Static task
static1
Behavioral task
behavioral1
Sample
59b2b0883dc5fa64cc712900aafd2fd2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59b2b0883dc5fa64cc712900aafd2fd2.exe
Resource
win10v2004-20231222-en
General
-
Target
59b2b0883dc5fa64cc712900aafd2fd2
-
Size
239KB
-
MD5
59b2b0883dc5fa64cc712900aafd2fd2
-
SHA1
5882f387d129e71e88f889d1bcc007816339b9cb
-
SHA256
db2f220b757f20083088627ab6abaf13b05f5230d217efc72e74e311cb268a8f
-
SHA512
48ef017757418a48a7dd1fc1176846132a67133ad3ae8a8dfa79dbca5ab8d2a3bff469a4bab63a5352cc43b4778a2517e69a00d076e0df478ddffb55b3c418d5
-
SSDEEP
3072:kgjb8KpY1RLHpZoTS7H4kdPh4stTSqaCdarB/z8J2+ACDspf1/5S/uS:/ITpZoTkhdpdxSqnaVNHCDsp+3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59b2b0883dc5fa64cc712900aafd2fd2
Files
-
59b2b0883dc5fa64cc712900aafd2fd2.exe windows:5 windows x86 arch:x86
94545a511ba43a268502a89c5eb7163a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrlenA
SetErrorMode
MultiByteToWideChar
LocalFree
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
SetLastError
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalAlloc
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
CreateFileA
GetModuleFileNameW
GetVersionExA
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
WaitForSingleObject
GetModuleHandleW
GetCurrentProcessId
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
lstrcmpA
GetFileAttributesA
GetFileSizeEx
GetFileTime
GlobalFlags
GetLocaleInfoA
GetCPInfo
GetOEMCP
RaiseException
GetLocalTime
GetTimeZoneInformation
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
RtlUnwind
HeapAlloc
GetStartupInfoA
LCMapStringA
LCMapStringW
VirtualAlloc
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
ExitProcess
GetConsoleCP
GetConsoleMode
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
CreateFileW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
InterlockedDecrement
InterlockedIncrement
GetTempPathA
Sleep
DeleteFileA
GetCompressedFileSizeA
MoveFileA
GetComputerNameA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetCommandLineA
GetModuleHandleA
GetModuleFileNameA
CloseHandle
CreateMutexA
GetLastError
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
GetCurrentProcess
FreeLibrary
user32
GetCapture
WinHelpA
LoadIconA
ValidateRect
GetSysColorBrush
LoadCursorA
IsWindowEnabled
GetWindowThreadProcessId
SetWindowTextA
CheckMenuItem
EnableMenuItem
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
DestroyMenu
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
SetMenu
GetLastActivePopup
GetClassLongA
EnableWindow
SetForegroundWindow
GetClientRect
PostMessageA
MessageBoxA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
GetParent
CopyRect
PtInRect
GetDlgCtrlID
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
GetSysColor
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
CharUpperA
GetSystemMetrics
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetAsyncKeyState
GetKeyState
GetKeyboardLayoutNameA
SendMessageA
GetClassNameA
PostQuitMessage
DefWindowProcA
RegisterClassExA
CallNextHookEx
EnumChildWindows
GetWindowTextA
GetForegroundWindow
UnhookWindowsHookEx
DispatchMessageA
TranslateMessage
GetMessageA
SetTimer
SetWindowsHookExA
CreateWindowExA
RegisterWindowMessageA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
GetDlgItem
GetTopWindow
GetMenu
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
shell32
ShellExecuteA
shlwapi
PathIsUNCA
PathStripToRootA
PathFindExtensionA
PathFindFileNameA
wininet
HttpOpenRequestA
InternetConnectA
HttpSendRequestExA
HttpEndRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetQueryDataAvailable
HttpAddRequestHeadersA
InternetCloseHandle
oleacc
LresultFromObject
CreateStdAccessibleObject
gdi32
CreateBitmap
GetStockObject
SaveDC
RestoreDC
SetBkColor
SetTextColor
SetMapMode
GetClipBox
DeleteDC
DeleteObject
PtVisible
RectVisible
TextOutA
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
GetDeviceCaps
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
comdlg32
GetFileTitleA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adshare Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ