Static task
static1
Behavioral task
behavioral1
Sample
994e3c2ef8453c2f5eab6123eaae9390.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
994e3c2ef8453c2f5eab6123eaae9390.exe
Resource
win10v2004-20231215-en
General
-
Target
994e3c2ef8453c2f5eab6123eaae9390
-
Size
2.4MB
-
MD5
994e3c2ef8453c2f5eab6123eaae9390
-
SHA1
2260aabb1c12d814dd8078b83646fd72fca5d2b4
-
SHA256
fe9d4ab4cc66b6b20a1adf769bad78d42c925a9ebf1fc3346b66566e37bfefcd
-
SHA512
ebacdf326f7758852cedfd33505853a1a75396715d1868ff107c32936e1aa8a0bf2df5bcad356dc039ec7ca7854f5d725174242fe36d48b1bede668916f33a80
-
SSDEEP
49152:Acqz+4EyEuXfT84bt8kPqE24Es74Wu+WeJYWuHCyYWtYlwXDE6E2Z:Bz4EzuXfT8V2qEd78eJYbiwtF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 994e3c2ef8453c2f5eab6123eaae9390
Files
-
994e3c2ef8453c2f5eab6123eaae9390.exe windows:4 windows x86 arch:x86
5b141780abd29163351cc2c17e61be48
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetSystemInfo
OpenFileMappingA
MapViewOfFileEx
IsBadCodePtr
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GetTempFileNameA
VirtualAlloc
VirtualLock
VirtualFree
DeleteCriticalSection
EnterCriticalSection
VirtualQuery
LeaveCriticalSection
lstrlenA
InitializeCriticalSection
OutputDebugStringA
lstrcmpA
lstrcpyA
GetLastError
LockResource
HeapCreate
GetModuleFileNameA
HeapDestroy
GetTempPathA
RemoveDirectoryA
GetDiskFreeSpaceA
SetStdHandle
FlushFileBuffers
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
FindResourceA
GlobalFree
LoadResource
Sleep
GetWindowsDirectoryA
GetTickCount
GetCurrentDirectoryA
CreateDirectoryA
SetCurrentDirectoryA
GlobalLock
GlobalUnlock
lstrcmpiA
FreeResource
GetTimeFormatA
GetDateFormatA
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
SetUnhandledExceptionFilter
HeapSize
HeapCompact
HeapWalk
HeapValidate
GetCommandLineA
GetStartupInfoA
TerminateProcess
MoveFileA
IsBadReadPtr
RaiseException
RtlUnwind
MapViewOfFile
OpenProcess
GetLogicalDrives
GetVersion
GetCurrentThreadId
lstrcpynA
ReadFile
WriteFile
DeleteFileA
CloseHandle
CreateFileA
lstrcatA
GetFileAttributesA
SetFilePointer
SetEndOfFile
FindNextFileA
FindClose
FindFirstFileA
GetBinaryTypeA
GetDriveTypeA
GetFileSize
EnumResourceNamesA
GlobalSize
LoadLibraryExA
GetFullPathNameA
MulDiv
GetShortPathNameA
GetFileInformationByHandle
FreeLibrary
LoadLibraryA
GetProcAddress
SetErrorMode
GetProfileIntA
GetVersionExA
UnmapViewOfFile
_lcreat
_lclose
VirtualQueryEx
CreateFileMappingA
CreateMutexA
WaitForSingleObject
OpenMutexA
GlobalMemoryStatus
ReleaseMutex
IsBadWritePtr
GlobalAlloc
GlobalReAlloc
GetLocalTime
GetSystemDefaultLangID
ReleaseSemaphore
CreateSemaphoreA
OpenSemaphoreA
_lopen
WideCharToMultiByte
CreateProcessA
_lread
_llseek
_lwrite
SetEvent
CreateEventA
CreateThread
MultiByteToWideChar
GetCurrencyFormatA
SizeofResource
GetModuleHandleA
ExitProcess
GetNumberFormatA
GetUserDefaultLangID
GetFileTime
user32
IsWindowVisible
VkKeyScanA
GetSystemMetrics
GetDlgItemInt
DispatchMessageA
PeekMessageA
GetDoubleClickTime
GetCaretBlinkTime
DrawFocusRect
DialogBoxIndirectParamA
EndDialog
FillRect
InflateRect
GetSysColor
FrameRect
GetWindowDC
SetCapture
GetCursorPos
OffsetRect
ReleaseCapture
SetRectEmpty
PtInRect
SetRect
GetWindowTextA
SetActiveWindow
RegisterClassA
SetWindowLongA
DefWindowProcA
DefMDIChildProcA
ClientToScreen
ChildWindowFromPoint
GetWindowLongA
ScreenToClient
GetParent
GetWindowRect
MoveWindow
GetDC
ReleaseDC
InvalidateRect
UpdateWindow
ShowWindow
DestroyWindow
EnableWindow
SetWindowTextA
CreateWindowExA
SetScrollRange
SetScrollPos
SendMessageA
IntersectRect
GetDesktopWindow
GetClientRect
GetCapture
EndPaint
BeginPaint
PostMessageA
LoadCursorA
IsWindow
GetKeyboardState
BringWindowToTop
GetWindowPlacement
GetActiveWindow
GetDlgItem
GetMessageA
MessageBoxA
LoadStringA
FindWindowA
LoadIconA
SystemParametersInfoA
CreateMenu
AppendMenuA
LoadBitmapA
wsprintfA
IsIconic
IsWindowEnabled
SetFocus
SetWindowPos
WindowFromPoint
GetClassNameA
EnumChildWindows
ScrollDC
DestroyMenu
CreatePopupMenu
RemoveMenu
GetMenuItemCount
EnableMenuItem
ModifyMenuA
GetMenuStringA
GetMenuState
GetMenuItemID
GetSubMenu
CheckMenuItem
TrackPopupMenu
SetMenuItemInfoA
GetMenuItemInfoA
LoadImageA
GetIconInfo
CopyImage
DrawIconEx
GetSysColorBrush
DrawTextA
KillTimer
SetTimer
UnregisterClassA
DialogBoxParamA
CreateDialogParamA
RegisterClipboardFormatA
DdeFreeStringHandle
DdeGetLastError
DdeConnect
DdeCreateStringHandleA
DdeDisconnect
DdeClientTransaction
DdeInitializeA
DdeUninitialize
CheckDlgButton
IsDlgButtonChecked
GetDlgItemTextA
CheckRadioButton
SendDlgItemMessageA
GetWindow
IsClipboardFormatAvailable
SetCursor
GetAsyncKeyState
MessageBeep
GetQueueStatus
GetClassLongA
SetCursorPos
ShowCursor
CreateCursor
GetCursor
EnumDisplaySettingsA
GetFocus
SetDlgItemTextA
CallWindowProcA
IsMenu
GetWindowTextLengthA
SetWindowPlacement
PostQuitMessage
GetTopWindow
DefFrameProcA
ClipCursor
GetKeyState
MapVirtualKeyA
GetKeyboardLayout
GetKeyboardType
IsChild
TranslateMessage
InsertMenuA
DrawMenuBar
SetForegroundWindow
gdi32
CreatePalette
CreatePen
StretchBlt
GetRegionData
FillRgn
FrameRgn
PtInRegion
SetRectRgn
CreatePolygonRgn
RoundRect
GetBkColor
SetROP2
GetSystemPaletteEntries
LPtoDP
SelectClipRgn
SetBitmapBits
SetICMMode
Escape
EndDoc
EndPage
StartPage
GetRgnBox
CombineRgn
GetWindowOrgEx
GetWindowExtEx
CreateRectRgn
DeleteObject
GetStockObject
PatBlt
SelectObject
CreateBrushIndirect
CreateBitmap
SetTextColor
SetWindowOrgEx
GetTextColor
CreateSolidBrush
LineTo
MoveToEx
StartDocA
DeleteEnhMetaFile
DeleteMetaFile
GetFontData
GetTextMetricsA
CreateFontIndirectA
EnumFontFamiliesA
AddFontResourceA
RemoveFontResourceA
BitBlt
CreateCompatibleDC
GetObjectA
GetDIBits
RealizePalette
SelectPalette
DeleteDC
SetViewportExtEx
GetDeviceCaps
SetMapMode
RestoreDC
PlayMetaFile
SaveDC
TextOutA
SetTextAlign
GetBitmapBits
EqualRgn
OffsetRgn
GetTextExtentPoint32A
SetBkMode
SetBkColor
CreateBitmapIndirect
ExtTextOutA
CreateCompatibleBitmap
StretchDIBits
CreateDCA
CloseEnhMetaFile
CreateEnhMetaFileA
CreateICA
SetMetaFileBitsEx
GetWinMetaFileBits
CreateDIBSection
winspool.drv
DocumentPropertiesA
OpenPrinterA
GetPrinterDriverA
DeviceCapabilitiesA
ClosePrinter
comdlg32
GetFileTitleA
CommDlgExtendedError
GetOpenFileNameA
PrintDlgA
ChooseColorA
GetSaveFileNameA
advapi32
RegOpenKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
DragAcceptFiles
FindExecutableA
DragFinish
ShellExecuteA
DragQueryFileA
ole32
CoRegisterClassObject
OleInitialize
CreateDataAdviseHolder
WriteFmtUserTypeStg
WriteClassStg
CoRevokeClassObject
OleUninitialize
CoCreateInstance
OleDuplicateData
OleFlushClipboard
OleSetClipboard
DoDragDrop
ReleaseStgMedium
RevokeDragDrop
RegisterDragDrop
CreateOleAdviseHolder
CoGetMalloc
StgIsStorageFile
OleIsCurrentClipboard
OleGetClipboard
mpr
WNetGetUniversalNameA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
cooltype
ord23
ord18
ord19
ord22
ord33
ord34
ord35
ord36
ord37
ord38
ord43
ord44
ord46
ord59
ord60
ord52
ord53
ord54
ord55
ord56
ord57
ord58
ord92
ord66
ord11
ord48
ord6
ord68
ord51
ord8
ord20
ord21
ord24
ord15
ord9
ord26
ord27
ord28
ord47
ord7
ord45
ord78
ord3
ord25
ord40
ord16
ord49
ord30
ord32
ord42
ord29
ord31
ord39
ord41
ord17
ord84
ord4
ord93
ord14
ord13
ord12
ord50
ord10
ord2
ord65
agm
ord115
ord288
ord114
ord183
ord65
ord64
ord106
ord78
ord116
ord117
ord118
ord79
ord98
ord47
ord291
ord222
ord254
ord74
ord75
ord119
ord120
ord121
ord321
ord129
ord319
ord355
ord253
ord130
ord323
ord55
ord56
ord305
ord103
ord197
ord101
ord104
ord198
ord145
ord208
ord213
ord156
ord161
ord214
ord215
ord216
ord217
ord57
ord210
ord211
ord212
ord162
ord163
ord164
ord165
ord157
ord158
ord159
ord160
ord290
ord152
ord270
ord85
ord151
ord356
ord209
ord3
ord4
ord83
ord84
ord91
ord92
ord96
ord5
ord6
ord7
ord8
ord9
ord10
ord11
ord44
ord45
ord46
ord14
ord15
ord18
ord19
ord20
ord21
ord22
ord23
ord24
ord25
ord26
ord27
ord28
ord29
ord30
ord32
ord295
ord37
ord43
ord34
ord35
ord36
ord38
ord39
ord40
ord42
ord123
ord87
ord88
ord17
ord185
ord99
ord155
ord41
ord58
ord276
ord322
ord196
ord231
ord207
ord317
ord337
ord228
ord318
ord284
ord282
ord283
ord16
ord13
ord12
ord153
ord154
ord294
ord297
ord150
ord2
ord33
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ptcglgq Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kjjcrzv Size: 4KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE