Static task
static1
Behavioral task
behavioral1
Sample
8c92a1d8f1a1677f985fc4fceb079b4a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8c92a1d8f1a1677f985fc4fceb079b4a.exe
Resource
win10v2004-20231215-en
General
-
Target
8c92a1d8f1a1677f985fc4fceb079b4a
-
Size
584KB
-
MD5
8c92a1d8f1a1677f985fc4fceb079b4a
-
SHA1
f8dc57cc315dbd612e4baddfd1ce7da2232deae8
-
SHA256
400ca7f1229bded5b6240ad44806c68977110b27a452ac316356919b6513a3f8
-
SHA512
e54509f2c08877cccf90d56e5e08a81f1e4bf6f8c0ef70ea6f39d2e48a843343000e4386b00808d72bbf9745f28b4fc8745a9091d7f3ff9be2d85d204e59e60d
-
SSDEEP
12288:Xq7teQ2Zu3OKzJXNNwPlhjTiMUaD7TpTVSckf1hkPX7SI:67teQECOEIlhfiMZTpTV6ha7SI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c92a1d8f1a1677f985fc4fceb079b4a
Files
-
8c92a1d8f1a1677f985fc4fceb079b4a.exe windows:4 windows x86 arch:x86
0aa245371a4ffe5d1e295f2e21850c40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClassExA
CreateIconIndirect
VkKeyScanW
EndTask
DrawMenuBar
SetScrollPos
WindowFromDC
CreateDesktopA
PostMessageW
InvertRect
MessageBoxExW
GetClassInfoW
DefWindowProcW
GetClassInfoExA
CreateWindowExW
GetUserObjectInformationW
DrawIcon
RegisterClipboardFormatA
DdeImpersonateClient
EnumDisplaySettingsW
BeginDeferWindowPos
GetSysColorBrush
SetClassLongW
GetKeyNameTextA
SetPropA
GetClassLongW
SendMessageTimeoutW
CallWindowProcA
GetWindowContextHelpId
FrameRect
EnumDisplaySettingsA
EndMenu
InvalidateRect
FreeDDElParam
TranslateAcceleratorA
GetDC
ValidateRgn
UnregisterHotKey
GetClassWord
TabbedTextOutW
GetClassInfoA
OemToCharW
MonitorFromWindow
EnumDisplayDevicesA
SetWindowsHookA
SetProcessWindowStation
GetComboBoxInfo
DefMDIChildProcA
ShowWindow
MessageBoxIndirectA
EnumDisplaySettingsExA
ToAscii
DdeConnect
SetClipboardViewer
DdeGetData
SetSysColors
SetMenuItemInfoW
AnyPopup
CheckDlgButton
DrawTextExA
UnhookWindowsHook
CharUpperBuffA
EnableScrollBar
AppendMenuW
CreateDialogIndirectParamW
UpdateWindow
GetKeyboardState
DestroyMenu
SetUserObjectInformationW
CharUpperBuffW
GetClipboardSequenceNumber
CreateMDIWindowA
RedrawWindow
GetDlgItem
GetQueueStatus
GetUpdateRgn
MessageBoxW
GetKeyboardLayoutNameA
EnumClipboardFormats
UnionRect
FindWindowA
GetParent
GetWindowLongW
IsWindowEnabled
GetWindowTextLengthA
GetKeyboardType
RegisterClassA
DrawAnimatedRects
UnloadKeyboardLayout
CharNextW
SetActiveWindow
SetDoubleClickTime
DrawIconEx
DestroyWindow
GetIconInfo
EnumDisplaySettingsExW
CharLowerBuffW
advapi32
StartServiceW
CryptGetDefaultProviderA
RegSetValueExA
CryptSetProviderW
RegQueryMultipleValuesW
RegEnumKeyA
RegEnumKeyW
RegReplaceKeyW
LogonUserA
CryptAcquireContextW
CryptAcquireContextA
RegQueryValueA
LookupAccountSidW
LogonUserW
RegCreateKeyW
RegOpenKeyW
GetUserNameA
kernel32
LCMapStringW
EnterCriticalSection
GetCurrentProcess
InterlockedDecrement
EnumSystemLocalesA
ReadFile
GetLocaleInfoA
EnumSystemCodePagesA
HeapCreate
GetNamedPipeHandleStateA
GlobalGetAtomNameW
GetPrivateProfileStructW
GetTickCount
TlsSetValue
HeapDestroy
WideCharToMultiByte
VirtualQuery
InterlockedExchange
GetCurrentProcessId
GetThreadSelectorEntry
GetVersionExA
EnumDateFormatsExW
GetStdHandle
FindResourceW
GetCommandLineW
ExitProcess
GetCompressedFileSizeA
GetFileType
GetTimeZoneInformation
RtlUnwind
LCMapStringA
GetCommandLineA
TlsFree
TlsGetValue
FormatMessageW
GetModuleFileNameW
GetConsoleCP
CreateMutexA
DeleteFileW
GetLastError
GetFullPathNameW
HeapReAlloc
VirtualFree
CreateRemoteThread
GetOEMCP
WaitForMultipleObjectsEx
AllocConsole
GetConsoleMode
GetEnvironmentStringsW
GetSystemTimeAsFileTime
InterlockedIncrement
UnhandledExceptionFilter
GetStringTypeA
GetCalendarInfoW
HeapSize
GetModuleFileNameA
HeapAlloc
SetStdHandle
SetEnvironmentVariableA
lstrcmpi
OpenFileMappingW
FreeLibrary
UnmapViewOfFile
GetThreadPriorityBoost
ReadConsoleOutputCharacterA
GetStartupInfoW
FreeEnvironmentStringsW
WaitForMultipleObjects
CompareStringW
GetSystemTime
CreateDirectoryExA
CreateFileW
VirtualAlloc
FindNextFileA
CloseHandle
OpenMutexA
SetUnhandledExceptionFilter
WriteConsoleOutputCharacterA
ConnectNamedPipe
HeapFree
SetFilePointer
WriteFile
ReadConsoleA
MultiByteToWideChar
GetSystemDirectoryW
InterlockedExchangeAdd
SetHandleCount
FlushConsoleInputBuffer
CompareFileTime
IsValidCodePage
GetProcessHeaps
WriteConsoleW
LoadLibraryA
IsDebuggerPresent
FreeResource
GlobalLock
FindFirstFileExW
MoveFileExW
GlobalUnfix
GetCPInfo
WriteConsoleA
GetACP
SetTimeZoneInformation
ExpandEnvironmentStringsW
GetUserDefaultLCID
GetDateFormatA
SetCriticalSectionSpinCount
GetCurrentThreadId
GetFileAttributesExW
GetLocaleInfoW
CompareStringA
GetConsoleOutputCP
GetDiskFreeSpaceW
InitializeCriticalSection
GetProcessHeap
ReadConsoleInputW
LocalFileTimeToFileTime
QueryPerformanceCounter
IsValidLocale
FlushFileBuffers
SetConsoleWindowInfo
CreateFileA
GetStringTypeW
GetEnvironmentStrings
SetConsoleCtrlHandler
EnumResourceNamesW
SetLastError
DeleteCriticalSection
TerminateProcess
FreeEnvironmentStringsA
FoldStringW
GetModuleHandleA
ContinueDebugEvent
VirtualUnlock
GetProcAddress
GetDiskFreeSpaceExW
GetStartupInfoA
TlsAlloc
LoadLibraryW
GlobalUnlock
LeaveCriticalSection
GetTimeFormatA
Sleep
EnumResourceLanguagesA
LocalReAlloc
FindFirstFileExA
GetProcessShutdownParameters
GetCurrentThread
comctl32
ImageList_SetBkColor
ImageList_EndDrag
ImageList_GetIcon
ImageList_DragLeave
ImageList_Add
CreateToolbar
ImageList_GetBkColor
DrawStatusTextA
_TrackMouseEvent
ImageList_DrawEx
ImageList_LoadImageW
InitCommonControlsEx
ImageList_SetFlags
GetEffectiveClientRect
ImageList_DragShowNolock
ImageList_GetFlags
CreateToolbarEx
CreateStatusWindowW
ImageList_ReplaceIcon
MakeDragList
CreateUpDownControl
CreateStatusWindowA
comdlg32
GetFileTitleW
Sections
.text Size: 180KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 268KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ