPos
WindowFromPoint
GetKeyState
SetWindowTextW
SetWindowRgn
SetTimer
BringWindowToTop
GetWindowDC
DestroyMenu
MonitorFromPoint
TrackPopupMenu
gdi32
CreateSolidBrush
CreateFontIndirectW
CreateRoundRectRgn
SetViewportOrgEx
GetClipRgn
RoundRect
OffsetRgn
ExtSelectClipRgn
GetViewportOrgEx
GetTextExtentPoint32W
TextOutW
LineTo
MoveToEx
GetCurrentObject
RectInRegion
GetTextColor
SetBkMode
CreateRectRgnIndirect
GetDeviceCaps
SetStretchBltMode
CreateCompatibleBitmap
DeleteObject
CreatePen
SelectObject
SaveDC
RestoreDC
SelectClipRgn
Rectangle
ExtTextOutW
SetBkColor
CreateRectRgn
GetStockObject
DeleteDC
BitBlt
CreateDIBSection
CreateCompatibleDC
GetObjectW
SetTextColor
StretchBlt
CombineRgn
CreateBitmap
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegSetValueExW
RegOpenKeyW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
GetUserNameW
LookupAccountNameW
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegDeleteKeyW
RegDeleteValueW
RegQueryInfoKeyW
RegEnumKeyExW
shell32
ShellExecuteW
SHBrowseForFolderW
SHGetSpecialFolderPathW
SHGetDesktopFolder
SHGetFolderLocation
SHGetMalloc
DragFinish
DragQueryFileW
SHCreateDirectoryExW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ole32
CoCreateGuid
CoInitialize
CoUninitialize
CreateStreamOnHGlobal
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
oleaut32
SysAllocStringLen
SysFreeString
VarUI4FromStr
shlwapi
StrToIntW
StrToIntA
PathRemoveFileSpecW
PathAppendW
PathAddBackslashW
PathFileExistsW
PathFindFileNameW
PathIsDirectoryW
comctl32
_TrackMouseEvent
msimg32
AlphaBlend
msvcp80
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?data@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?at@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?str@?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??_D?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?length@?$char_traits@_W@std@@SAIPB_W@Z
?width@ios_base@std@@QBEHXZ
?flags@ios_base@std@@QBEHXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?eof@?$char_traits@_W@std@@SAGXZ
?eq_int_type@?$char_traits@_W@std@@SA_NABG0@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
?width@ios_base@std@@QAEHH@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?good@ios_base@std@@QBE_NXZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
gdiplus
GdipGetImagePixelFormat
GdipImageRotateFlip
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipSetInterpolationMode
GdipGraphicsClear
GdipDrawImageRectI
GdipDrawImageRectRect
GdipDrawImagePointsRectI
GdipCloneBitmapArea
GdipDeleteBrush
GdipCreateStringFormat
GdipDeleteStringFormat
GdipGetFontCollectionFamilyCount
GdipNewPrivateFontCollection
GdipDeletePrivateFontCollection
GdipPrivateAddFontFile
GdipDeleteFont
GdipCreateSolidFill
GdiplusShutdown
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipResetWorldTransform
GdipSetClipPath
GdipAddPathPieI
GdipDrawRectangleI
GdipDrawLine
GdipSetPenMode
GdipSetPenEndCap
GdipSetPenStartCap
GdipDrawLinesI
GdipSetPenDashStyle
GdipGetFontSize
GdipGetFamily
GdipDrawImageI
GdipSetPixelOffsetMode
GdipSetCompositingQuality
GdipAddPathStringI
GdipDrawPath
GdipSetSmoothingMode
GdipAddPathRectangleI
GdipDeletePen
GdipCreatePen1
GdiplusStartup
GdipLoadImageFromFile
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdipCloneImage
GdipDrawImageRectRectI
GdipCreateFromHDC
GdipSetImageAttributesColorMatrix
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipLoadImageFromStream
GdipDeleteGraphics
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipAlloc
GdipDeleteFontFamily
GdipFree
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipMeasureString
GdipDrawString
GdipFillRectangleI
GdipSetTextRenderingHint
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipFillRectangle
GdipFillPath
GdipAddPathArcI
GdipClosePathFigure
GdipDeletePath
GdipCreatePath
GdipCloneBrush
GdipCreateFont
GdipCreateFontFromLogfontW
GdipCreateFontFromDC
GdipSetStringFormatFlags
msvcr80
__p__commode
__p__fmode
__set_app_type
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
free
wcsrchr
wcsstr
memcpy_s
_CxxThrowException
_wcsicmp
wcsspn
wcscspn
_wcslwr_s
_vscwprintf
vswprintf_s
_purecall
swprintf_s
fprintf
fclose
srand
rand
_mbsicmp
_wcsnicmp
_adjust_fdiv
_vsnwprintf
wcschr
??2@YAPAXI@Z
memset
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
__CxxFrameHandler3
memmove_s
__RTDynamicCast
_beginthreadex
wcscat_s
calloc
_recalloc
??_V@YAXPAX@Z
_invalid_parameter_noinfo
_mbscmp
??0exception@std@@QAE@ABV01@@Z
_vscprintf
??3@YAXPAX@Z
vsprintf_s
malloc
_invoke_watson
_controlfp_s
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
_except_handler4_common
wcsncmp
wcspbrk
_wtol
iswspace
_mktime64
wcstol
_wfopen
_wrename
_mbschr
_wtoi64
tolower
isspace
strchr
strncmp
isalnum
isalpha
_vsnprintf_s
_stricmp
sprintf_s
atoi
floor
ceil
_time64
wcscpy_s
vsprintf
wcstoul
_wtoi
_wtof
_waccess
memcpy
wcsncpy_s
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Sections
.text Size: 559KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 366KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE