Static task
static1
Behavioral task
behavioral1
Sample
892c14be13602024dc5e689a85f0c6b8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
892c14be13602024dc5e689a85f0c6b8.exe
Resource
win10v2004-20231222-en
General
-
Target
892c14be13602024dc5e689a85f0c6b8
-
Size
838KB
-
MD5
892c14be13602024dc5e689a85f0c6b8
-
SHA1
f20a65349d53bab054e84f9df9e6ff18dea157e4
-
SHA256
15bcaa15f9564b1feac4335397b10c45e3d9fb6c661dbeec9d3567d114617103
-
SHA512
38eba64d1da0d4705291986b8a5470c7d8f8e6e06140a40b4578589d7c772c69d0b9a4d6592be7b2ff89242d88958e4df31dc628bd9847758c6498e34e6e1925
-
SSDEEP
12288:qUqRQ2bSUx7+OBKAwUmpiALvuCFUmBU7vwty7mfAuudVDNreiWEw6ELKK+LBrPC:J+b8OBR5gFFUmiKy7mfEDNRWEg2drPC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 892c14be13602024dc5e689a85f0c6b8
Files
-
892c14be13602024dc5e689a85f0c6b8.exe windows:5 windows x86 arch:x86
08240eae985048da7f2ce82632ec348d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsProcessorFeaturePresent
TlsGetValue
TerminateProcess
SetHandleCount
SizeofResource
GetConsoleOutputCP
FreeLibrary
GetEnvironmentStrings
LoadResource
HeapDestroy
InterlockedExchange
FlushInstructionCache
SetFilePointer
InterlockedIncrement
GetCommandLineA
EnterCriticalSection
TlsAlloc
TlsFree
GetThreadLocale
GlobalAlloc
HeapReAlloc
GetModuleHandleA
GetModuleHandleW
WriteFile
GetLocaleInfoA
CloseHandle
LoadLibraryExW
LoadLibraryA
CreateFileA
SetStdHandle
GetProcAddress
MultiByteToWideChar
GetStartupInfoA
HeapSize
GetCommandLineW
GetStringTypeW
GetVersionExA
GetStdHandle
InterlockedCompareExchange
GetACP
VirtualAlloc
FindResourceW
lstrlenW
GetTickCount
IsDebuggerPresent
LeaveCriticalSection
FreeEnvironmentStringsW
RtlUnwind
VirtualFree
ExitProcess
lstrcmpiW
FreeEnvironmentStringsA
GetStringTypeA
HeapCreate
GlobalHandle
HeapAlloc
SetConsoleCP
ExitThread
VirtualProtect
TlsSetValue
GetCurrentProcessId
LCMapStringW
GetEnvironmentStringsW
GetFileType
LCMapStringA
GetModuleFileNameW
InterlockedDecrement
GlobalUnlock
GlobalFree
GetConsoleCP
WriteConsoleA
GetCPInfo
QueryPerformanceCounter
UnhandledExceptionFilter
MulDiv
GlobalLock
WideCharToMultiByte
HeapFree
DeleteCriticalSection
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
RaiseException
LockResource
GetProcessHeap
FindResourceExW
GetConsoleMode
lstrcmpW
GetModuleFileNameA
WriteConsoleW
FlushFileBuffers
GetOEMCP
SetLastError
GetLastError
Sleep
GetCurrentThreadId
GetCurrentProcess
InitializeCriticalSection
user32
PeekMessageW
MapDialogRect
IsIconic
GetWindow
GetClientRect
GetWindowTextW
GetWindowTextLengthW
SetFocus
SetWindowTextW
GetSystemMetrics
RegisterClassExW
UnregisterClassA
DestroyWindow
GetClassInfoExW
RegisterWindowMessageW
GetClassNameW
SetWindowContextHelpId
FillRect
SendMessageTimeoutW
ScreenToClient
MapWindowPoints
LoadCursorW
GetSysColor
PostQuitMessage
GetParent
ClientToScreen
GetFocus
SetWindowLongW
FindWindowExW
InvalidateRgn
CallWindowProcW
IsChild
GetDesktopWindow
ShowWindow
GetWindowRect
ReleaseCapture
RedrawWindow
DestroyAcceleratorTable
DefWindowProcW
EndPaint
SystemParametersInfoW
GetWindowLongW
ReleaseDC
CreateDialogIndirectParamW
SetCapture
CreateAcceleratorTableW
GetForegroundWindow
MoveWindow
IsWindowVisible
CreateWindowExW
FindWindowW
BeginPaint
GetDC
SendMessageW
CharNextW
GetShellWindow
DispatchMessageW
SetWindowPos
InvalidateRect
GetDlgItem
TranslateMessage
GetMessageW
IsWindow
gdi32
EndPage
SelectObject
GetObjectW
StartPage
CreateDCW
DeleteObject
BitBlt
GetDeviceCaps
EndDoc
CreateSolidBrush
GetStockObject
CreateHalftonePalette
StartDocW
CreateCompatibleDC
DeleteDC
CreateCompatibleBitmap
advapi32
RegDeleteKeyW
RegQueryInfoKeyW
RegOpenKeyExW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
ole32
StringFromGUID2
CoTaskMemRealloc
OleInitialize
CoUninitialize
CLSIDFromString
CLSIDFromProgID
OleUninitialize
CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemFree
CoInitialize
CoGetClassObject
CoTaskMemAlloc
OleLockRunning
oleaut32
SysStringLen
SysFreeString
SysAllocString
SysAllocStringLen
SysStringByteLen
LoadRegTypeLi
VariantInit
OleCreateFontIndirect
VariantClear
VarUI4FromStr
LoadTypeLi
comctl32
InitCommonControlsEx
version
GetFileVersionInfoSizeA
gdiplus
GdipReleaseDC
GdipGetImageGraphicsContext
GdipFree
GdipDisposeImage
GdipGetImagePixelFormat
GdipGetImageWidth
GdipCloneImage
GdipCreateFromHDC2
GdipCreateBitmapFromHBITMAP
GdipDeleteGraphics
GdipDrawImageRect
GdipSetPageUnit
GdipImageRotateFlip
GdipBitmapSetResolution
GdipAlloc
GdiplusShutdown
GdipGetDC
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipBitmapUnlockBits
GdiplusStartup
dnsapi
DnsValidateName_UTF8
DnsReplaceRecordSetA
oleacc
ObjectFromLresult
Sections
.text Size: 482KB - Virtual size: 481KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.s1 Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.s2 Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.s4 Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.s6 Size: - Virtual size: 162KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.joke Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.poke Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.s3 Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ