Static task
static1
Behavioral task
behavioral1
Sample
746488c192af1c85837ca78702461a35.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
746488c192af1c85837ca78702461a35.exe
Resource
win10v2004-20231222-en
General
-
Target
746488c192af1c85837ca78702461a35
-
Size
668KB
-
MD5
746488c192af1c85837ca78702461a35
-
SHA1
c002a4c0b3c19dc0d604405d0925db0f611f23e2
-
SHA256
de1a583d237a52623ee5b00258e62439674bcb5dbb3b1bc5e343a70eb3e5bab2
-
SHA512
c97c90e3a18cb761d7e53ec48f7aeebe84819e4917cd0deeee512cf64523250aff3274f43794118cfd862253cd9b8e979f191a618cb7f8c5ccfd31f868ce32b9
-
SSDEEP
12288:Mk1msxbNiTII3HbSsPa/wSsPar0SsPaLjSsPaD0SsPaJsSsPagNjSsPatCSsPaxT:Mk1msxbkTIuHbSoSwSos0SoijSoI0Sou
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 746488c192af1c85837ca78702461a35
Files
-
746488c192af1c85837ca78702461a35.exe windows:4 windows x86 arch:x86
0775c95f4b3c1cef5ba7320c9a483c92
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
RaiseException
HeapAlloc
HeapFree
GetCommandLineA
TerminateProcess
CreateThread
ExitThread
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
FileTimeToLocalFileTime
RtlUnwind
GetStartupInfoA
CloseHandle
WriteFile
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
FileTimeToSystemTime
WritePrivateProfileStringA
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
SizeofResource
GlobalFlags
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
GlobalAlloc
lstrcmpA
GetCurrentThread
GetModuleFileNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
GetProcAddress
GlobalLock
SetFilePointer
FlushFileBuffers
GlobalFree
GlobalUnlock
SetUnhandledExceptionFilter
ReadFile
CreateFileA
GetTickCount
GetCurrentProcess
DuplicateHandle
GetLastError
lstrcpynA
MultiByteToWideChar
InterlockedIncrement
LocalFree
lstrlenA
WideCharToMultiByte
InterlockedDecrement
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
VirtualAlloc
IsBadWritePtr
VirtualFree
LockResource
Sleep
DeleteCriticalSection
SetEvent
EnterCriticalSection
InitializeCriticalSection
GetProfileStringA
WaitForSingleObject
LeaveCriticalSection
LoadResource
FindResourceA
user32
GetSysColorBrush
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
wvsprintfA
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
DestroyMenu
CharUpperA
PostQuitMessage
SetCursor
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
InflateRect
GetClassNameA
ShowWindow
LoadStringA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
IsWindowVisible
LoadCursorA
IsDialogMessageA
WinHelpA
SetWindowTextA
RegisterClassA
GetMenuItemCount
TrackPopupMenu
GetWindowTextLengthA
GetKeyState
DefWindowProcA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetWindowLongA
SetWindowLongA
GetActiveWindow
GetCapture
InvalidateRect
UpdateWindow
PtInRect
CopyRect
GetMenu
SetRect
ReleaseCapture
SetCapture
IntersectRect
FillRect
GetSysColor
IsIconic
GetSystemMetrics
GetClientRect
GetUpdateRect
OffsetRect
SendMessageA
SetTimer
LoadIconA
EnableWindow
LoadMenuA
EnableMenuItem
ClientToScreen
GetSubMenu
DrawIcon
GetParent
PostMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
wsprintfA
GetClassInfoA
GetTopWindow
DispatchMessageA
MessageBoxA
GetDlgCtrlID
GetWindowTextA
SetWindowsHookExA
CreateWindowExA
GetMenuItemID
DefDlgProcA
IsWindowUnicode
ShowCaret
UnregisterClassA
HideCaret
DrawFocusRect
CharNextA
ExcludeUpdateRgn
gdi32
CreateCompatibleDC
SelectObject
CreatePen
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
DeleteDC
SaveDC
RestoreDC
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
BitBlt
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
DeleteObject
GetDeviceCaps
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
CreateDIBitmap
GetTextExtentPointA
CreateCompatibleBitmap
comdlg32
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
shell32
ShellExecuteA
comctl32
ord17
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ