Static task
static1
Behavioral task
behavioral1
Sample
56d33853faabd886a3583673d0754c9a.exe
Resource
win7-20231129-en
General
-
Target
56d33853faabd886a3583673d0754c9a
-
Size
604KB
-
MD5
56d33853faabd886a3583673d0754c9a
-
SHA1
2f6a5bc1f3a941ff31476c832120e765ee4e7ab4
-
SHA256
061efa149e92af05d3b7a555c2003765826fd8c22b1fb50de83ec984ca9fd405
-
SHA512
33131b14f6e0c1d9e7766488a99889d24fd9c0c7cf5b0cb00d59d6a438ee4b9ed3d23a7cca0c60c2d7bc095e01b07b12ab3662113b92a8797f86f0a5636d9c3f
-
SSDEEP
12288:WcYo01oxoceAnEvSfxY+3tGUJSEpkqzBumi:R01o9fi+3tTSEOqQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56d33853faabd886a3583673d0754c9a
Files
-
56d33853faabd886a3583673d0754c9a.exe windows:5 windows x86 arch:x86
e757c07127892058fb1bb4bf7441e34a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winhttp
WinHttpConnect
WinHttpSetOption
WinHttpWriteData
WinHttpQueryHeaders
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpCloseHandle
WinHttpGetProxyForUrl
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpSetTimeouts
WinHttpSetStatusCallback
WinHttpCrackUrl
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpGetIEProxyConfigForCurrentUser
msimg32
AlphaBlend
comctl32
ord17
kernel32
GlobalUnlock
GlobalLock
GlobalAlloc
LockResource
LoadResource
SizeofResource
FindResourceW
CreateMutexW
CloseHandle
WaitForSingleObject
ReleaseMutex
lstrcmpiW
GetVersionExW
MultiByteToWideChar
ReadFile
GetFileSize
CreateFileW
WaitForMultipleObjects
Sleep
CreateThread
CreateDirectoryW
DeleteFileW
GetTempFileNameW
GetTempPathW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TryEnterCriticalSection
SetFilePointer
GetModuleFileNameW
lstrcpyW
WriteFile
lstrcatW
GetFileAttributesW
lstrlenW
GetPrivateProfileStringW
SetEnvironmentVariableW
GetLastError
FreeLibrary
LoadLibraryExW
GetProcessId
ExpandEnvironmentStringsW
WideCharToMultiByte
GetModuleHandleW
TerminateProcess
OpenProcess
GetCommandLineW
lstrcpynW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
GetCurrentThread
SetEvent
GlobalFree
LocalFree
FormatMessageW
lstrlenA
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
ExitProcess
GetFileType
SetHandleCount
GetModuleHandleA
GetModuleFileNameA
GetStdHandle
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
GetStartupInfoA
GetCommandLineA
MoveFileW
HeapAlloc
HeapFree
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
RaiseException
InterlockedDecrement
InterlockedIncrement
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetTickCount
LoadLibraryW
GetProcAddress
lstrcmpiA
GetEnvironmentStringsW
QueryPerformanceCounter
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LoadLibraryA
GetLocaleInfoW
SetStdHandle
GetConsoleCP
GetConsoleMode
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
CreateEventW
user32
AppendMenuW
CreatePopupMenu
MessageBoxW
DispatchMessageW
TranslateMessage
DestroyMenu
EndDialog
DestroyWindow
PostQuitMessage
GetSysColorBrush
FillRect
IsDialogMessageW
GetMessageW
LoadImageW
CreateDialogParamW
GetSysColor
GetWindowTextLengthW
CheckDlgButton
IsDlgButtonChecked
SendDlgItemMessageW
EndPaint
BeginPaint
MessageBeep
SetTimer
LoadIconW
CreateDialogIndirectParamW
GetAncestor
LoadBitmapW
SetDlgItemTextW
SetWindowPos
EnableWindow
GetCursor
GetWindow
SetActiveWindow
PostMessageW
GetDlgCtrlID
wsprintfW
IsWindowVisible
EnumPropsW
ChildWindowFromPointEx
FindWindowExW
GetDlgItemTextW
EnumChildWindows
GetWindowTextW
EnumWindows
GetWindowThreadProcessId
SetForegroundWindow
CreateWindowExW
GetWindowRect
MoveWindow
IsWindow
DrawTextW
SetWindowTextW
UpdateWindow
InvalidateRect
GetDC
GetClientRect
DrawFrameControl
ReleaseDC
GetParent
GetWindowLongW
SetPropW
LoadCursorW
SetCursor
GetDlgItem
GetPropW
ShowWindow
SetFocus
CallWindowProcW
SetWindowLongW
RemovePropW
SendMessageW
MapWindowPoints
ScreenToClient
KillTimer
GetCursorPos
TrackPopupMenuEx
gdi32
DeleteObject
CreateDIBSection
GetTextExtentPoint32W
SelectObject
SetBkColor
CreateCompatibleDC
CreatePatternBrush
CreateFontW
CreateSolidBrush
SetBkMode
SetTextColor
BitBlt
DeleteDC
GetStockObject
CreateCompatibleBitmap
CreateFontIndirectW
GetObjectW
advapi32
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
shell32
ShellExecuteExW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
Shell_NotifyIconW
SHCreateDirectoryExW
ord155
SHOpenFolderAndSelectItems
ord190
CommandLineToArgvW
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemFree
shlwapi
PathRemoveFileSpecW
StrChrIW
PathAddBackslashW
PathFileExistsW
PathIsDirectoryW
StrStrIW
SHCreateStreamOnFileEx
StrCatW
PathRenameExtensionW
PathFindExtensionW
StrToIntExW
PathFindFileNameW
StrToIntW
PathAppendW
PathStripPathW
wvnsprintfW
StrToIntExA
windowscodecs
WICConvertBitmapSource
psapi
GetModuleFileNameExW
Sections
.text Size: 390KB - Virtual size: 390KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ