Static task
static1
Behavioral task
behavioral1
Sample
99540e2aae5715c8a774957d58c544c8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
99540e2aae5715c8a774957d58c544c8.exe
Resource
win10v2004-20231215-en
General
-
Target
99540e2aae5715c8a774957d58c544c8
-
Size
252KB
-
MD5
99540e2aae5715c8a774957d58c544c8
-
SHA1
a2cdf0931fd7c94d3d1a5891e1b0717350f4221c
-
SHA256
d5679fb4a302b4270dc71b850d9c05f0c41c3d2ce1378bb273bb20290f0d0cd1
-
SHA512
e1fdf32baed564342202dce1262e8572ca1b67de59a0f9623dc46f8a737cd1620166f936d1c5fd6a2dc3a73c20743e82f85585b690642858cbfd9dc0f9e905a6
-
SSDEEP
3072:ELYrSxTFS0oE+zDSMqDx+9VchXGQSjHF9AEcxpVX8Z37mDePNDRUw:roY0MqDeSyF9AEcxQrmDKNW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99540e2aae5715c8a774957d58c544c8
Files
-
99540e2aae5715c8a774957d58c544c8.exe windows:4 windows x86 arch:x86
80de963a1f94b0b584942eaed3bf884f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
GetStringTypeW
GetStringTypeA
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
CompareStringA
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
RaiseException
LCMapStringW
LCMapStringA
SetFilePointer
ReadFile
FlushFileBuffers
WideCharToMultiByte
HeapSize
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleFileNameA
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapReAlloc
GetCurrentProcess
ExitProcess
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
IsBadCodePtr
LoadLibraryA
SetEndOfFile
ExpandEnvironmentStringsA
GetVersionExA
MultiByteToWideChar
OpenProcess
TerminateProcess
InterlockedCompareExchange
CreateThread
Sleep
CreateMutexA
GetLastError
MulDiv
CopyFileA
WinExec
GetTempPathA
CreateDirectoryA
CreateFileA
WriteFile
CloseHandle
CreateProcessA
DeleteFileA
RemoveDirectoryA
GetProcAddress
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegSetValueExA
comctl32
PropertySheetA
InitCommonControlsEx
comdlg32
PrintDlgA
GetSaveFileNameA
gdi32
EndDoc
CreateCompatibleDC
GetObjectA
SelectObject
EndPage
DeleteDC
CreatePolyPolygonRgn
SetTextColor
SetBkColor
SetBkMode
GetDeviceCaps
CreateFontA
GetStockObject
CreateSolidBrush
DeleteObject
StartPage
StartDocA
BitBlt
ole32
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
SysAllocString
SysFreeString
rasapi32
RasDialA
RasSetEntryPropertiesA
RasGetConnectStatusA
RasGetErrorStringA
RasDeleteEntryA
RasHangUpA
RasSetEntryDialParamsA
RasEnumConnectionsA
RasEnumDevicesA
RasEnumEntriesA
RasGetEntryPropertiesA
rpcrt4
UuidCreate
UuidToStringA
shell32
SHGetSpecialFolderPathA
user32
GetDC
LoadImageA
DialogBoxParamA
ShowWindow
MessageBoxA
wsprintfA
ScreenToClient
CloseWindow
SetDlgItemTextA
SendDlgItemMessageA
PostQuitMessage
EnableWindow
GetDlgItem
EndDialog
GetWindow
GetWindowTextA
GetWindowThreadProcessId
EnumWindows
DrawTextA
GetParent
CheckDlgButton
IsDlgButtonChecked
BringWindowToTop
DestroyWindow
SendMessageA
GetSysColor
DefWindowProcA
BeginPaint
GetSysColorBrush
FillRect
EndPaint
InvalidateRect
GetWindowLongA
SetWindowLongA
SetWindowRgn
LoadAcceleratorsA
CreateDialogParamA
GetMessageA
IsWindow
TranslateAcceleratorA
IsDialogMessageA
TranslateMessage
DispatchMessageA
GetDlgItemTextA
SetWindowTextA
KillTimer
SetFocus
SetTimer
GetWindowRect
SystemParametersInfoA
GetClientRect
ClientToScreen
SetWindowPos
wininet
InternetOpenA
InternetOpenUrlA
InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ