Static task
static1
Behavioral task
behavioral1
Sample
586c8c2737bcef3dd00d59de867d657d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
586c8c2737bcef3dd00d59de867d657d.exe
Resource
win10v2004-20231215-en
General
-
Target
586c8c2737bcef3dd00d59de867d657d
-
Size
477KB
-
MD5
586c8c2737bcef3dd00d59de867d657d
-
SHA1
8d036588b457c1b4ef8ae6285e7f50b1223cf07a
-
SHA256
1578c93d25e24eb65d4bc2dbd6755aecd8030378f7188c37eb48e8a417b6234f
-
SHA512
9e93d0a02646065b253103c15014884094718605f9cebb412283bd81df578f712e6e843f874cbbf67c6327294275575c9fa96869a14535c96b820a6948272f9f
-
SSDEEP
6144:/+ypfcZxVanYLd0VvenBzQmKdztKRE5HsUtApvmIPb/h2mHSWvN/T/XrSu6wU:2ypfcZxsnYLd7QNvxLIP5yeRT2uVU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 586c8c2737bcef3dd00d59de867d657d
Files
-
586c8c2737bcef3dd00d59de867d657d.exe windows:4 windows x86 arch:x86
f67d1f0614eb91002e102431d1481d99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadBitmapA
GetWindowRect
EnableWindow
EndDialog
PostMessageA
PostQuitMessage
ShowWindow
SetWindowPlacement
CreateWindowExA
DestroyWindow
GetWindowLongA
SetWindowLongA
SetFocus
InsertMenuItemA
GetClassInfoW
GetClassInfoA
DialogBoxParamW
DialogBoxParamA
GetWindowTextLengthW
GetWindowTextW
GetWindowTextLengthA
GetWindowTextA
SetWindowTextW
SetWindowTextA
CreateWindowExW
RegisterClassW
RegisterClassA
SendMessageW
LoadStringW
LoadStringA
AppendMenuW
SendMessageA
InsertMenuItemW
SetMenuItemInfoA
SetMenuItemInfoW
GetMenuItemInfoA
GetMenuItemInfoW
CharPrevA
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
CharLowerW
CharLowerA
CharUpperW
CharUpperA
CheckDlgButton
KillTimer
wsprintfA
SetDlgItemTextA
IsDlgButtonChecked
ClientToScreen
GetCursorPos
AppendMenuA
TrackPopupMenuEx
ScreenToClient
IsWindowEnabled
ChildWindowFromPointEx
WindowFromPoint
RegisterClipboardFormatA
SetWindowLongW
InvalidateRect
UpdateWindow
SetTimer
MapVirtualKeyA
CallWindowProcW
CallWindowProcA
GetParent
GetKeyState
GetSubMenu
CreatePopupMenu
RemoveMenu
CheckMenuRadioItem
CheckMenuItem
GetMenuItemCount
GetMenu
LoadMenuA
SetMenu
DrawMenuBar
DestroyMenu
GetDlgItem
MoveWindow
IsZoomed
GetClientRect
MessageBoxW
ReleaseCapture
SetCapture
GetCapture
DefWindowProcW
DefWindowProcA
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
DispatchMessageA
LoadIconA
LoadCursorA
GetWindowPlacement
oleaut32
SysStringByteLen
VariantCopy
VariantClear
SysFreeString
SysAllocString
advapi32
GetUserNameW
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegSetValueExW
RegQueryValueExA
RegCreateKeyExA
RegQueryValueExW
shell32
SHChangeNotify
ShellExecuteExA
SHGetDesktopFolder
SHGetPathFromIDListA
SHBrowseForFolderA
SHFileOperationA
SHGetMalloc
SHGetFileInfoA
SHGetSpecialFolderLocation
ShellExecuteA
ole32
CoTaskMemAlloc
CoTaskMemFree
OleUninitialize
OleInitialize
RegisterDragDrop
RevokeDragDrop
DoDragDrop
CoUninitialize
CoInitialize
CoCreateInstance
comctl32
CreateStatusWindowW
ord17
InitCommonControlsEx
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
PropertySheetW
PropertySheetA
CreateToolbarEx
mpr
WNetOpenEnumA
WNetCloseEnum
WNetEnumResourceA
WNetEnumResourceW
WNetGetResourceParentA
WNetGetResourceParentW
WNetGetResourceInformationA
WNetGetResourceInformationW
WNetAddConnection2A
WNetAddConnection2W
WNetOpenEnumW
gdi32
DeleteObject
comdlg32
GetOpenFileNameA
GetOpenFileNameW
msvcrt
wcscpy
__dllonexit
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
rand
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
?terminate@@YAXXZ
__CxxFrameHandler
_CxxThrowException
memcmp
_purecall
memset
memmove
memcpy
_wcsicmp
wcslen
malloc
free
srand
_onexit
kernel32
SetEndOfFile
WriteFile
SetFilePointer
GetFileSize
CreateFileA
GetLogicalDriveStringsW
GetLogicalDriveStringsA
FindFirstChangeNotificationW
FindFirstChangeNotificationA
FindCloseChangeNotification
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindClose
GetTempFileNameW
GetTempFileNameA
GetTempPathW
GetTempPathA
GetCurrentDirectoryW
GetFullPathNameW
GetFullPathNameA
DeleteFileW
DeleteFileA
CreateDirectoryW
CreateDirectoryA
MoveFileW
RemoveDirectoryW
SetFileAttributesW
MoveFileA
RemoveDirectoryA
SetFileAttributesA
SetLastError
CreateFileW
SetFileTime
GetWindowsDirectoryW
GetWindowsDirectoryA
ReadFile
GetDiskFreeSpaceA
FormatMessageW
FormatMessageA
LocalFree
GetModuleFileNameW
GetModuleFileNameA
LoadLibraryW
GetVolumeInformationA
LoadLibraryExA
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcess
SetPriorityClass
lstrcatA
lstrlenA
GetTickCount
FileTimeToLocalFileTime
WaitForMultipleObjects
Sleep
CreateProcessA
CreateProcessW
CloseHandle
CompareFileTime
GlobalAlloc
GlobalFree
GlobalSize
GlobalLock
GlobalUnlock
GetSystemDefaultLangID
GetUserDefaultLangID
AreFileApisANSI
GetModuleHandleW
GetModuleHandleA
CopyFileA
WaitForSingleObject
FindNextChangeNotification
GetCompressedFileSizeW
GetDriveTypeA
GetCommandLineW
GetVersionExA
LoadLibraryA
FileTimeToSystemTime
HeapFree
GetProcessHeap
HeapAlloc
FileTimeToDosDateTime
SystemTimeToFileTime
GetSystemTime
GetStdHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
FreeLibrary
GetProcAddress
DeleteCriticalSection
GetLastError
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
GetVolumeInformationW
CreateEventA
VirtualAlloc
VirtualFree
SetEvent
InitializeCriticalSection
GetStartupInfoA
DeviceIoControl
Sections
.text Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ