Static task
static1
Behavioral task
behavioral1
Sample
4720557764c3a94f94c4ce37b2b41227.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4720557764c3a94f94c4ce37b2b41227.exe
Resource
win10v2004-20231215-en
General
-
Target
4720557764c3a94f94c4ce37b2b41227
-
Size
657KB
-
MD5
4720557764c3a94f94c4ce37b2b41227
-
SHA1
777ed999584122d21e1debb793984b6a06266ef0
-
SHA256
bf6fff4c4e94469c6964c0e8e559d08d6796b5eae9f1b37b6c8f7118ab78d379
-
SHA512
fe420776e47ef4d657645ef91080a1c133f21c967e6e53b66b94cec69f7c7e15d851eb6182e4ed0d1ba322e784767094b38d349c99c56c30f53f97f25aa2fc61
-
SSDEEP
6144:br2OWhKHkz5gzNOx8XA08bAQGHbI0/tGKv15VucqGHbI0/tGKv15Vuc/vqkwS:HQ/t8XB04dDuc/04dDuc/vqdS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4720557764c3a94f94c4ce37b2b41227
Files
-
4720557764c3a94f94c4ce37b2b41227.exe windows:6 windows x86 arch:x86
46625447eb49fb24243c1f110857e2bd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
TraceMessage
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
EventRegister
EventUnregister
EventWrite
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyExW
RegOpenKeyExW
RegGetValueW
RegQueryValueExW
kernel32
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
ReleaseMutex
InterlockedExchange
TerminateProcess
GlobalDeleteAtom
GetProcessHeap
HeapAlloc
GetSystemDirectoryW
GetLocaleInfoW
GetCurrentProcessId
FormatMessageW
GlobalAddAtomW
GetTickCount64
GetTickCount
HeapSetInformation
GetModuleHandleW
CompareStringW
Sleep
CreateMutexW
GetLastError
CloseHandle
SetProcessShutdownParameters
GetCurrentProcess
IsProcessInJob
GetCurrentThreadId
RegisterApplicationRestart
UnhandledExceptionFilter
gdi32
CreateBrushIndirect
DeleteObject
CreateBitmap
DeleteDC
SelectObject
StretchBlt
SetStretchBltMode
CreateCompatibleBitmap
CreateCompatibleDC
CreateRectRgn
CombineRgn
MoveToEx
LineTo
CreateSolidBrush
SetTextColor
SetBkMode
GetObjectW
GetStockObject
user32
SetWindowPlacement
FindWindowW
PostMessageW
CallNextHookEx
GetThreadDesktop
GetAsyncKeyState
UnhookWindowsHookEx
SystemParametersInfoW
SetWindowsHookExW
SetForegroundWindow
LoadStringW
GetWindowLongW
GetSystemMetrics
IsRectEmpty
PtInRect
EqualRect
OffsetRect
CopyRect
ShowSystemCursor
GetWindowRect
GetDesktopWindow
GetAncestor
GetMonitorInfoW
MonitorFromPoint
KillTimer
GetUserObjectInformationW
CloseDesktop
GetKeyState
CreatePopupMenu
InsertMenuItemW
CheckMenuRadioItem
TrackPopupMenu
SendInput
WindowFromPhysicalPoint
SetWindowRgn
SetTimer
ShowWindow
SetRect
InflateRect
IntersectRect
UnionRect
IsWindow
DestroyWindow
ClipCursor
IsIconic
MonitorFromRect
GetParent
GetGUIThreadInfo
InvalidateRect
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
AdjustWindowRect
UpdateWindow
GetPhysicalCursorPos
DefWindowProcW
RegisterClassW
FillRect
SetCursor
SetWindowLongW
GetClientRect
RegisterClassExW
EndPaint
BeginPaint
PostQuitMessage
GetMessagePos
RemovePropW
ord2001
SetMagnificationDesktopColorEffect
SetMagnificationDesktopMagnification
SetPropW
SetLayeredWindowAttributes
CreateWindowExW
SendMessageTimeoutW
GetDoubleClickTime
RealGetWindowClassW
SetWinEventHook
UnhookWinEvent
GetClassNameW
CreateDialogParamW
LoadImageW
SetFocus
SetDlgItemTextW
CheckDlgButton
SendDlgItemMessageW
GetDlgCtrlID
GetSysColor
EnableWindow
MapWindowPoints
MonitorFromWindow
GetDlgItem
RegisterHotKey
GetDC
ReleaseDC
GetForegroundWindow
GetCursorPos
GetWindowThreadProcessId
UpdateLayeredWindow
IsWindowEnabled
GetCapture
GetMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
UnregisterHotKey
SetRectEmpty
LoadIconW
SendMessageW
SetPhysicalCursorPos
EnumDisplayMonitors
IsWindowVisible
AdjustWindowRectEx
SetWindowPos
GetWindow
LoadCursorW
msvcrt
_wcsicmp
memset
??3@YAXPAX@Z
wcstok
??2@YAPAXI@Z
_purecall
_ftol2_sse
_ftol2
ceil
_controlfp
?terminate@@YAXXZ
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_vsnwprintf
ole32
CoUninitialize
CoCreateInstance
CoInitialize
oleacc
AccessibleObjectFromEvent
AccessibleObjectFromWindow
comctl32
InitCommonControlsEx
ord345
ord17
oleaut32
VariantInit
VariantClear
SysFreeString
gdiplus
GdiplusStartup
GdipDeleteBrush
GdipFree
GdipAlloc
GdipCreatePen1
GdipCloneImage
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneBrush
GdipFillPolygonI
GdipFillRectangleI
GdipDrawPolygonI
GdipSetSmoothingMode
GdipCreateFromHDC
GdipCreateSolidFill
GdipDeleteGraphics
GdipDeletePen
GdiplusShutdown
shell32
ShellExecuteW
SHAppBarMessage
ntdll
WinSqmAddToStream
WinSqmIncrementDWORD
WinSqmIsOptedIn
WinSqmSetDWORD
shlwapi
StrCmpW
ord628
dwmapi
DwmSetWindowAttribute
DwmIsCompositionEnabled
dui70
?GetAccessibleImpl@HWNDElement@DirectUI@@UAEJPAPAUIAccessible@@@Z
InitProcessPriv
UnInitProcessPriv
UnInitThread
InitThread
?GetHWND@NativeHWNDHost@DirectUI@@QAEPAUHWND__@@XZ
??0NativeHWNDHost@DirectUI@@QAE@XZ
??1NativeHWNDHost@DirectUI@@UAE@XZ
?SetContentString@Element@DirectUI@@QAEJPBG@Z
?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z
StrToID
?DestroyWindow@NativeHWNDHost@DirectUI@@QAEXXZ
?EndDefer@Element@DirectUI@@QAEXK@Z
?Initialize@NativeHWNDHost@DirectUI@@QAEJPBG0PAUHWND__@@PAUHICON__@@HHHHHHPAUHINSTANCE__@@I@Z
??1DUIFactory@DirectUI@@QAE@XZ
?Add@Element@DirectUI@@QAEJPAV12@@Z
?LoadFromResource@DUIFactory@DirectUI@@QAEJPAUHINSTANCE__@@PBG1PAVElement@2@PAKPAPAV42@1@Z
??0DUIFactory@DirectUI@@QAE@PAUHWND__@@@Z
?Destroy@Layout@DirectUI@@QAEXXZ
?SetLayout@Element@DirectUI@@QAEJPAVLayout@2@@Z
?Create@FillLayout@DirectUI@@SGJPAPAVLayout@2@@Z
?DoubleBuffered@Element@DirectUI@@QAEX_N@Z
?Host@NativeHWNDHost@DirectUI@@QAEXPAVElement@2@@Z
?SetAccessible@Element@DirectUI@@QAEJ_N@Z
?SetActive@Element@DirectUI@@QAEJH@Z
?SetVisible@Element@DirectUI@@QAEJ_N@Z
?Initialize@HWNDElement@DirectUI@@QAEJPAUHWND__@@_NIPAVElement@2@PAK@Z
?Register@HWNDElement@DirectUI@@SGJXZ
?Release@Value@DirectUI@@QAEXXZ
?GetExtent@Element@DirectUI@@QAEPBUtagSIZE@@PAPAVValue@2@@Z
?OnGroupChanged@HWNDElement@DirectUI@@UAEXH_N@Z
?Destroy@DUIXmlParser@DirectUI@@QAEXXZ
?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@0@Z
?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z
?OnEvent@HWNDElement@DirectUI@@UAEXPAUEvent@2@@Z
??0HWNDElement@DirectUI@@QAE@XZ
?IsRTLReading@Element@DirectUI@@UAE_NXZ
?IsContentProtected@Element@DirectUI@@UAE_NXZ
?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanged@HWNDElement@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnInput@HWNDElement@DirectUI@@UAEXPAUInputEvent@2@@Z
?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?SetLayoutPos@Element@DirectUI@@QAEJH@Z
?SetEnabled@Element@DirectUI@@QAEJ_N@Z
?GetKeyFocusedElement@HWNDElement@DirectUI@@SGPAVElement@2@XZ
?GetID@Element@DirectUI@@QAEGXZ
?Click@Button@DirectUI@@SG?AVUID@@XZ
?GetLocation@Element@DirectUI@@QAEPBUtagPOINT@@PAPAVValue@2@@Z
?GetClassInfoPtr@CCPushButton@DirectUI@@SGPAUIClassInfo@2@XZ
?Destroy@Element@DirectUI@@QAEJ_N@Z
??1HWNDElement@DirectUI@@UAE@XZ
?WndProc@HWNDElement@DirectUI@@UAEJPAUHWND__@@IIJ@Z
?CanSetFocus@HWNDElement@DirectUI@@UAE_NXZ
?OnCompositionChanged@HWNDElement@DirectUI@@UAEXXZ
?OnDestroy@HWNDElement@DirectUI@@UAEXXZ
?OnGetDlgCode@HWNDElement@DirectUI@@UAEXPAUtagMSG@@PAJ@Z
?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UAEXPAUKeyboardEvent@2@@Z
?OnThemeChanged@HWNDElement@DirectUI@@UAEXPAUThemeChangedEvent@2@@Z
?GetHWND@HWNDElement@DirectUI@@UAEPAUHWND__@@XZ
?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ
?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z
?DefaultAction@Element@DirectUI@@UAEJXZ
?OnWmThemeChanged@HWNDElement@DirectUI@@UAEXIJ@Z
?GetClassInfoW@HWNDElement@DirectUI@@UAEPAUIClassInfo@2@XZ
?GetKeyFocused@Element@DirectUI@@UAE_NXZ
?RemoveTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z
?ActivateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@K@Z
?UpdateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z
?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z
?OnHosted@Element@DirectUI@@MAEXPAV12@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z
?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z
?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z
?SetKeyFocus@Element@DirectUI@@UAEXXZ
?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z
?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z
?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z
?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z
?Add@Element@DirectUI@@UAEJPAPAV12@I@Z
?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
magnification
MagSetWindowTransform
MagSetWindowSource
MagInitialize
MagUninitialize
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 513KB - Virtual size: 513KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE