Static task
static1
Behavioral task
behavioral1
Sample
670c8382c8987abfdbfbfbcef61711de.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
670c8382c8987abfdbfbfbcef61711de.exe
Resource
win10v2004-20231222-en
General
-
Target
670c8382c8987abfdbfbfbcef61711de
-
Size
744KB
-
MD5
670c8382c8987abfdbfbfbcef61711de
-
SHA1
dff782640467f570ce7da9718b43e8a477ebbed5
-
SHA256
3732fa3fa3959ce7cd0157ba0e98daef45a60f449a15b980eb3f346c104abd1e
-
SHA512
f0c5250edea8876366b692544e9003fc697d2ada6de329665512f235deac314b1d9859cfb1010ac214f77382c408187a85b2e87ac19b1152d4761b5dcbd639f9
-
SSDEEP
12288:++AtCxEVyPzuxcMTbq4Z5DGdl1Ur4hCsGeIyjNppHnNGBHXx9VXZoDWZ/LNYD:++4CxEVyPzmJTmo56LhCJlyjdNGBh7Zm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 670c8382c8987abfdbfbfbcef61711de
Files
-
670c8382c8987abfdbfbfbcef61711de.exe windows:4 windows x86 arch:x86
9b032d0825e20b3456e675092ac67515
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetRgnBox
GetDeviceCaps
SetPixelV
GetObjectA
SelectClipPath
DeleteObject
GetLogColorSpaceW
GdiPlayJournal
GetMetaRgn
DeleteDC
GdiSetBatchLimit
CreateDCA
comdlg32
PrintDlgW
ChooseColorA
user32
GetMessagePos
SetKeyboardState
DefMDIChildProcA
DefWindowProcW
RegisterClassExW
DefFrameProcA
ExcludeUpdateRgn
GetMessageExtraInfo
GetMenuStringW
GetSubMenu
FrameRect
CharUpperW
IsChild
GetClipboardData
GetParent
DialogBoxIndirectParamA
DdeNameService
DlgDirListComboBoxW
IsWindowVisible
CallNextHookEx
GetInputState
wsprintfW
CreateWindowExW
LoadMenuIndirectA
DrawCaption
SetMenuInfo
OemKeyScan
SetClassLongA
GetNextDlgGroupItem
InvalidateRect
RegisterClassA
TrackMouseEvent
CharNextExA
GetQueueStatus
EnumWindows
ArrangeIconicWindows
CharNextA
IsDlgButtonChecked
CreateDialogIndirectParamA
ImpersonateDdeClientWindow
GetCaretPos
GetMonitorInfoW
LoadBitmapA
GetAncestor
EnumPropsA
OpenDesktopW
LoadCursorFromFileW
ReleaseDC
GetMenuItemInfoA
SetSysColors
CreateWindowExA
VkKeyScanExW
GetClipboardOwner
GetKBCodePage
FindWindowW
BroadcastSystemMessageW
SendNotifyMessageW
GetProcessDefaultLayout
EnumPropsExW
DrawAnimatedRects
DdeQueryConvInfo
DdeInitializeW
ScreenToClient
MsgWaitForMultipleObjectsEx
EnumWindowStationsA
GetMonitorInfoA
EndDeferWindowPos
RegisterDeviceNotificationA
AdjustWindowRect
InflateRect
DialogBoxParamA
MessageBoxW
DrawFocusRect
GetClassInfoA
ChangeDisplaySettingsW
SetTimer
GetNextDlgTabItem
LockWindowUpdate
FindWindowExW
EnableScrollBar
SetForegroundWindow
GetWindow
EmptyClipboard
CharUpperBuffW
GetKeyState
SetMenuDefaultItem
DdeCreateStringHandleW
GetMenuDefaultItem
TrackPopupMenuEx
GrayStringW
TranslateMessage
SendMessageW
GetCapture
LookupIconIdFromDirectory
ShowWindow
GetWindowLongA
GetWindowRect
GetWindowInfo
RegisterClassExA
SetClassLongW
GetMessageW
DestroyWindow
TileChildWindows
shell32
ExtractIconA
SHGetSpecialFolderPathW
DragAcceptFiles
comctl32
InitCommonControlsEx
ImageList_DragMove
DrawStatusTextW
ImageList_EndDrag
ImageList_Destroy
CreateUpDownControl
ImageList_GetImageRect
kernel32
UnlockFileEx
MultiByteToWideChar
GetTimeZoneInformation
FreeEnvironmentStringsW
InterlockedExchange
FreeEnvironmentStringsA
RtlUnwind
GetProcAddress
GetCommandLineA
GetLocaleInfoW
EnterCriticalSection
GetTickCount
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
SetEnvironmentVariableA
GetCurrentProcessId
VirtualAlloc
GetConsoleMode
InterlockedDecrement
LocalUnlock
GetCurrentThread
HeapAlloc
WriteConsoleA
LCMapStringA
HeapReAlloc
TlsFree
HeapDestroy
ExitProcess
IsBadWritePtr
GetLastError
GetTimeFormatA
LCMapStringW
InitializeCriticalSection
LeaveCriticalSection
GetModuleHandleA
TlsAlloc
CreateMutexA
GetStartupInfoA
IsDebuggerPresent
lstrcpy
GetFileType
EnumSystemLocalesA
SetHandleCount
UnhandledExceptionFilter
TerminateProcess
GetUserDefaultLCID
GetEnvironmentStringsW
GetConsoleCP
WideCharToMultiByte
GetOEMCP
HeapCreate
GetCurrentProcess
SetLastError
CompareStringA
lstrcpyn
Sleep
VirtualFree
TlsGetValue
FreeLibrary
GetStringTypeW
WriteConsoleW
GetStringTypeA
GetACP
HeapSize
GetLocaleInfoA
GetDateFormatA
DeleteCriticalSection
GetCurrentThreadId
HeapFree
TlsSetValue
SetFilePointer
ReadFile
SetCurrentDirectoryW
GetVersionExA
CreateFileA
SetStdHandle
CloseHandle
GetStdHandle
GetProcessHeap
InterlockedIncrement
GetSystemTimeAsFileTime
GetEnvironmentStrings
OpenMutexA
FlushFileBuffers
CompareStringW
WriteFile
IsValidLocale
GetModuleFileNameA
IsValidCodePage
LoadLibraryA
QueryPerformanceCounter
GetConsoleOutputCP
GetCPInfo
VirtualQuery
Sections
.text Size: 164KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 392KB - Virtual size: 390KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ