Static task
static1
Behavioral task
behavioral1
Sample
57522fcb9cd6186cab033b9235f7ada0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
57522fcb9cd6186cab033b9235f7ada0.exe
Resource
win10v2004-20231215-en
General
-
Target
57522fcb9cd6186cab033b9235f7ada0
-
Size
102KB
-
MD5
57522fcb9cd6186cab033b9235f7ada0
-
SHA1
00bdb72526e36cd626d2cb123cdf2a79df4f1a19
-
SHA256
7d8451e042095684b13ef104a809570fcde9f0af84021bc626e1bb62eb63645d
-
SHA512
34721fa3b8c11e7848e8c22c475390a52769a58ac5fda3ca568a3101be82ea1679a2d72baa2580c7fc9a79f1e6f814a58c3e5bfd6c70671f894ac9ed35e78772
-
SSDEEP
3072:2KNEKBRybJpgGvYHvQ4Se9tziQL/1w13klOMlOmm:tNEKByJVT4xtzBLi13kl3l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57522fcb9cd6186cab033b9235f7ada0
Files
-
57522fcb9cd6186cab033b9235f7ada0.exe windows:4 windows x86 arch:x86
9fff20403f0567e74f0737b0fcd3fa1f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
calloc
malloc
memmove
sin
user32
DestroyWindow
DefFrameProcA
IsDialogMessageA
PostMessageA
GetKeyboardLayoutList
DefWindowProcA
EnableScrollBar
EndPaint
GetMenuItemCount
DispatchMessageA
GetWindowLongA
SetCursor
GetTopWindow
GetFocus
GetMenuStringA
SendMessageA
GetActiveWindow
PostQuitMessage
CharToOemA
DestroyMenu
CloseClipboard
DefMDIChildProcA
IntersectRect
GetClipboardData
SetScrollRange
GetWindowTextA
DrawIcon
PeekMessageW
IsRectEmpty
CreateWindowExA
GetForegroundWindow
SetTimer
DrawMenuBar
GetMenuItemID
GetWindow
InvalidateRect
GetKeyboardLayout
ShowScrollBar
GetWindowLongW
ShowOwnedPopups
IsWindowEnabled
SystemParametersInfoA
SetFocus
RegisterClassA
InsertMenuItemA
RemovePropA
GetKeyState
MessageBeep
GetKeyboardState
OemToCharA
GetScrollRange
MessageBoxA
FrameRect
FillRect
GetLastActivePopup
RedrawWindow
GetWindowPlacement
GetSystemMetrics
LoadIconA
CallNextHookEx
GetSysColorBrush
CharUpperBuffA
RemoveMenu
ChildWindowFromPoint
ActivateKeyboardLayout
GetDlgItem
DrawFrameControl
IsDialogMessageW
GetSubMenu
TrackPopupMenu
RegisterClipboardFormatA
CreatePopupMenu
ScreenToClient
wsprintfA
CharLowerBuffA
EmptyClipboard
GetParent
SetWindowsHookExA
ReleaseCapture
InflateRect
GetCursorPos
OffsetRect
MapVirtualKeyA
GetScrollPos
OpenClipboard
SetRect
DispatchMessageW
SetWindowPlacement
GetScrollInfo
GetDC
GetDCEx
GetClientRect
DrawEdge
IsChild
SetMenu
GetIconInfo
SendMessageW
EnumWindows
EnableWindow
TranslateMDISysAccel
GetWindowThreadProcessId
EnumThreadWindows
GetDesktopWindow
GetCursor
SetCapture
IsZoomed
IsWindow
PtInRect
DestroyCursor
GetSystemMenu
LoadBitmapA
GetSysColor
BeginPaint
SetClassLongA
InsertMenuA
SetWindowPos
CreateIcon
GetMenuState
ReleaseDC
GetWindowDC
MapWindowPoints
DeleteMenu
SetClipboardData
LoadStringA
DrawTextA
EnumChildWindows
SetWindowTextA
IsWindowUnicode
MsgWaitForMultipleObjects
DestroyIcon
SetActiveWindow
UnhookWindowsHookEx
EqualRect
GetKeyboardType
GetClassLongA
SetWindowLongW
DrawAnimatedRects
IsIconic
GetMessagePos
FindWindowA
CreateMenu
GetPropA
GetCapture
ClientToScreen
UnregisterClassA
SetScrollInfo
AdjustWindowRectEx
EnableMenuItem
GetClassInfoA
GetMenuItemInfoA
IsWindowVisible
GetClassNameA
DrawIconEx
GetWindowRect
SetWindowLongA
UpdateWindow
SetForegroundWindow
GetKeyNameTextA
ShowWindow
LoadKeyboardLayoutA
SetMenuItemInfoA
CharNextW
RegisterWindowMessageA
SetPropA
WindowFromPoint
CharNextA
GetKeyboardLayoutNameA
KillTimer
SetParent
PeekMessageA
TranslateMessage
CharLowerA
LoadCursorA
WaitMessage
SetScrollPos
MoveWindow
ScrollWindow
kernel32
GetUserDefaultLCID
WriteFile
FindResourceA
GlobalAlloc
VirtualAllocEx
GetModuleFileNameA
GetFileAttributesA
GlobalFindAtomA
HeapAlloc
LocalFree
LoadLibraryExA
SetThreadLocale
FreeLibrary
VirtualQuery
GetDiskFreeSpaceA
lstrcmpA
CreateEventA
GetCurrentThreadId
GetProcAddress
GetCPInfo
FindClose
GetDateFormatA
lstrcatA
DeleteCriticalSection
SetEvent
EnterCriticalSection
GetLastError
WaitForSingleObject
VirtualAlloc
EnumCalendarInfoA
LocalReAlloc
VirtualFree
HeapDestroy
SetFilePointer
GetTickCount
LoadLibraryA
GetVersionExA
SetLastError
GetCurrentProcessId
GlobalAddAtomA
GlobalDeleteAtom
lstrcmpiA
GetThreadLocale
GetStringTypeA
ReadFile
MulDiv
lstrcpynA
GetCommandLineA
SetErrorMode
HeapFree
GetCurrentThread
GetStdHandle
GetOEMCP
CreateFileA
CompareStringA
FormatMessageA
GetFileType
GetProcessHeap
LocalAlloc
ExitProcess
SetHandleCount
MoveFileA
LoadResource
GetACP
GetVersion
CreateThread
DeleteFileA
lstrlenA
CloseHandle
lstrcpyA
GetFileSize
WideCharToMultiByte
FreeResource
GetModuleHandleA
GetStartupInfoA
GetEnvironmentStrings
SizeofResource
GetCurrentProcess
SetEndOfFile
ResetEvent
Sleep
GetFullPathNameA
InitializeCriticalSection
ExitThread
GetStringTypeW
LockResource
RaiseException
Sections
CODE Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE