Static task
static1
Behavioral task
behavioral1
Sample
74c7d046a08b5e0a8f37b1c65f381294.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
74c7d046a08b5e0a8f37b1c65f381294.exe
Resource
win10v2004-20231215-en
General
-
Target
74c7d046a08b5e0a8f37b1c65f381294
-
Size
194KB
-
MD5
74c7d046a08b5e0a8f37b1c65f381294
-
SHA1
6345713c304003a114504c5811354daa75e1f011
-
SHA256
f002a18b3a00c124b85793262fd58403ab96121504ba37aa575f2d09dcbf6523
-
SHA512
a66287684582d0a480e013c95c2c839cc53cde36f3192ed0dd7106e33e8232e3bb021a7f315e760cb3ef9242263376a2f865e22e288165261f65c231d8125e60
-
SSDEEP
3072:U3ubgd4TmVOwFZnBUQyNt0NxrEcc4QayoM6UQN4IXxvoflpPa+77zpufQHoqGUg8:U3GwzhyNt0Ptaay5HRDNpPlnt5oq9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74c7d046a08b5e0a8f37b1c65f381294
Files
-
74c7d046a08b5e0a8f37b1c65f381294.exe windows:4 windows x86 arch:x86
a1513282f6878d153416ee84777f3675
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SelectObject
CopyEnhMetaFileA
GetPixel
SaveDC
SetBkMode
CreatePalette
CreateBrushIndirect
CreateCompatibleBitmap
GetRgnBox
SaveDC
GetDCOrgEx
SetPixel
GetCurrentPositionEx
BitBlt
GetDCOrgEx
SaveDC
CreateCompatibleBitmap
CreateDIBSection
CreatePenIndirect
shlwapi
SHQueryValueExA
SHStrDupA
SHDeleteKeyA
SHEnumValueA
SHGetValueA
SHQueryInfoKeyA
PathIsContentTypeA
SHDeleteKeyA
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
PathIsDirectoryA
SHQueryInfoKeyA
SHStrDupA
PathGetCharTypeA
msvcrt
memset
swprintf
cos
_acmdln
wcstol
exit
tan
log
atan
mbstowcs
strncmp
clock
mbstowcs
rand
sprintf
malloc
wcstol
clock
tan
cos
log10
rand
abs
kernel32
VirtualQuery
HeapAlloc
GetCurrentProcess
SetErrorMode
DeleteCriticalSection
GetCommandLineW
IsBadHugeReadPtr
ExitThread
lstrlenW
GetLastError
GetProcAddress
LoadLibraryA
GetCommandLineA
IsBadReadPtr
GetOEMCP
LoadLibraryExA
ExitProcess
GetModuleHandleA
VirtualAllocEx
LoadLibraryExA
GetVersion
GetFileAttributesA
lstrlenA
lstrlenW
GetOEMCP
LocalAlloc
LockResource
GetSystemDefaultLangID
GetModuleHandleA
user32
EnumChildWindows
GetSubMenu
PeekMessageW
LoadKeyboardLayoutA
DestroyMenu
CreatePopupMenu
SetForegroundWindow
GetScrollPos
GetClassNameA
SetTimer
GetKeyboardType
GetSysColor
GetKeyboardLayout
SetMenuItemInfoA
SetScrollInfo
RemovePropA
SetParent
ShowWindow
GetTopWindow
LoadStringA
GetMenuState
DispatchMessageW
GetScrollRange
GetFocus
DrawAnimatedRects
OemToCharA
DestroyCursor
SetWindowLongA
GetSystemMenu
BeginPaint
GetKeyboardLayout
IsZoomed
GetParent
WaitMessage
GetCapture
SendMessageW
EndPaint
IntersectRect
ShowScrollBar
GetClassLongA
GetKeyboardLayoutNameA
GetDCEx
FindWindowA
LoadStringA
GetMenuStringA
SetScrollRange
GetKeyboardState
SetCapture
OffsetRect
DestroyWindow
GetMenuItemCount
ClientToScreen
GetSystemMetrics
GetIconInfo
SetClipboardData
GetKeyboardLayoutNameA
OpenClipboard
SetPropA
RedrawWindow
CharUpperBuffA
EndPaint
SetForegroundWindow
CharLowerA
GetClassLongA
DestroyWindow
MessageBoxA
SendMessageA
CheckMenuItem
ScrollWindow
IntersectRect
GetDesktopWindow
GetKeyNameTextA
PostMessageA
GetMenuItemInfoA
DrawAnimatedRects
GetCapture
TranslateMessage
RegisterWindowMessageA
GetKeyboardType
GetCursor
SetWindowLongW
oleaut32
GetErrorInfo
SafeArrayGetUBound
SysReAllocStringLen
SysFreeString
SafeArrayPtrOfIndex
SysAllocStringLen
SafeArrayCreate
VariantCopyInd
VariantChangeType
SafeArrayGetUBound
SysStringLen
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayCreate
VariantCopyInd
VariantCopyInd
SafeArrayUnaccessData
OleLoadPicture
SafeArrayGetElement
RegisterTypeLib
SysFreeString
SafeArrayGetElement
SafeArrayCreate
SysFreeString
SysStringLen
SafeArrayGetUBound
GetErrorInfo
SysAllocStringLen
SysReAllocStringLen
SafeArrayGetElement
VariantCopyInd
SafeArrayUnaccessData
OleLoadPicture
RegisterTypeLib
SysFreeString
SafeArrayGetUBound
GetErrorInfo
SafeArrayCreate
VariantChangeType
SysReAllocStringLen
version
GetFileVersionInfoA
VerFindFileA
VerFindFileA
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
VerFindFileA
VerQueryValueA
VerQueryValueA
comdlg32
ChooseColorA
GetSaveFileNameA
GetFileTitleA
FindTextA
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
GetOpenFileNameA
advapi32
RegQueryValueExA
GetLengthSid
RegDeleteValueA
RegOpenKeyExA
RegQueryValueA
RegLoadKeyA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegLoadKeyA
RegDeleteValueA
comctl32
ImageList_GetBkColor
ImageList_Add
ImageList_Remove
ImageList_DrawEx
ImageList_Destroy
ImageList_Draw
ImageList_Write
ImageList_Read
ImageList_DragShowNolock
ImageList_Create
ImageList_Create
ImageList_GetBkColor
ImageList_Remove
ImageList_Read
ImageList_Write
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_Add
ImageList_Destroy
ImageList_Draw
ole32
CoRevokeClassObject
CoGetContextToken
CoCreateFreeThreadedMarshaler
OleCreateStaticFromData
CoGetMalloc
MkParseDisplayName
CoCreateGuid
StgOpenStorage
CoRevokeClassObject
MkParseDisplayName
CoGetContextToken
CoDisconnectObject
CoUnmarshalInterface
OleRegGetUserType
CoCreateGuid
shell32
SHGetDiskFreeSpaceA
SHGetDesktopFolder
SHGetFolderPathA
SHGetSpecialFolderLocation
DragQueryFileA
Shell_NotifyIconA
SHGetDesktopFolder
SHGetDiskFreeSpaceA
SHGetFileInfoA
SHFileOperationA
DragQueryFileA
Sections
.text Size: 174KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 490B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ