Static task
static1
Behavioral task
behavioral1
Sample
577f738574001cf02b7f15ed43d91bef.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
577f738574001cf02b7f15ed43d91bef.exe
Resource
win10v2004-20231222-en
General
-
Target
577f738574001cf02b7f15ed43d91bef
-
Size
556KB
-
MD5
577f738574001cf02b7f15ed43d91bef
-
SHA1
cabd779d68f668f6431718fa262230263b55fabf
-
SHA256
d7d785ad85e1c1271389da5e409b2087089cd1722e3449b375b40d96d41a427f
-
SHA512
c8c1550ca57c3fe2fb13f3e6f83c6d9fa031af2771cb35f91f1c468395caf2e106158bc570205492f9d5daa7199aeec1e44c582c4d02fec1aa2ee0790e7c530d
-
SSDEEP
12288:NY51oAfJAgw0r7yrG9tF+kUqrn+PuQO3H0pxN+t9iCIiwIH6zmfRzrK13WMCJcrI:N4fpqG9T+4rnr3CNi9jIVIH6zmfRzrKw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 577f738574001cf02b7f15ed43d91bef
Files
-
577f738574001cf02b7f15ed43d91bef.exe windows:4 windows x86 arch:x86
31892d72948eb69b800c23ee9a342eb4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MapDialogRect
LoadMenuIndirectA
RegisterClassExA
EqualRect
CharToOemA
TrackPopupMenuEx
GetDC
IsClipboardFormatAvailable
GetClassInfoA
MenuItemFromPoint
EnumDisplaySettingsExA
RegisterHotKey
GetWindowLongA
RegisterClassA
DestroyWindow
DdeInitializeW
BroadcastSystemMessageA
LoadIconW
LoadCursorFromFileW
ImpersonateDdeClientWindow
SetActiveWindow
DestroyAcceleratorTable
ShowScrollBar
CharUpperW
IsMenu
DdeReconnect
ShowWindowAsync
SetCaretBlinkTime
OemKeyScan
LoadMenuA
LoadStringA
WINNLSGetEnableStatus
EnumDesktopWindows
ShowCaret
ActivateKeyboardLayout
SetDeskWallpaper
EnumDisplaySettingsExW
OemToCharBuffA
ShowWindow
DeferWindowPos
GetMenuItemInfoW
wvsprintfA
CopyAcceleratorTableA
PostThreadMessageA
DefWindowProcW
LoadStringW
SetLastErrorEx
DdeQueryNextServer
UnregisterDeviceNotification
GetCursorInfo
MonitorFromRect
SetWindowPlacement
DispatchMessageW
IsChild
ChangeDisplaySettingsExA
GetLastActivePopup
DlgDirListComboBoxW
CharToOemBuffA
GetDCEx
GetWindowWord
IsCharAlphaNumericW
GetClassInfoExA
SetClipboardViewer
SetMenuItemBitmaps
IsCharLowerW
InsertMenuItemW
GetMenuItemRect
SetForegroundWindow
BroadcastSystemMessageW
UnloadKeyboardLayout
SetDebugErrorLevel
GetDlgItemInt
MessageBoxA
CharPrevW
DialogBoxIndirectParamA
IsWindowUnicode
OpenDesktopA
DlgDirListW
DragDetect
PackDDElParam
EnumDisplayDevicesA
ExitWindowsEx
DdeConnectList
EnumWindowStationsA
GetInputDesktop
VkKeyScanA
FindWindowExW
SetClassLongA
GetKeyboardLayout
LoadKeyboardLayoutA
SetMessageExtraInfo
CharNextA
GetIconInfo
ToUnicodeEx
CreateIconFromResource
GetMenuBarInfo
CreateWindowExW
wininet
HttpAddRequestHeadersW
InternetQueryOptionW
InternetWriteFileExW
comdlg32
FindTextW
kernel32
ResetEvent
VirtualAlloc
SetLastError
FreeEnvironmentStringsW
GetTimeFormatA
SetVolumeLabelW
GetLongPathNameW
HeapDestroy
EnumTimeFormatsA
GetPriorityClass
CreateFileA
CreateMutexA
WriteFile
SetFilePointer
GetStringTypeW
GetProcAddress
GetProfileIntA
VirtualQuery
CompareStringW
GetTimeZoneInformation
GetCurrentThreadId
WriteConsoleOutputA
GetFileType
SetEndOfFile
GetCommandLineW
lstrcpy
HeapCreate
HeapFree
SetEnvironmentVariableA
WritePrivateProfileSectionA
VirtualFreeEx
VirtualFree
CreateProcessW
GetPrivateProfileIntA
TlsGetValue
GetCalendarInfoA
TransmitCommChar
GetLogicalDriveStringsW
SetSystemTime
SetComputerNameA
LockFileEx
LeaveCriticalSection
FindResourceExW
SetConsoleCursorPosition
FindResourceA
LoadLibraryExW
FreeLibrary
ReadConsoleOutputW
WritePrivateProfileStructA
GetSystemTimeAdjustment
InterlockedExchange
UnhandledExceptionFilter
ReadConsoleOutputAttribute
GlobalUnlock
InterlockedIncrement
SetStdHandle
lstrcmpiW
EnterCriticalSection
CreateFileMappingA
GetStdHandle
LCMapStringW
DeleteCriticalSection
GetStartupInfoA
ReadFile
ExitProcess
GetCPInfo
ExitThread
SetComputerNameW
SetLocalTime
VirtualQueryEx
TerminateProcess
WideCharToMultiByte
WriteProfileSectionW
GetSystemTime
GetCurrentProcess
FlushInstructionCache
CloseHandle
HeapReAlloc
GetEnvironmentStrings
GetThreadLocale
GetModuleFileNameA
GetCurrentProcessId
MultiByteToWideChar
GetLastError
GetCurrentThread
LCMapStringA
GlobalFindAtomA
HeapAlloc
ConnectNamedPipe
FindNextChangeNotification
FreeEnvironmentStringsA
GetTickCount
RtlUnwind
SystemTimeToFileTime
InterlockedDecrement
GetLocalTime
LoadLibraryA
TlsFree
GetModuleHandleA
FindClose
GetStartupInfoW
GetThreadContext
AddAtomW
GlobalGetAtomNameA
GetSystemTimeAsFileTime
TlsSetValue
GetCommandLineA
GetThreadPriority
SetConsoleActiveScreenBuffer
GetSystemDirectoryA
QueryPerformanceCounter
GetStringTypeA
InitializeCriticalSection
SuspendThread
IsBadWritePtr
OpenMutexA
GetPrivateProfileStructW
SetTimeZoneInformation
SetThreadAffinityMask
WriteConsoleOutputAttribute
LocalReAlloc
OpenFileMappingW
TlsAlloc
GetModuleFileNameW
FlushFileBuffers
CompareStringA
GetVersion
SetHandleCount
CopyFileExA
GetEnvironmentStringsW
GetPrivateProfileSectionA
gdi32
CreateHalftonePalette
SetDIBColorTable
GetNearestPaletteIndex
PaintRgn
GetObjectA
CreateDCA
BitBlt
SetMetaRgn
RoundRect
SelectClipPath
GetDeviceCaps
DeleteDC
comctl32
ImageList_ReplaceIcon
ImageList_DrawIndirect
CreateStatusWindow
InitCommonControlsEx
DrawStatusTextA
InitMUILanguage
CreateToolbarEx
ImageList_AddIcon
ImageList_LoadImageA
ImageList_EndDrag
CreatePropertySheetPageA
_TrackMouseEvent
ImageList_Write
Sections
.text Size: 156KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ