Static task
static1
Behavioral task
behavioral1
Sample
6610853c116e3a3332b118fb9824f403.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6610853c116e3a3332b118fb9824f403.exe
Resource
win10v2004-20231222-en
General
-
Target
6610853c116e3a3332b118fb9824f403
-
Size
1.3MB
-
MD5
6610853c116e3a3332b118fb9824f403
-
SHA1
609e50cea4cd2c5e53697c5ff1785fd4f39268f7
-
SHA256
52f50284eca9351bc6ec4120305e6c4cb621656920545dd9fb6c670af0edb932
-
SHA512
6e40331c09de3a5c8491b34379f0a89d341c49955418f6357ebc680c9a63fbcc617eacb099fb694c6543e1c97b9bbb5fec8252cfb934dba9d1520a15826ac26c
-
SSDEEP
24576:BbZ1gRhO5JkEerZiCNkVizxJuVuqI6uuR1u+kjiS3bWuuyMuuuuV7jGnIrxjXeBl:BPkh+JOfzxJuVuqI6uuR1u+kjiS3bWul
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6610853c116e3a3332b118fb9824f403
Files
-
6610853c116e3a3332b118fb9824f403.exe windows:4 windows x86 arch:x86
abb49a435f34e4b06bedb049efe7a522
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
kernel32
SetUnhandledExceptionFilter
IsBadWritePtr
GetDriveTypeA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
VirtualFree
VirtualAlloc
HeapCreate
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
IsBadCodePtr
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
GetProfileStringA
_lclose
_lread
HeapDestroy
CompareStringW
CompareStringA
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
lstrcpynA
GetCurrentDirectoryA
SetCurrentDirectoryA
FindFirstFileA
FindClose
GetModuleFileNameA
LCMapStringW
LCMapStringA
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
IsBadReadPtr
HeapFree
TerminateProcess
ExitProcess
RtlUnwind
RaiseException
InterlockedExchange
Sleep
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetOEMCP
GetCPInfo
GetProcessVersion
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
FormatMessageA
LocalFree
CloseHandle
MulDiv
SetLastError
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
_llseek
OpenFile
IsValidLocale
IsValidCodePage
GetLocaleInfoA
user32
WindowFromPoint
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
ShowOwnedPopups
DestroyMenu
LoadAcceleratorsA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GetMenuCheckMarkDimensions
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
LoadIconA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
GetScrollInfo
SetScrollInfo
TranslateAcceleratorA
SetRectEmpty
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
CallWindowProcA
RemovePropA
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
SystemParametersInfoA
GetWindowPlacement
PostMessageA
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetSysColor
GetWindow
GetClientRect
SetMenuItemInfoA
GetMenuItemInfoA
SetWindowPos
IsIconic
GetMenu
GetSubMenu
PostThreadMessageA
GetParent
GetWindowRect
CreatePopupMenu
LoadMenuA
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
AppendMenuA
GetMessageTime
GetMessagePos
IntersectRect
GetSystemMetrics
SendMessageA
InvalidateRect
EnableWindow
GrayStringA
DrawTextA
TabbedTextOutA
LoadBitmapA
LoadCursorA
UpdateWindow
SetParent
RegisterClipboardFormatA
LockWindowUpdate
GetDCEx
InflateRect
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
CharUpperA
DestroyIcon
LoadStringA
GetSysColorBrush
DeleteMenu
InsertMenuA
GetClassNameA
FillRect
DrawFocusRect
GetAsyncKeyState
SetRect
KillTimer
SetTimer
IsZoomed
PtInRect
GetPropA
UnpackDDElParam
SetCapture
BringWindowToTop
GetDesktopWindow
ReuseDDElParam
SetMenu
RegisterClassA
ReleaseCapture
TrackPopupMenu
SetCursor
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
gdi32
PtVisible
TextOutA
ExtTextOutA
Escape
GetDeviceCaps
CreateDIBSection
DeleteObject
GetTextMetricsA
CreateCompatibleBitmap
CreateBitmap
PatBlt
StretchBlt
GetClipBox
SetTextColor
SetBkColor
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
BitBlt
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
CreateRectRgnIndirect
StretchDIBits
GetCharWidthA
CreateFontA
GetTextExtentPoint32A
CreateFontIndirectA
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
SetRectRgn
CombineRgn
CreateCompatibleDC
GetTextExtentPointA
GetObjectA
RectVisible
CreateDIBitmap
comdlg32
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegDeleteValueA
RegCreateKeyA
SetFileSecurityA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegSetValueA
GetFileSecurityA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
shell32
SHGetFileInfoA
ExtractIconA
DragQueryFileA
DragFinish
DragAcceptFiles
comctl32
CreatePropertySheetPageA
DestroyPropertySheetPage
ord17
PropertySheetA
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
CoTaskMemAlloc
CoTaskMemFree
olepro32
ord253
oleaut32
VariantChangeType
SysAllocString
VariantTimeToSystemTime
VariantClear
VariantCopy
SysFreeString
SysAllocStringByteLen
SysAllocStringLen
SysStringLen
Sections
.text Size: 504KB - Virtual size: 503KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 388KB - Virtual size: 387KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tc Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE