Static task
static1
Behavioral task
behavioral1
Sample
71177de169dd76649e3f11ed03102e44.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
71177de169dd76649e3f11ed03102e44.exe
Resource
win10v2004-20231215-en
General
-
Target
71177de169dd76649e3f11ed03102e44
-
Size
564KB
-
MD5
71177de169dd76649e3f11ed03102e44
-
SHA1
dec96364fc8bedda517ccd7d7496c250cce5b5ab
-
SHA256
0ceacb0e00a41d85007f63a15bed905869ae37eb60be47bf721868b672980d0c
-
SHA512
abbe6f97e9025727a15ef54325a73217dfcdabc7c5fc5889b8fb4212b3cb3ea092cdd920fecddb4557c40e42bedcfe38d18e642e1a2ee62bed177ba9b7c12b70
-
SSDEEP
6144:Qrqqh0I214rJHIKSpjXHDsnDpIBfHB28V3zpZTR2yn3Q7Uwye5tI8asVcUb/qXNu:Qbh0I+4OJj1Pc8THpBdEPRVca/0nu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71177de169dd76649e3f11ed03102e44
Files
-
71177de169dd76649e3f11ed03102e44.exe windows:4 windows x86 arch:x86
0c66e3ccf8b93d8eaaf6567286e70ddc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
ExtEscape
Polyline
OffsetRgn
EnumICMProfilesW
gdiPlaySpoolStream
SetArcDirection
PatBlt
GetLogColorSpaceA
CreateScalableFontResourceA
MaskBlt
EndPath
SetMetaRgn
StrokeAndFillPath
user32
AnimateWindow
SetScrollInfo
DestroyWindow
DlgDirSelectComboBoxExW
RegisterClassExA
ValidateRgn
MsgWaitForMultipleObjectsEx
GetMessageW
CheckRadioButton
PostMessageA
MapVirtualKeyExW
WINNLSGetEnableStatus
GetMessageTime
InvertRect
GetComboBoxInfo
SetTimer
RegisterClassA
DefWindowProcA
GetPropW
ChangeDisplaySettingsExW
GetClassLongW
CharPrevExA
SendNotifyMessageA
DlgDirSelectExA
EnableScrollBar
DialogBoxIndirectParamW
CreateWindowStationW
UnregisterHotKey
CallMsgFilterA
DragDetect
DdeGetLastError
GetSysColorBrush
CreateIcon
SetMessageExtraInfo
SetWinEventHook
UnregisterDeviceNotification
OpenIcon
MessageBoxW
CreateWindowExW
RemoveMenu
VkKeyScanExA
ShowWindow
advapi32
StartServiceA
CryptCreateHash
comdlg32
PageSetupDlgA
GetSaveFileNameA
PageSetupDlgW
GetFileTitleA
comctl32
DrawInsert
ImageList_LoadImage
ImageList_GetImageRect
ImageList_LoadImageW
InitCommonControlsEx
CreateToolbarEx
DrawStatusTextW
ImageList_Duplicate
ImageList_Merge
ImageList_Create
CreatePropertySheetPageW
ImageList_BeginDrag
DrawStatusText
kernel32
SetLastError
VirtualAlloc
HeapDestroy
GetCurrentDirectoryA
GetThreadContext
GetCurrentThreadId
SetComputerNameA
QueryPerformanceCounter
HeapValidate
FlushFileBuffers
TerminateProcess
VirtualFree
CloseHandle
GetCurrentThread
SetConsoleCursorInfo
RtlUnwind
GetModuleHandleA
GlobalAddAtomW
EnterCriticalSection
WritePrivateProfileStructA
LoadLibraryA
ConnectNamedPipe
GetCPInfo
InterlockedDecrement
LCMapStringW
GetModuleFileNameA
FreeEnvironmentStringsW
SetWaitableTimer
TlsSetValue
GetFileAttributesExW
ExpandEnvironmentStringsA
GetStartupInfoW
GetCurrentProcess
lstrcat
WriteConsoleOutputCharacterW
LeaveCriticalSection
GetProcAddress
GetFullPathNameW
InterlockedCompareExchange
ExitProcess
EnumDateFormatsA
GetCommandLineW
LCMapStringA
PulseEvent
VirtualQuery
InterlockedIncrement
UnhandledExceptionFilter
SetEnvironmentVariableA
GetAtomNameW
SetConsoleWindowInfo
SetFilePointer
GetTimeZoneInformation
FreeEnvironmentStringsA
EnumResourceLanguagesA
ReadFile
InitializeCriticalSection
VirtualAllocEx
FoldStringW
LocalFree
SetSystemTime
LockResource
GetEnvironmentStrings
HeapAlloc
GetSystemTimeAsFileTime
CreateProcessA
WritePrivateProfileSectionA
GetStringTypeA
CreateProcessW
HeapCreate
OpenMutexA
GetStartupInfoA
WriteFile
GetTickCount
GlobalFindAtomA
GetFileType
GetEnvironmentStringsW
HeapReAlloc
TlsFree
GetSystemTime
GetLastError
SetHandleCount
GetVersion
SystemTimeToTzSpecificLocalTime
CopyFileA
lstrcpyn
VirtualQueryEx
CompareStringA
GetCommandLineA
GetSystemDirectoryW
lstrlenA
CreateMutexA
GetStringTypeW
GetStdHandle
InterlockedExchange
TlsGetValue
GetModuleFileNameW
IsDebuggerPresent
IsBadWritePtr
HeapSize
WideCharToMultiByte
GetLocaleInfoA
GetCurrentProcessId
MultiByteToWideChar
CompareStringW
lstrcpynA
IsBadReadPtr
SetConsoleMode
GetCompressedFileSizeA
DeleteCriticalSection
ReadConsoleW
SetStdHandle
GetNumberFormatA
GetLocalTime
GetVolumeInformationA
HeapFree
SetConsoleActiveScreenBuffer
TlsAlloc
VirtualFreeEx
wininet
GopherOpenFileA
InternetSetDialStateA
InternetDialW
InternetShowSecurityInfoByURLW
Sections
.text Size: 140KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 249KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ