Static task
static1
Behavioral task
behavioral1
Sample
a9a0e0cd29ec783a2ec063adca237a479c1e502a62ea784b213ec3b856bd515d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a9a0e0cd29ec783a2ec063adca237a479c1e502a62ea784b213ec3b856bd515d.exe
Resource
win10v2004-20231215-en
General
-
Target
a9a0e0cd29ec783a2ec063adca237a479c1e502a62ea784b213ec3b856bd515d
-
Size
4.6MB
-
MD5
1943ceb6623e5a4ff7a7d3b9dcf29b26
-
SHA1
e875813f67e30b444461ae4b8a765f20e2cf4e04
-
SHA256
a9a0e0cd29ec783a2ec063adca237a479c1e502a62ea784b213ec3b856bd515d
-
SHA512
d6015afe11e7beebe903aeddc60217d83b42e045927bf17ca5cde668ddebee644e72681b072a4b97b3f72e726316b0099f5e6ba4c893631ad11f4f1bdf6b6826
-
SSDEEP
98304:tTXDnDTHNSTZt23r7WK/nq3oqwCdIsU0qFpLAEyK2EZ:tTXjHNSK3raK/OdIrLAEyJEZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9a0e0cd29ec783a2ec063adca237a479c1e502a62ea784b213ec3b856bd515d
Files
-
a9a0e0cd29ec783a2ec063adca237a479c1e502a62ea784b213ec3b856bd515d.exe windows:6 windows x86 arch:x86
1d06e3990fe121cbd945c5a72b382589
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
gdiplus
GdipSetImageAttributesWrapMode
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipSaveImageToFile
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCreateStringFormat
GdipMeasureString
GdipDrawString
GdipGetFontHeight
GdipDeleteFont
GdipCreateFontFromLogfontW
GdipCreateFontFromDC
GdipSetTextRenderingHint
GdipSetPixelOffsetMode
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImagePointsI
GdipSetInterpolationMode
GdipGetDC
GdipCreateBitmapFromStream
GdipRotateMatrix
GdipAddPathPath
GdipCreatePath2
GdipGetImageEncodersSize
GdipDrawImageRectRectI
GdipCreateBitmapFromGdiDib
GdipDrawImageRect
GdipCloneBitmapArea
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipCreateTexture
GdipCreateBitmapFromHBITMAP
GdipSaveImageToStream
GdipDrawImageRectI
GdipFillPath
GdipDrawPath
GdipSetSmoothingMode
GdipCreateFromHDC
GdipBitmapUnlockBits
GdipFillRegion
GdipAddPathPieI
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipSetPathGradientFocusScales
GdiplusShutdown
GdiplusStartup
GdipFree
GdipCloneBrush
GdipGetImageEncoders
GdipCombineRegionPath
GdipCombineRegionRectI
GdipDeleteRegion
GdipCreateRegionRectI
GdipAddPathPolygonI
GdipCreateHatchBrush
GdipReleaseDC
GdipDeleteBrush
GdipCreateSolidFill
GdipDisposeImage
GdipCloneImage
GdipGetImageGraphicsContext
GdipImageRotateFlip
GdipCreateBitmapFromScan0
GdipDeleteGraphics
GdipCloneBitmapAreaI
GdipFillRectangleI
GdipFillPolygon
GdipCreatePath
GdipDeletePath
GdipAddPathPolygon
GdipCreatePathGradientFromPath
GdipSetPathGradientCenterColor
GdipDeleteMatrix
GdipCreateMatrix
GdipIsVisiblePathPointI
GdipGetPathWorldBounds
GdipSetPathGradientSurroundColorsWithCount
GdipTransformPath
GdipAddPathEllipseI
GdipGetPathLastPoint
GdipGetPathPointsI
GdipGetPathTypes
GdipGetPointCount
GdipCreatePath2I
GdipDrawImageI
GdipFillClosedCurveI
GdipFillEllipseI
GdipFillPolygonI
GdipFillRectanglesI
GdipDrawClosedCurveI
GdipDrawPolygonI
GdipDrawPolygon
GdipDrawEllipseI
GdipDrawRectanglesI
GdipDrawRectangleI
GdipDrawLine
GdipBitmapSetPixel
GdipBitmapGetPixel
GdipDeletePen
GdipCreatePen1
GdipFillEllipse
GdipCreateBitmapFromStreamICM
GdipGetPathGradientPointCount
GdipBitmapLockBits
GdipCreateHBITMAPFromBitmap
GdipCreateRegionPath
GdipCombineRegionRegion
GdipSetSolidFillColor
GdipScaleMatrix
GdipTranslateMatrix
GdipSetMatrixElements
GdipSetImageAttributesColorMatrix
GdipDrawImagePointRectI
GdipSetClipRegion
GdipAlloc
winmm
timeGetTime
timeBeginPeriod
timeEndPeriod
PlaySoundW
avifil32
AVIMakeCompressedStream
AVIStreamWrite
AVIStreamSetFormat
AVIStreamRelease
AVIFileCreateStreamW
AVIFileOpenW
AVIFileRelease
AVIFileExit
AVIFileInit
AVISaveOptionsFree
msvfw32
ICOpen
ICInfo
ICGetInfo
ICSendMessage
ICClose
kernel32
GetTempPathA
GlobalMemoryStatus
CreateDirectoryW
lstrcpyW
GetModuleHandleW
FindCloseChangeNotification
FindFirstChangeNotificationW
FindNextChangeNotification
RemoveDirectoryW
TerminateProcess
GetExitCodeProcess
WaitForMultipleObjects
GetWindowsDirectoryW
WaitForSingleObject
lstrcatW
lstrlenW
GetTempPathW
QueryPerformanceCounter
GetLocalTime
GetVersionExW
GetModuleFileNameW
GetThreadLocale
SetThreadLocale
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileSectionNamesW
CreateFileA
DeviceIoControl
GetModuleFileNameA
GetProfileIntW
GetDriveTypeW
GetLogicalDriveStringsW
GetVolumeInformationW
QueryDosDeviceW
OutputDebugStringA
InitializeCriticalSectionEx
DecodePointer
RaiseException
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
LocalAlloc
LocalLock
LocalUnlock
LocalFree
SetLastError
FormatMessageW
EncodePointer
GetCurrentThreadId
GetSystemDirectoryW
GetModuleHandleA
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
LoadLibraryA
GlobalAddAtomW
GlobalFindAtomW
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
FindClose
FindFirstFileW
FlushFileBuffers
GetFullPathNameW
GetShortPathNameW
LockFile
SetEndOfFile
UnlockFile
DuplicateHandle
GetCurrentProcess
lstrcmpiW
MoveFileW
GetStringTypeExW
lstrcmpA
VirtualProtect
SetEvent
SetThreadPriority
SuspendThread
ResumeThread
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
FreeResource
FindNextFileW
GetFileAttributesExW
GetFileSizeEx
GetFileTime
LocalFileTimeToFileTime
SetFileAttributesW
SetFileTime
SystemTimeToFileTime
GetCurrentThread
CompareStringA
GetDiskFreeSpaceW
GetTempFileNameW
ReplaceFileW
GetUserDefaultLCID
GlobalGetAtomNameW
GlobalFlags
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
LocalReAlloc
CompareStringW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetCurrentDirectoryW
VerSetConditionMask
VerifyVersionInfoW
SetErrorMode
FindResourceExW
SearchPathW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
ResetEvent
WaitForSingleObjectEx
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetACP
CopyFileW
GetFileAttributesW
MulDiv
GlobalSize
Sleep
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
SetFilePointer
GetFileSize
LCMapStringA
SetCommTimeouts
SetCommState
SetCommMask
PurgeComm
GetCommState
EscapeCommFunction
SetupComm
ClearCommError
GetTickCount
CreateEventW
GetOverlappedResult
GetLastError
CloseHandle
OutputDebugStringW
WriteFile
ReadFile
CreateFileW
GlobalFree
WideCharToMultiByte
MultiByteToWideChar
FindResourceW
SizeofResource
LockResource
LoadResource
LoadLibraryW
CreateThread
GetProcAddress
FreeLibrary
FileTimeToLocalFileTime
DeleteFileW
LCMapStringW
GetStringTypeW
GetCPInfo
RtlUnwind
ExitProcess
GetModuleHandleExW
GetSystemInfo
VirtualAlloc
VirtualQuery
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
GetCommandLineW
HeapQueryInformation
QueryPerformanceFrequency
SetStdHandle
GetFileType
GetStdHandle
GetDateFormatW
GetTimeFormatW
IsValidLocale
EnumSystemLocalesW
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleCP
GetTimeZoneInformation
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
WinExec
user32
IntersectRect
CharUpperW
GetKeyNameTextW
MapVirtualKeyW
GetMenuItemInfoW
SendDlgItemMessageA
MapDialogRect
CharNextW
CreatePopupMenu
GetMenuDefaultItem
ShowOwnedPopups
RegisterClipboardFormatW
SetWindowContextHelpId
InSendMessage
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
IsRectEmpty
IsZoomed
UnionRect
RealChildWindowFromPoint
GetSysColorBrush
CopyImage
TrackMouseEvent
SetWindowRgn
NotifyWinEvent
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
MonitorFromPoint
SetLayeredWindowAttributes
EnumDisplayMonitors
CopyAcceleratorTableW
InvalidateRgn
PostThreadMessageW
GetNextDlgGroupItem
LockWindowUpdate
DrawIconEx
DrawFrameControl
SetClassLongW
CharUpperBuffW
ModifyMenuW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
FrameRect
HideCaret
InvertRect
CreateMenu
GetDoubleClickTime
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsCharLowerW
MapVirtualKeyExW
GetComboBoxInfo
GetUpdateRect
SubtractRect
GetWindowRgn
GetMonitorInfoW
MonitorFromWindow
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetTopWindow
GetClassLongW
AdjustWindowRectEx
RemovePropW
ShowScrollBar
GetScrollRange
ScrollWindow
ValidateRect
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
GetMenu
GetKeyState
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
GetClassInfoExW
GetClassInfoW
CallWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
GetWindowTextLengthW
TabbedTextOutW
GrayStringW
DrawTextExW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetWindowThreadProcessId
GetMenuStringW
GetIconInfo
DrawStateW
TrackPopupMenuEx
DestroyMenu
GetNextDlgTabItem
SystemParametersInfoW
WinHelpW
IsDialogMessageW
DestroyIcon
LoadIconW
GetLastActivePopup
GetClassNameW
MessageBoxW
DrawIcon
EnableMenuItem
GetSystemMenu
GetActiveWindow
SetFocus
GetDialogBaseUnits
CheckDlgButton
GetDlgItem
CreateDialogIndirectParamW
MoveWindow
PostQuitMessage
WaitMessage
LoadStringW
GetFocus
GetDlgItemTextA
CopyRect
SetRectEmpty
GetDCEx
GetCapture
GetMessageW
SetPropW
SetMenu
SetForegroundWindow
EqualRect
GetScrollPos
DeleteMenu
IsClipboardFormatAvailable
GetWindowTextW
GetPropW
CopyIcon
MessageBeep
RedrawWindow
SetWindowLongW
IsWindow
UnregisterHotKey
RegisterHotKey
DrawEdge
GetWindow
SetWindowPos
DrawTextW
IsWindowVisible
SetScrollRange
SetScrollPos
KillTimer
SetTimer
UpdateWindow
LoadImageW
EmptyClipboard
SetClipboardData
GetClipboardData
CloseClipboard
OpenClipboard
LoadBitmapW
GetCursorPos
SetCursorPos
ShowCursor
GetAsyncKeyState
FindWindowW
GetDesktopWindow
IsIconic
MapWindowPoints
GetSubMenu
LoadMenuW
PeekMessageW
DispatchMessageW
TranslateMessage
wsprintfW
DestroyCursor
CreateCursor
LoadCursorW
GetParent
GetWindowLongW
PtInRect
OffsetRect
InflateRect
FillRect
DrawFocusRect
GetSysColor
WindowFromPoint
ScreenToClient
ClientToScreen
SetCursor
GetWindowRect
GetClientRect
SetWindowTextW
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
GetSystemMetrics
ReleaseCapture
SetCapture
ShowWindow
DestroyWindow
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
PostMessageW
SetRect
SendMessageW
EnableWindow
EndDialog
IsWindowEnabled
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
GetMenuState
SetDlgItemInt
SetParent
gdi32
GetWindowOrgEx
OffsetRgn
CreateEllipticRgn
CreatePolygonRgn
Polyline
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetPixel
GetStockObject
LineTo
Rectangle
GetSystemPaletteEntries
LPtoDP
SelectObject
SetBkColor
MoveToEx
TextOutW
ExtTextOutW
CreatePen
PolyBezier
CreateBitmap
CreateCompatibleDC
DeleteDC
GetDIBits
GetObjectW
CreateCompatibleBitmap
StretchBlt
CreateDIBitmap
Polygon
Ellipse
BitBlt
SetBitmapBits
GetCurrentObject
GetRgnBox
GetTextExtentPoint32W
CreateFontW
CreateDCW
RealizePalette
SelectPalette
CreatePatternBrush
PatBlt
UnrealizeObject
CreateDIBSection
SetDIBColorTable
CreateSolidBrush
SetTextColor
RoundRect
CopyMetaFileW
CombineRgn
CreateHatchBrush
CreateRectRgn
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
EnumFontFamiliesExW
GetTextCharsetInfo
EnumFontFamiliesW
CreateRoundRectRgn
StretchDIBits
GetCharWidthW
SetPixel
GetTextMetricsW
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
GetTextColor
GetBkColor
DPtoLP
SetRectRgn
GetMapMode
ExtFloodFill
ExtSelectClipRgn
SetBkMode
SetMapMode
CreateRectRgnIndirect
SetLayout
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
SetPixelV
GetTextFaceW
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetViewportExtEx
GetDeviceCaps
DeleteObject
CreateFontIndirectW
msimg32
GradientFill
AlphaBlend
TransparentBlt
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyExW
RegEnumValueW
RegCloseKey
RegSetValueW
RegDeleteKeyW
RegEnumKeyW
GetFileSecurityW
SetFileSecurityW
RegEnumKeyExW
RegQueryValueExA
shell32
DragAcceptFiles
ShellExecuteExW
SHFileOperationW
ShellExecuteW
SHAppBarMessage
ExtractIconW
SHAddToRecentDocs
DragFinish
DragQueryFileW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetFileInfoW
SHGetDesktopFolder
SHGetMalloc
SHGetPathFromIDListW
comctl32
ImageList_Create
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Remove
ord17
InitCommonControlsEx
_TrackMouseEvent
ImageList_Add
shlwapi
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathRemoveExtensionW
PathFindExtensionW
ord219
PathIsDirectoryW
PathFindFileNameW
StrFormatKBSizeW
uxtheme
IsAppThemed
GetThemeSysColor
GetWindowTheme
GetCurrentThemeName
GetThemeColor
DrawThemeText
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeBackground
CloseThemeData
OpenThemeData
ole32
CoRevokeClassObject
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleLockRunning
CoRegisterMessageFilter
OleIsCurrentClipboard
CreateStreamOnHGlobal
OleFlushClipboard
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CreateILockBytesOnHGlobal
CreateFileMoniker
StgIsStorageFile
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateDocfile
CLSIDFromProgID
CLSIDFromString
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
StringFromCLSID
OleRun
CoSetProxyBlanket
CoInitializeSecurity
CoInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize
oleaut32
VariantTimeToSystemTime
GetErrorInfo
SysAllocString
SysFreeString
SysStringLen
SysAllocStringByteLen
SysAllocStringLen
VariantClear
VariantInit
VariantCopy
VariantChangeType
OleLoadPicture
OleCreateFontIndirect
SystemTimeToVariantTime
VarBstrFromDate
LoadTypeLi
SafeArrayDestroy
oledlg
OleUIBusyW
avformat-57
av_find_best_stream
av_read_frame
av_register_all
av_seek_frame
avformat_close_input
avformat_find_stream_info
avformat_open_input
avcodec-57
av_free_packet
av_init_packet
avcodec_close
avcodec_decode_video2
avcodec_find_decoder
avcodec_open2
avutil-55
av_frame_alloc
av_frame_free
swscale-4
sws_freeContext
sws_getContext
sws_scale
ws2_32
closesocket
htons
inet_addr
recvfrom
sendto
setsockopt
socket
connect
inet_ntoa
recv
WSASetLastError
WSACleanup
WSAStartup
bind
gethostname
gethostbyname
send
libvlc
libvlc_media_new_path
libvlc_media_player_new_from_media
libvlc_media_player_play
libvlc_media_player_release
libvlc_media_player_set_pause
libvlc_media_player_set_time
libvlc_media_player_stop
libvlc_media_release
libvlc_new
libvlc_release
iphlpapi
GetAdaptersInfo
imagehlp
MapFileAndCheckSumW
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
wininet
InternetOpenW
InternetSetStatusCallbackW
InternetCloseHandle
InternetOpenUrlW
InternetGetLastResponseInfoW
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 586KB - Virtual size: 585KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.giats Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 659KB - Virtual size: 658KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ