Static task
static1
Behavioral task
behavioral1
Sample
a9bfc6678aa8a3b1c5939f6c0746f447.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a9bfc6678aa8a3b1c5939f6c0746f447.exe
Resource
win10v2004-20240226-en
General
-
Target
a9bfc6678aa8a3b1c5939f6c0746f447
-
Size
311KB
-
MD5
a9bfc6678aa8a3b1c5939f6c0746f447
-
SHA1
3ce9db008e972d1291c779509edb697f23894286
-
SHA256
7df68e25b699a18a98d5b9a9eec0573724724b66a9a5a678cedfea64f1ddd206
-
SHA512
9e17bc28dfa262b254c4c8beaaf7cd39d3032ed6d837d123733303cc514f2c9b76dc58b51d1a36a6af0f042917af00557e169e118b487a0b50d974ecca1a39b2
-
SSDEEP
6144:lvnW7HM1RLzMVBAyBRmGi3YoctdqEzLvFnDzmWGWLVIk4g:lvnsBVBAkYG0Yr+Iv9zmWGg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9bfc6678aa8a3b1c5939f6c0746f447
Files
-
a9bfc6678aa8a3b1c5939f6c0746f447.exe windows:4 windows x86 arch:x86
c03612102af55d224483f2a68553335d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetSaveFileNameA
FindTextA
kernel32
FreeEnvironmentStringsW
GetACP
GetCurrentDirectoryA
HeapAlloc
LCMapStringW
GetProcessShutdownParameters
LoadLibraryExA
FindNextChangeNotification
GetStringTypeA
CreateFileA
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameW
GetSystemInfo
HeapDestroy
ExitProcess
lstrcatW
GetTimeZoneInformation
GetPrivateProfileStructW
DeleteCriticalSection
ReadFile
InterlockedDecrement
WriteFile
LCMapStringA
GetPrivateProfileSectionNamesW
GetLocaleInfoW
GetEnvironmentStrings
FindNextFileW
FreeEnvironmentStringsA
GetLocaleInfoA
IsValidLocale
VirtualAlloc
CreateMutexA
FoldStringA
GetTimeFormatA
CompareStringW
LeaveCriticalSection
GetMailslotInfo
TlsGetValue
ReadConsoleW
GetModuleFileNameA
GetModuleHandleA
GetCurrentProcess
FillConsoleOutputAttribute
UnhandledExceptionFilter
FindResourceW
GetFullPathNameW
HeapReAlloc
EnumDateFormatsExA
InitializeCriticalSection
GetTickCount
RtlUnwind
GetComputerNameA
HeapSize
GetCommandLineA
WaitNamedPipeW
FindFirstFileA
GetConsoleCursorInfo
GetOEMCP
WideCharToMultiByte
HeapFree
CreateSemaphoreA
SystemTimeToFileTime
EnumSystemLocalesA
GetVersionExA
QueryPerformanceCounter
HeapCreate
GetStartupInfoW
SetUnhandledExceptionFilter
RemoveDirectoryW
GetCurrentThread
VirtualFree
VirtualQuery
lstrcat
EnterCriticalSection
ReadConsoleOutputAttribute
LocalLock
SetLocaleInfoA
GetSystemDefaultLCID
CloseHandle
CreatePipe
IsValidCodePage
GetLastError
FormatMessageW
GetFileType
GetStdHandle
GetCommandLineW
GetConsoleMode
FlushConsoleInputBuffer
SetHandleCount
GetDateFormatA
GetUserDefaultLCID
CompareStringA
TransmitCommChar
GetNamedPipeHandleStateA
TlsFree
GetCPInfo
TerminateProcess
GlobalAlloc
GetThreadTimes
InterlockedExchange
LoadLibraryA
TlsAlloc
WritePrivateProfileStructA
OpenMutexA
GlobalFindAtomW
SetEnvironmentVariableA
GetEnvironmentStringsW
MultiByteToWideChar
SetFilePointer
TlsSetValue
ReleaseSemaphore
SetStdHandle
GetSystemTimeAsFileTime
IsBadWritePtr
GetProcAddress
GetStartupInfoA
SetLastError
OpenWaitableTimerA
GetStringTypeW
VirtualProtect
FlushFileBuffers
SetWaitableTimer
advapi32
StartServiceA
LookupPrivilegeValueA
CryptHashSessionKey
CryptSetKeyParam
CryptContextAddRef
RegQueryMultipleValuesA
CryptHashData
RegLoadKeyA
user32
WINNLSGetIMEHotkey
DdeInitializeA
GetSystemMetrics
CreateWindowExA
MapVirtualKeyW
EnumWindows
LoadBitmapA
SetForegroundWindow
RegisterClassA
SetPropA
DefFrameProcA
SetWindowsHookA
GetSysColorBrush
ScrollWindow
GetWindowPlacement
ValidateRect
IsCharAlphaNumericA
GetWindowTextA
CharToOemW
RegisterClassExA
FreeDDElParam
RedrawWindow
DlgDirSelectComboBoxExA
GetUserObjectInformationA
comctl32
ImageList_Draw
ImageList_SetIconSize
ImageList_SetFilter
ImageList_BeginDrag
ImageList_GetIconSize
ImageList_GetBkColor
ImageList_ReplaceIcon
ImageList_SetBkColor
InitCommonControlsEx
ImageList_Write
CreatePropertySheetPage
CreateUpDownControl
ImageList_DragLeave
ImageList_Destroy
ImageList_Add
InitMUILanguage
ImageList_GetIcon
ImageList_Copy
ImageList_SetDragCursorImage
ImageList_SetOverlayImage
ImageList_EndDrag
DrawStatusText
DestroyPropertySheetPage
ImageList_DrawIndirect
ImageList_GetDragImage
ImageList_GetImageInfo
Sections
.text Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ