Static task
static1
Behavioral task
behavioral1
Sample
5af73427622b7fd77f5c6ab48c828918.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5af73427622b7fd77f5c6ab48c828918.exe
Resource
win10v2004-20231222-en
General
-
Target
5af73427622b7fd77f5c6ab48c828918
-
Size
109KB
-
MD5
5af73427622b7fd77f5c6ab48c828918
-
SHA1
0377677d06edcc06b521e0e106bd5c7a1f2b05ab
-
SHA256
2c3a79b9a5c306770911cb8fded9b2c8f7a74e72384bad17442c39a75957c039
-
SHA512
bc198f64871a8850c54a2aaa8ea7723c174b9bf14cc23ce5b2d1120f0f875f1c6f8a0e45558d96520ce4917cb5e2ebdf4da99d08f8156f6d42209e5ea2742594
-
SSDEEP
3072:/EJ7+cuChbFuqGxZ3zq+9S10rm00lJEr:G+IFF0xRzxc0iRE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5af73427622b7fd77f5c6ab48c828918
Files
-
5af73427622b7fd77f5c6ab48c828918.exe windows:4 windows x86 arch:x86
1a8a9df5f0a35d699f3bff888454f705
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
cos
calloc
strncmp
wcscspn
memmove
memcpy
user32
CreateIcon
GetKeyboardState
LoadIconA
GetDC
GetMenuStringA
RedrawWindow
SetClassLongA
SendMessageA
SetTimer
GetMenuItemID
LoadCursorA
GetSysColor
MapWindowPoints
SetWindowLongA
DrawIcon
FillRect
SetActiveWindow
FindWindowA
IsWindow
OffsetRect
GetMenuItemInfoA
GetCapture
GetSysColorBrush
CharUpperBuffA
CloseClipboard
DestroyWindow
SetMenu
EnableMenuItem
EnumWindows
ChildWindowFromPoint
IsIconic
PtInRect
InvalidateRect
InsertMenuA
SetCursor
GetWindowDC
GetDesktopWindow
CharNextW
SystemParametersInfoA
GetKeyboardLayoutNameA
SetWindowTextA
FrameRect
GetTopWindow
SetScrollRange
SetWindowsHookExA
GetKeyNameTextA
GetLastActivePopup
EmptyClipboard
MapVirtualKeyA
GetCursorPos
MessageBeep
IsRectEmpty
GetMessagePos
GetWindowLongA
GetWindow
SetWindowPlacement
SetCapture
PostMessageA
DefWindowProcA
IsChild
PostQuitMessage
CreatePopupMenu
SetPropA
GetKeyState
GetScrollInfo
DestroyMenu
OpenClipboard
IsZoomed
LoadBitmapA
CharNextA
GetClassInfoA
GetScrollPos
TranslateMDISysAccel
MoveWindow
SetForegroundWindow
GetMenuItemCount
GetPropA
OemToCharA
RemovePropA
InsertMenuItemA
IsDialogMessageA
EndPaint
RemoveMenu
DrawEdge
DispatchMessageA
ReleaseCapture
GetParent
TranslateMessage
GetWindowTextA
IsWindowVisible
ShowWindow
wsprintfA
IntersectRect
DrawFrameControl
IsWindowUnicode
MessageBoxA
CharToOemA
KillTimer
EqualRect
GetWindowLongW
GetDCEx
GetScrollRange
ClientToScreen
EnableScrollBar
TrackPopupMenu
SetParent
SetScrollPos
DefMDIChildProcA
ScreenToClient
ScrollWindow
GetClassLongA
SendMessageW
PeekMessageW
GetSystemMenu
InflateRect
DestroyCursor
PeekMessageA
LoadStringA
DrawIconEx
GetKeyboardType
GetDlgItem
GetIconInfo
UpdateWindow
GetWindowRect
SetClipboardData
SetWindowLongW
GetClientRect
BeginPaint
GetForegroundWindow
CallNextHookEx
UnregisterClassA
LoadKeyboardLayoutA
CharLowerBuffA
CheckMenuItem
ShowScrollBar
CharLowerA
WaitMessage
SetScrollInfo
GetSubMenu
GetClipboardData
SetFocus
CreateWindowExA
GetMenuState
DrawAnimatedRects
GetKeyboardLayout
ShowOwnedPopups
GetFocus
RegisterClassA
MsgWaitForMultipleObjects
CreateMenu
GetSystemMetrics
UnhookWindowsHookEx
DrawTextA
GetClassNameA
GetWindowThreadProcessId
DefFrameProcA
EnumChildWindows
GetActiveWindow
SetMenuItemInfoA
DestroyIcon
RegisterClipboardFormatA
AdjustWindowRectEx
SetWindowPos
WindowFromPoint
EnumThreadWindows
GetMenu
GetKeyboardLayoutList
SetRect
ActivateKeyboardLayout
GetCursor
RegisterWindowMessageA
ReleaseDC
DispatchMessageW
IsWindowEnabled
IsDialogMessageW
CallWindowProcA
kernel32
GetFileAttributesA
GetStartupInfoA
GetStringTypeW
SetFilePointer
FreeLibrary
SizeofResource
GetFullPathNameA
lstrcpynA
SetErrorMode
GetModuleHandleA
GetStdHandle
GetFileSize
GlobalAlloc
SetHandleCount
CreateEventA
GetVersionExA
VirtualAlloc
WaitForSingleObject
Sleep
InitializeCriticalSection
LocalAlloc
GetCommandLineA
CreateThread
FindFirstFileA
GetACP
GlobalDeleteAtom
CompareStringA
VirtualAllocEx
GetSystemDefaultLangID
HeapFree
LoadResource
ExitThread
LoadLibraryExA
GetUserDefaultLCID
GetCPInfo
GetModuleFileNameA
MoveFileA
GetCurrentProcessId
HeapAlloc
lstrcpyA
lstrlenA
WideCharToMultiByte
SetEndOfFile
GlobalFindAtomA
DeleteFileA
lstrcmpiA
SetThreadLocale
EnumCalendarInfoA
GetDateFormatA
GlobalAddAtomA
GetTickCount
lstrcatA
GetDiskFreeSpaceA
SetLastError
MulDiv
ExitProcess
GetThreadLocale
FormatMessageA
GetCurrentProcess
CloseHandle
GetLastError
LocalReAlloc
ReadFile
GetFileType
GetProcessHeap
SetEvent
VirtualFree
GetCurrentThread
WriteFile
CreateFileA
FindResourceA
GetLocalTime
FreeResource
GetVersion
FindClose
ResetEvent
GetOEMCP
LockResource
GetCurrentThreadId
HeapDestroy
LocalFree
RaiseException
GetProcAddress
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ