Static task
static1
Behavioral task
behavioral1
Sample
5675812ab00decc7dd4ea27cd22cd98b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5675812ab00decc7dd4ea27cd22cd98b.exe
Resource
win10v2004-20231215-en
General
-
Target
5675812ab00decc7dd4ea27cd22cd98b
-
Size
178KB
-
MD5
5675812ab00decc7dd4ea27cd22cd98b
-
SHA1
5fafd0f90e100d562321ddb51fcb21eb8adef576
-
SHA256
517cb827b4727f02182954f911afdc1941baca8ba811e8f9be52d5d1a044ac76
-
SHA512
468321768e0db7ab99e93b84216ab6b10850ce1bfa8adbc8c5168276ae6f480a5e602e435a8299028215c050a2308a187b5faa7f37c003f219ea6558f8438d01
-
SSDEEP
3072:vawFVZVyuiwiOas97N7I+WipOS85v6iu0G1dy+1ZVdAEdvttaxIEzSf9Nn+WuO6K:vawFVZ0xjc97N7IBiCB6Vhg+TVdAAjIG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5675812ab00decc7dd4ea27cd22cd98b
Files
-
5675812ab00decc7dd4ea27cd22cd98b.exe windows:5 windows x86 arch:x86
a794c8e003ef3434271fdc90c17e8e22
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
LocalAlloc
LoadLibraryA
GetProcAddress
ExitProcess
MulDiv
user32
TrackPopupMenu
RemovePropA
GetDoubleClickTime
MapWindowPoints
GetTabbedTextExtentA
BeginPaint
CreateCaret
GetDlgItem
CharNextA
SetClipboardData
RemoveMenu
SetParent
DestroyIcon
EnableMenuItem
GetMenuState
SetWindowRgn
SendNotifyMessageA
GetKeyState
CreateDialogParamA
LoadKeyboardLayoutA
IsChild
GetActiveWindow
ToAscii
OpenClipboard
CallWindowProcW
GetMessageTime
IsWindowVisible
GetScrollPos
OffsetRect
WindowFromPoint
RegisterClipboardFormatA
DrawTextW
PostMessageA
CloseClipboard
ToUnicode
GetAsyncKeyState
IsWindow
FillRect
GetMenuCheckMarkDimensions
LoadCursorA
BeginDeferWindowPos
DefFrameProcA
GetMessageA
DrawIcon
ShowCursor
MsgWaitForMultipleObjects
CopyRect
SubtractRect
InvertRect
PostQuitMessage
SetWindowLongA
mouse_event
InsertMenuA
InsertMenuItemA
IsIconic
GetCursorPos
PostThreadMessageA
GetCapture
GetSysColor
GetMenuItemID
WinHelpA
GetKeyboardLayoutList
GetMenuItemCount
OemToCharA
DrawCaption
ShowCaret
UnregisterClassA
RedrawWindow
EmptyClipboard
CharUpperBuffW
GetKeyNameTextA
MapVirtualKeyA
DestroyWindow
ModifyMenuA
SetClassLongA
CreateWindowExW
GetLastActivePopup
DrawTextA
GetClassInfoW
CharUpperBuffA
GetForegroundWindow
EnableScrollBar
DefWindowProcA
IsWindowEnabled
GetCaretPos
WaitForInputIdle
FindWindowA
GetClassInfoA
SetTimer
FlashWindow
DeferWindowPos
RegisterClassA
CheckMenuItem
GetMessagePos
HideCaret
SetForegroundWindow
CreateIcon
SetRect
WindowFromDC
PtInRect
DrawTextExA
ClientToScreen
SetFocus
IntersectRect
GetSubMenu
GetClipboardFormatNameA
EnumWindows
InvalidateRect
SetMenuItemInfoA
LoadBitmapA
CharNextW
ScreenToClient
SetActiveWindow
PeekMessageA
GetWindowDC
DestroyCursor
DrawEdge
CreateMenu
GetIconInfo
TabbedTextOutA
GetClipboardData
DefMDIChildProcA
CreateWindowExA
DialogBoxParamA
DrawMenuBar
TranslateMessage
CallWindowProcA
EnableWindow
ShowWindow
SystemParametersInfoA
ReleaseDC
ValidateRect
SetKeyboardState
RegisterWindowMessageA
CallNextHookEx
EqualRect
UpdateWindow
GetScrollInfo
ShowScrollBar
EndPaint
IsZoomed
EndDeferWindowPos
DispatchMessageA
DefWindowProcW
GetTopWindow
GetWindowTextLengthW
DestroyCaret
FrameRect
GetKeyboardLayout
GetPropA
DeleteMenu
BringWindowToTop
IsCharAlphaA
InvalidateRgn
GetScrollRange
SetWindowTextW
MoveWindow
SetMenu
UnhookWindowsHookEx
MessageBeep
IsDialogMessageA
SetScrollRange
GetFocus
GetWindowRect
GetWindowTextW
GetWindowRgn
KillTimer
GetClientRect
GetKeyboardState
SetPropA
ScrollDC
ScrollWindowEx
SetCaretPos
GetWindowPlacement
CharPrevW
SetRectEmpty
DrawFocusRect
GetMenuItemRect
GetDC
GetMenuStringA
SendMessageA
GetDCEx
MessageBoxA
SetWindowPos
ActivateKeyboardLayout
CharLowerBuffA
GetWindow
LoadIconA
GetWindowTextA
ScrollWindow
ChildWindowFromPoint
EndDialog
EnumThreadWindows
SetWindowsHookExA
GetParent
wsprintfA
UnionRect
IsRectEmpty
CharLowerA
GetSysColorBrush
CopyImage
DrawIconEx
IsCharAlphaNumericA
GetClassNameA
ReleaseCapture
SendMessageTimeoutA
SetWindowPlacement
SetWindowTextA
GetSystemMenu
CreatePopupMenu
SetCursor
IsWindowUnicode
ShowOwnedPopups
DrawTextExW
LoadCursorFromFileA
FindWindowExA
InflateRect
GetMenuItemInfoA
SetWindowLongW
GetWindowLongA
SendDlgItemMessageA
SetCapture
CharUpperA
SetScrollInfo
DestroyMenu
GetCursor
DrawFrameControl
SendMessageW
TranslateMDISysAccel
GetSystemMetrics
GetUpdateRect
GetDesktopWindow
GetWindowThreadProcessId
GetMenu
EnumClipboardFormats
WaitMessage
AdjustWindowRectEx
SetScrollPos
IsClipboardFormatAvailable
LockWindowUpdate
RegisterClassW
gdi32
GetRandomRgn
comdlg32
GetSaveFileNameA
ChooseFontA
PrintDlgA
GetOpenFileNameA
ChooseColorA
advapi32
GetUserNameA
RegCreateKeyExA
RegQueryValueExA
RegQueryValueA
RegOpenKeyExA
RegFlushKey
RegEnumValueA
RegEnumKeyExA
RegOpenKeyA
RegCloseKey
RegQueryInfoKeyA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
shell32
SHGetDesktopFolder
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ole32
OleUninitialize
OleInitialize
oleaut32
OleLoadPicture
VarCmp
comctl32
ImageList_GetIcon
ImageList_GetDragImage
ImageList_SetIconSize
ImageList_DragEnter
ImageList_DrawEx
ImageList_Write
ImageList_DragShowNolock
ImageList_Read
ImageList_Add
ImageList_LoadImageA
ImageList_GetImageInfo
ImageList_BeginDrag
ImageList_Create
ImageList_Remove
ImageList_ReplaceIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragMove
ImageList_GetBkColor
ImageList_Destroy
ImageList_Draw
ImageList_DragLeave
ImageList_SetBkColor
ord17
ImageList_GetIconSize
ImageList_SetDragCursorImage
ImageList_EndDrag
winmm
timeBeginPeriod
timeGetTime
timeEndPeriod
mciSendCommandA
mciGetErrorStringA
msimg32
AlphaBlend
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
wsock32
accept
ioctlsocket
closesocket
connect
gethostname
getsockname
socket
WSAAsyncSelect
setsockopt
sendto
bind
inet_ntoa
htons
WSACleanup
WSAStartup
gethostbyname
recvfrom
listen
select
getsockopt
mpr
WNetCloseEnum
WNetOpenEnumA
WNetEnumResourceA
WNetGetConnectionA
WNetGetUniversalNameA
netapi32
NetApiBufferSize
imm32
ImmReleaseContext
ImmSetCompositionFontA
ImmSetCompositionWindow
ImmGetContext
ImmGetCompositionStringA
ImmGetCompositionStringW
ws2_32
WSAGetOverlappedResult
WSASend
WSAAddressToStringA
WSAStringToAddressA
WSAEventSelect
WSARecv
WSASocketA
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.suka Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asdf Size: - Virtual size: 219KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ