Static task
static1
Behavioral task
behavioral1
Sample
a1f6a7c2ae379e875b1798fdaee123b9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1f6a7c2ae379e875b1798fdaee123b9.exe
Resource
win10v2004-20240221-en
General
-
Target
a1f6a7c2ae379e875b1798fdaee123b9
-
Size
304KB
-
MD5
a1f6a7c2ae379e875b1798fdaee123b9
-
SHA1
f55595e4441e04c651bc5cfac80877ce32a87267
-
SHA256
e02dc0b4bbf3b07cd616018400d392b9b0b18b79323670b69394bc4fea4bc60d
-
SHA512
4f05a70322520e6973d2e0a2beecaaee983cad67a35ba8a8bf3f4b3d6e96f45993282c5d95ee4c99860f2d7f22845e98ac2d96a0191f1f4e237d31c5339d00d6
-
SSDEEP
6144:91TRpeVtngbCkRxdo5EaLBISE9UPK0A51TBwPVinN:91TRpGgebEaBZA51TmPVQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1f6a7c2ae379e875b1798fdaee123b9
Files
-
a1f6a7c2ae379e875b1798fdaee123b9.exe windows:4 windows x86 arch:x86
74b0e3b6f901b481742405151998fcd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetGetCookieA
shlwapi
PathFindFileNameA
PathFindExtensionA
advapi32
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegCloseKey
kernel32
SetFilePointer
LocalAlloc
RaiseException
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
WaitForSingleObject
GetThreadLocale
GlobalGetAtomNameA
GlobalDeleteAtom
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GlobalAddAtomA
FlushFileBuffers
SetEndOfFile
CreateSemaphoreA
ReadFile
lstrcmpW
GlobalFindAtomA
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
GlobalFlags
WritePrivateProfileStringA
GetCPInfo
GetOEMCP
RtlUnwind
GetSystemTimeAsFileTime
HeapFree
UnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
VirtualAlloc
HeapReAlloc
GetFileType
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
GetACP
GetConsoleCP
GetConsoleMode
GetStdHandle
SetStdHandle
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FreeResource
SetLastError
TerminateProcess
FormatMessageA
LocalFree
FreeLibrary
GetModuleHandleA
GetVersionExA
Sleep
WriteFile
LoadLibraryA
GetProcAddress
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
SetUnhandledExceptionFilter
lstrlenA
InterlockedExchange
GetVersion
CreateFileA
CloseHandle
GetModuleFileNameA
MultiByteToWideChar
lstrcmpA
CompareStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
GetLastError
ReleaseSemaphore
user32
DestroyMenu
GetSysColorBrush
ReleaseDC
GetDC
LoadCursorA
ClientToScreen
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
BeginPaint
EndPaint
UnregisterClassA
RemovePropA
SetFocus
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
UpdateWindow
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetDesktopWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
SetWindowsHookExA
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
SendMessageA
GetKeyState
PeekMessageA
ValidateRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetForegroundWindow
GetMenu
GetForegroundWindow
GetWindow
ShowWindow
SetWindowTextA
IsDialogMessageA
IsWindowVisible
GetWindowThreadProcessId
PostMessageA
EnableWindow
GetWindowTextA
GetCursorPos
GetClassNameA
GetParent
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
CallNextHookEx
gdi32
SaveDC
RestoreDC
DeleteObject
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
ExtTextOutA
GetDeviceCaps
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
SetMapMode
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
oleaut32
VariantClear
VariantInit
VariantChangeType
Sections
.text Size: 212KB - Virtual size: 209KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ