Static task
static1
Behavioral task
behavioral1
Sample
64f3927e7fbe05575fe5bd11324c6e8e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
64f3927e7fbe05575fe5bd11324c6e8e.exe
Resource
win10v2004-20231222-en
General
-
Target
64f3927e7fbe05575fe5bd11324c6e8e
-
Size
700KB
-
MD5
64f3927e7fbe05575fe5bd11324c6e8e
-
SHA1
33b8e4de915d0c9c58aded97d749a85483bbb6d5
-
SHA256
de6d1790e14e6bd7b18cbe792a5d499d1356398e553b4db63059ab4b7a2b363a
-
SHA512
52f876a0b5fb7fbd09787391f472c9a54e93da38742c5dd50b9bc638f849a693410da1556fc4a7356bcb42e68455a210893cb16d067682929a9a6e51194ca744
-
SSDEEP
12288:MT2gcTjTch/deEgVRiJXzQElZve5EWtFMXxZOTsrxvqppZ9YS3uxprQdvLb:MT2FjTchVeEg74jfgEWtFCSpziS3uxpG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64f3927e7fbe05575fe5bd11324c6e8e
Files
-
64f3927e7fbe05575fe5bd11324c6e8e.exe windows:4 windows x86 arch:x86
9a0b8e3acad29ab252b157c01f650e37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetOpenFileNameA
PrintDlgA
user32
DeferWindowPos
UpdateWindow
RegisterClassW
SetDlgItemTextW
LoadStringW
SetActiveWindow
SetWindowTextW
GetDesktopWindow
MapWindowPoints
SetForegroundWindow
CallWindowProcW
TrackPopupMenu
IsDialogMessageW
UnhookWindowsHookEx
UnregisterClassA
wsprintfW
EnableMenuItem
InsertMenuItemW
GetTopWindow
LoadCursorW
OffsetRect
RegisterClassExW
GetKeyState
SetCapture
DrawStateW
GetForegroundWindow
DrawFrameControl
RegisterClipboardFormatW
CloseClipboard
GetDlgCtrlID
CallNextHookEx
ClientToScreen
GetClientRect
GetSystemMenu
LoadIconW
DefWindowProcW
SetTimer
SetScrollPos
PeekMessageW
FillRect
GetLastActivePopup
GetNextDlgTabItem
GetKeyboardLayout
GetSysColorBrush
GetWindowDC
GetCursorPos
SetDlgItemInt
EmptyClipboard
IsIconic
ReleaseDC
EnumChildWindows
GetClassNameW
InsertMenuW
DeleteMenu
GetWindowThreadProcessId
InvalidateRect
GetMenu
SetRectEmpty
CheckMenuItem
GetSysColor
SetScrollInfo
SetWindowPos
InflateRect
GetAsyncKeyState
MessageBoxA
SetMenuItemInfoW
GetWindowPlacement
ChildWindowFromPoint
OpenClipboard
GetMessagePos
IsWindow
LoadMenuW
FrameRect
wsprintfA
IsZoomed
EndDialog
ScrollWindow
BeginDeferWindowPos
EqualRect
GetMessageW
GetClipboardData
DestroyWindow
GetMenuState
LoadAcceleratorsW
TranslateAcceleratorW
CopyRect
GetWindowTextW
GetParent
IsWindowVisible
SetClipboardData
AppendMenuW
SetMenu
GetMenuItemInfoW
ReleaseCapture
IntersectRect
DispatchMessageW
SetCursor
SetFocus
GetDC
GetWindowLongW
TrackPopupMenuEx
SetWindowLongW
CreateDialogParamW
IsMenu
SendMessageW
DestroyCursor
LoadImageW
PostQuitMessage
AdjustWindowRectEx
MoveWindow
MsgWaitForMultipleObjects
InvalidateRgn
BringWindowToTop
IsRectEmpty
ShowWindow
IsWindowEnabled
DrawFocusRect
GetScrollPos
GetMenuItemCount
DrawTextW
GetActiveWindow
BeginPaint
RedrawWindow
IsDlgButtonChecked
EndDeferWindowPos
SetDlgItemTextA
MapDialogRect
GetWindow
DrawEdge
DrawIconEx
GetCapture
IsClipboardFormatAvailable
CheckDlgButton
SetRect
ScreenToClient
KillTimer
SystemParametersInfoW
GetFocus
GetSystemMetrics
RemoveMenu
GetScrollInfo
SetMenuDefaultItem
LockWindowUpdate
PostMessageW
GetDoubleClickTime
UnpackDDElParam
AttachThreadInput
TranslateMessage
GetUpdateRect
CreatePopupMenu
EnumWindows
CreateWindowExW
CreateDialogIndirectParamW
MessageBoxW
MessageBeep
SetWindowPlacement
DialogBoxParamW
GetWindowRect
SendMessageTimeoutW
WindowFromPoint
SendDlgItemMessageA
DestroyMenu
SetParent
IsChild
ScrollWindowEx
DestroyIcon
GetMenuItemID
EnableWindow
EndPaint
GetDlgItem
GetSubMenu
GetWindowTextLengthW
PtInRect
SendDlgItemMessageW
SystemParametersInfoA
kernel32
LocalFileTimeToFileTime
FatalAppExitA
LoadResource
InterlockedCompareExchange
FindClose
CreateProcessW
VirtualProtect
VirtualAlloc
GlobalFree
GlobalSize
SystemTimeToFileTime
GetOEMCP
CreateFileW
GetExitCodeProcess
FreeEnvironmentStringsA
SizeofResource
HeapFree
SetFilePointer
WriteConsoleA
GetStringTypeW
lstrcmpiA
CreateThread
GetFileType
FileTimeToLocalFileTime
GetCurrentThreadId
DuplicateHandle
SetStdHandle
GlobalFlags
GlobalAlloc
GetLastError
GetLocaleInfoW
FlushFileBuffers
GlobalLock
GetFileAttributesA
GetSystemTimeAsFileTime
lstrcmpA
GetFileSize
HeapSize
GetModuleHandleA
WriteFile
DeleteCriticalSection
GetStartupInfoA
HeapCreate
UnhandledExceptionFilter
GetModuleFileNameW
GlobalUnlock
GetProcAddress
SetErrorMode
TlsAlloc
ExitThread
GetACP
CreateMutexA
InitializeCriticalSection
CompareStringW
LoadLibraryA
ReadFile
SuspendThread
InterlockedIncrement
WideCharToMultiByte
GetEnvironmentStringsW
FormatMessageW
EnterCriticalSection
CloseHandle
TlsSetValue
IsValidLocale
LocalFree
SetEnvironmentVariableA
SetUnhandledExceptionFilter
GetCurrentThread
MoveFileW
WaitForSingleObject
GetEnvironmentStrings
DeleteFileA
MulDiv
GetModuleHandleW
TerminateProcess
CreateProcessA
GetTempFileNameA
GetVersionExA
GetLocalTime
SetHandleCount
LCMapStringA
FreeEnvironmentStringsW
RtlUnwind
LCMapStringW
GlobalMemoryStatus
IsBadWritePtr
VirtualFree
InterlockedExchange
lstrlenA
GetFileTime
lstrcpyA
SetConsoleCtrlHandler
GetCurrentDirectoryA
LockResource
SetCurrentDirectoryA
GetCommandLineW
GetTimeZoneInformation
GetVersion
GetDriveTypeA
CompareStringA
GetStartupInfoW
CreateFileA
GlobalReAlloc
SetEvent
UnlockFile
SetEndOfFile
GetThreadLocale
IsBadReadPtr
GetProcessHeap
FindFirstFileW
LeaveCriticalSection
RaiseException
HeapReAlloc
GetCurrentProcess
MapViewOfFile
GetCPInfo
InterlockedDecrement
GetSystemInfo
SetLastError
GetStringTypeA
FindFirstFileA
IsDebuggerPresent
GetCommandLineA
TlsGetValue
GetDateFormatA
FreeResource
SetThreadPriority
ExitProcess
IsValidCodePage
FileTimeToSystemTime
VirtualQuery
LocalReAlloc
GlobalHandle
GetModuleFileNameA
GetFullPathNameW
GetCurrentProcessId
TlsFree
LockFile
QueryPerformanceCounter
GetLocaleInfoA
GetStdHandle
GetTimeFormatA
GetUserDefaultLCID
Sleep
HeapAlloc
ConvertDefaultLocale
IsBadCodePtr
GetSystemTime
GetTickCount
CreateMutexW
UnmapViewOfFile
HeapDestroy
MultiByteToWideChar
FreeLibrary
OutputDebugStringA
comctl32
InitCommonControlsEx
ImageList_Remove
CreatePropertySheetPageA
ord17
ImageList_Create
gdi32
GetRgnBox
GetClipBox
SetBkColor
MaskBlt
CombineRgn
ExtTextOutA
CreateDCA
CreateBitmap
EndPath
CreateRoundRectRgn
SetDIBitsToDevice
SetBrushOrgEx
EndDoc
SetViewportOrgEx
ExcludeClipRect
PtInRegion
Ellipse
StretchBlt
EqualRgn
CreateFontA
GetTextMetricsA
GetDeviceCaps
DeleteDC
GetFontData
GetClipRgn
GetTextFaceA
CreateFontIndirectA
CreateRectRgn
StrokePath
SetROP2
ExtCreateRegion
OffsetRgn
ExtFloodFill
LineTo
SetWindowOrgEx
GetStockObject
GetBkMode
CreateCompatibleDC
BitBlt
EnumFontFamiliesExA
PatBlt
CreateDIBitmap
GetNearestPaletteIndex
GetObjectA
SetPaletteEntries
RectVisible
GetTextColor
SetPolyFillMode
DPtoLP
SetPixel
PtVisible
CreateEllipticRgn
CreatePolygonRgn
Rectangle
GetTextExtentPoint32A
SetTextColor
UnrealizeObject
CreatePatternBrush
DeleteObject
GetBkColor
TextOutA
FillRgn
ExtSelectClipRgn
SetRectRgn
CreateSolidBrush
SetAbortProc
SetMapMode
GdiFlush
FillPath
Chord
GetViewportExtEx
EndPage
RealizePalette
StartDocA
GetTextExtentPoint32W
CreatePen
RoundRect
CreatePalette
GetMapMode
GetViewportOrgEx
LPtoDP
ResizePalette
StartPage
SelectClipRgn
OffsetViewportOrgEx
CreateHatchBrush
SelectObject
GetRegionData
GetTextCharsetInfo
BeginPath
SetBkMode
advapi32
RegCloseKey
RegDeleteValueA
SetSecurityDescriptorDacl
AdjustTokenPrivileges
RegSetValueA
OpenProcessToken
RegEnumKeyExA
DeleteService
RegOpenKeyA
GetUserNameA
StartServiceA
CloseServiceHandle
OpenServiceA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyA
RegCreateKeyExA
ControlService
RegEnumKeyA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
RegQueryValueA
ole32
OleCreateFromData
OleRun
ReleaseStgMedium
CoGetClassObject
OleFlushClipboard
CoCreateInstance
CoInitializeEx
CreateILockBytesOnHGlobal
ReadClassStg
CoFreeUnusedLibraries
ReadFmtUserTypeStg
StgCreateDocfileOnILockBytes
CoTaskMemFree
CoTaskMemAlloc
CoTreatAsClass
CreateItemMoniker
OleInitialize
OleLockRunning
CoUninitialize
OleCreateStaticFromData
CreateStreamOnHGlobal
CLSIDFromProgID
OleUninitialize
SetConvertStg
CoInitialize
OleIsCurrentClipboard
WriteFmtUserTypeStg
Sections
.text Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 464KB - Virtual size: 462KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ