Static task
static1
Behavioral task
behavioral1
Sample
665ee5ad168938f1b076199bbdf1daf0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
665ee5ad168938f1b076199bbdf1daf0.exe
Resource
win10v2004-20231222-en
General
-
Target
665ee5ad168938f1b076199bbdf1daf0
-
Size
612KB
-
MD5
665ee5ad168938f1b076199bbdf1daf0
-
SHA1
49b17df03e43a0cad514c50fbf103cad6d6cbbe9
-
SHA256
83efbae29b99c85d40eaf2daedc99eecb52c3fc1d63e8cf18743604d7aea8f09
-
SHA512
32ac07a376786790bfefd8566bed646cd9ce3f9a98ef6f11de23764cc1a8d174e5a8120b8af9699ed37e8e558e7aa367015628dd0d7df573b2d5ea273c866ca1
-
SSDEEP
6144:JE68GVFz+qpysPsu8uFa86XvC8AfaEJc51tYlm2V9BTz0faf13qVrUh+M4bqAvFj:m6Lz/b7QRvzdEKdYpxYyNqVyAHA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 665ee5ad168938f1b076199bbdf1daf0
Files
-
665ee5ad168938f1b076199bbdf1daf0.exe windows:4 windows x86 arch:x86
2ce76182f00c2bf89adb5f4d80e8b87a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Copy
CreateStatusWindowW
InitCommonControlsEx
CreatePropertySheetPageW
ImageList_DragShowNolock
ImageList_Destroy
ImageList_DrawEx
kernel32
FindAtomW
GetConsoleOutputCP
GetCommandLineA
ReadFile
GetTimeZoneInformation
EnumDateFormatsW
GetModuleHandleA
SetHandleCount
GetTickCount
SetThreadAffinityMask
ExitProcess
GetCurrentProcess
LeaveCriticalSection
GetVersionExA
GetCurrentThreadId
GetModuleFileNameA
WriteFileEx
HeapSize
FreeLibrary
MoveFileExW
OpenMutexA
WaitNamedPipeA
GetConsoleMode
WideCharToMultiByte
ResetEvent
FindFirstFileExA
GetFileType
OpenWaitableTimerA
GetCurrentProcessId
TerminateProcess
GetPrivateProfileSectionW
VirtualAlloc
FreeEnvironmentStringsW
GetLogicalDrives
WriteFile
OutputDebugStringA
GetStringTypeW
CreateFileMappingW
SetFileAttributesA
InterlockedDecrement
UnlockFile
IsValidCodePage
SetLastError
GetOEMCP
SetFilePointer
EnumSystemLocalesA
GetStringTypeA
CreateRemoteThread
GetLogicalDriveStringsA
GetAtomNameA
lstrcpynW
WaitForDebugEvent
RtlMoveMemory
GetThreadContext
InterlockedExchangeAdd
GetLongPathNameA
TlsSetValue
TlsGetValue
GetCurrentThread
SetConsoleTitleA
GlobalAlloc
VirtualQuery
GetLastError
GetEnvironmentVariableW
GetLocaleInfoW
RtlUnwind
UnhandledExceptionFilter
IsDebuggerPresent
SetConsoleWindowInfo
GetTimeFormatA
HeapCreate
LCMapStringW
GetProcAddress
GetACP
CreateMutexA
CreateWaitableTimerA
SetEnvironmentVariableW
GetCommandLineW
GetProfileSectionW
GetPriorityClass
InterlockedExchange
SetStdHandle
DeleteFileA
RemoveDirectoryW
GetLocaleInfoA
GetConsoleCP
UnmapViewOfFile
EnterCriticalSection
GlobalFindAtomW
CloseHandle
ReadConsoleInputA
GetVolumeInformationA
GetEnvironmentStringsW
LoadLibraryA
EnumSystemCodePagesA
GetSystemTimeAsFileTime
DeleteCriticalSection
WriteConsoleW
HeapFree
TlsAlloc
CreatePipe
GetFileSize
Sleep
TransmitCommChar
GlobalFindAtomA
OpenFileMappingA
GetCPInfo
GetPrivateProfileSectionA
GetProcessHeap
CreateFileA
GetStartupInfoA
WriteConsoleA
GetDateFormatA
GetStdHandle
SetConsoleCtrlHandler
GetProcessAffinityMask
MapViewOfFileEx
LoadResource
FlushFileBuffers
HeapReAlloc
CompareStringW
ExitThread
CreateDirectoryW
FoldStringA
GetCompressedFileSizeA
IsValidLocale
SetFileAttributesW
MultiByteToWideChar
GetCurrencyFormatA
WritePrivateProfileStringW
LCMapStringA
VirtualFree
HeapDestroy
FreeEnvironmentStringsA
QueryPerformanceCounter
TlsFree
WriteConsoleOutputW
LoadModule
SetUnhandledExceptionFilter
FillConsoleOutputCharacterW
SetEnvironmentVariableA
InterlockedIncrement
InitializeCriticalSection
WritePrivateProfileStringA
CompareStringA
FlushConsoleInputBuffer
HeapAlloc
FindResourceA
WritePrivateProfileStructA
GlobalUnfix
TransactNamedPipe
GetEnvironmentStrings
GetUserDefaultLCID
user32
GetTopWindow
SetDoubleClickTime
CopyRect
IsCharLowerA
InSendMessage
SetThreadDesktop
DdeCmpStringHandles
MsgWaitForMultipleObjects
DefWindowProcA
MessageBoxA
DispatchMessageW
BringWindowToTop
RegisterClassA
SetScrollInfo
DefFrameProcW
SetFocus
ShowWindow
MsgWaitForMultipleObjectsEx
SetWinEventHook
GetUserObjectInformationA
GetDoubleClickTime
CascadeWindows
DefFrameProcA
GetAncestor
GetClassInfoExW
DrawFrameControl
LoadKeyboardLayoutA
DestroyWindow
GetScrollRange
CharLowerA
SendMessageW
RegisterClassExA
ActivateKeyboardLayout
CreateWindowExW
CharPrevExA
IsCharAlphaNumericW
GetMenuContextHelpId
Sections
.text Size: 156KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 312KB - Virtual size: 309KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ