Static task
static1
Behavioral task
behavioral1
Sample
74cabf10446de5f4067216cb698de00c.exe
Resource
win7-20231215-en
General
-
Target
74cabf10446de5f4067216cb698de00c
-
Size
728KB
-
MD5
74cabf10446de5f4067216cb698de00c
-
SHA1
3a746c65837341cb68cd651f781612b0ed77d126
-
SHA256
7c75119a845ed6e7e3415c7446882088b040a0a3c5a59447679309da6484e700
-
SHA512
aa2a88b80a96c264c149ee37db2c3ef856e065bdc1bc3fafa495eca022b0043916142093abfdab2f2f8a4970811e0c625a041a32ed9707a6d297bb0c0644ea0d
-
SSDEEP
12288:kxXiyygWsXSNBhn6FrwHmJqt4ioLpkvpTL8lY9crZgoctmTXc1E/ZHuy5eM:SyOWXNBhk30pTJ9crZgoBTXckZHtgM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 74cabf10446de5f4067216cb698de00c
Files
-
74cabf10446de5f4067216cb698de00c.exe windows:4 windows x86 arch:x86
adf7c358b83e73f3c04645d4d0c41f4e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
shlwapi
PathFindExtensionA
PathRemoveExtensionA
PathIsUNCA
PathStripToRootA
SHSetValueA
PathFindFileNameA
PathFileExistsA
SHDeleteValueA
SHGetValueA
PathAppendA
advapi32
SetSecurityDescriptorDacl
RegOpenKeyExA
RegEnumKeyA
RegQueryValueA
RegDeleteKeyA
GetLengthSid
AllocateAndInitializeSid
DuplicateTokenEx
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
OpenProcessToken
SetTokenInformation
wininet
InternetCrackUrlA
FindNextUrlCacheEntryA
FindCloseUrlCache
InternetGetCookieA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
FindFirstUrlCacheEntryA
kernel32
RaiseException
MulDiv
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
CreateSemaphoreA
ReleaseSemaphore
CreateEventA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
GetThreadLocale
DuplicateHandle
GetFullPathNameA
lstrcmpA
SetThreadPriority
ResumeThread
SetEvent
SuspendThread
GlobalDeleteAtom
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GlobalAddAtomA
GlobalGetAtomNameA
InterlockedIncrement
InterlockedDecrement
LocalAlloc
GlobalFindAtomA
GetModuleFileNameW
GetUserDefaultLCID
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
GetFileAttributesA
GetFileTime
WritePrivateProfileStringA
GlobalFlags
GetCPInfo
GetOEMCP
GetTickCount
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
GetProcessHeap
GetStartupInfoA
RtlUnwind
ExitThread
CreateThread
HeapSize
HeapDestroy
HeapCreate
VirtualFree
GetACP
GetStdHandle
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
SetEnvironmentVariableA
SetFilePointer
WriteFile
FreeResource
lstrcpyA
LocalFree
GetCurrentProcess
FindNextFileA
FindClose
FindFirstFileA
CreateMutexA
ReadFile
ConnectNamedPipe
CreateNamedPipeA
GetModuleHandleA
GetCurrentThreadId
Process32Next
TerminateProcess
GetExitCodeProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
SetLastError
Sleep
GetVolumeInformationA
GetTempFileNameA
GetCommandLineA
GetModuleFileNameA
ExitProcess
InitializeCriticalSectionAndSpinCount
FreeLibrary
GetCurrentProcessId
GetVersionExA
LoadLibraryW
GetVersion
CompareStringA
lstrcmpiA
InterlockedExchange
MultiByteToWideChar
CompareStringW
lstrlenA
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetFileTime
CreateFileA
CloseHandle
CompareFileTime
GetProcAddress
LoadLibraryA
GetTempPathA
WaitForSingleObject
DeleteFileA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLastError
SystemTimeToFileTime
GetTimeZoneInformation
GetSystemTime
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
CreateDirectoryA
lstrcmpW
CreateFileW
user32
LoadCursorA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
SetCapture
ReleaseCapture
CharNextA
CopyAcceleratorTableA
IsRectEmpty
SetRect
InvalidateRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
DestroyMenu
UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
IsChild
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
GetDC
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetLastActivePopup
MessageBoxA
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetWindowContextHelpId
MapDialogRect
SetWindowPos
PostQuitMessage
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
SendMessageA
GetKeyState
PeekMessageA
ValidateRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetParent
GetClassNameA
ReleaseDC
GetSysColorBrush
ShowWindow
MoveWindow
IsDialogMessageA
GetSystemMetrics
SendMessageTimeoutA
EnumChildWindows
EnumThreadWindows
WaitForInputIdle
BringWindowToTop
GetWindowThreadProcessId
SetWindowTextA
GetClientRect
GetForegroundWindow
wsprintfA
EnableWindow
SetParent
PostMessageA
SetTimer
KillTimer
RegisterWindowMessageA
GetCursorPos
EnumWindows
GetWindowTextA
CharUpperA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetWindow
gdi32
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
OffsetViewportOrgEx
SetViewportOrgEx
GetDeviceCaps
RestoreDC
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
Escape
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
SelectObject
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
shell32
SHGetSpecialFolderPathA
oledlg
ord8
ole32
OleFlushClipboard
StgOpenStorageOnILockBytes
CoInitialize
CoCreateInstance
CoGetMalloc
CoUninitialize
CLSIDFromProgID
CLSIDFromString
CoDisconnectObject
OleRun
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoGetClassObject
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
CoRegisterMessageFilter
oleaut32
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
LoadTypeLi
SysAllocStringByteLen
SysStringLen
GetErrorInfo
VariantCopy
SysAllocStringLen
VariantChangeType
VariantInit
SysAllocString
SysFreeString
VariantClear
ws2_32
WSAStartup
Sections
.text Size: 576KB - Virtual size: 572KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ