Static task
static1
Behavioral task
behavioral1
Sample
c1d9304d1b146c09c0a45a2aa568f9be.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c1d9304d1b146c09c0a45a2aa568f9be.exe
Resource
win10v2004-20240226-en
General
-
Target
c1d9304d1b146c09c0a45a2aa568f9be
-
Size
332KB
-
MD5
c1d9304d1b146c09c0a45a2aa568f9be
-
SHA1
69b5a18feaa282ccdad9aa62a0322e2adbd860f8
-
SHA256
79eb9b9f24a1713524e9930cdb055b21e67191c4b22367f6e7520ec1f2294383
-
SHA512
24223f3e5d89d72245b81b4b938efa32570a84c94520c2b74a40ad26fc48dbf6842ebd30b34071c8337d5ddee1887f905b75ac495503597d56939f12d5d97b47
-
SSDEEP
6144:5ctJDCYeI0U2iBaWHfR4uU0lFSocV/SyFlgzRfK5:5czDCYeMaW9SocV/PgFfK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1d9304d1b146c09c0a45a2aa568f9be
Files
-
c1d9304d1b146c09c0a45a2aa568f9be.exe windows:5 windows x86 arch:x86
67fd698aea6ee6225a2f972630f14dd2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringW
FreeLibraryAndExitThread
ResetEvent
FreeLibrary
GetLogicalDriveStringsW
ReleaseActCtx
GetModuleFileNameW
InitializeCriticalSection
GetFileSize
FileTimeToLocalFileTime
LoadLibraryW
SetThreadExecutionState
lstrlenA
FindResourceExW
GetThreadContext
GetSystemTime
SetProcessShutdownParameters
CreateFileMappingA
GlobalAddAtomA
VirtualProtect
GetPrivateProfileStringA
MultiByteToWideChar
GetVersion
GlobalFree
QueryPerformanceFrequency
CompareFileTime
AddAtomW
CreateSemaphoreW
CreateMutexW
DeleteTimerQueueTimer
SizeofResource
FindFirstFileW
GetModuleHandleW
Process32FirstW
WaitForSingleObjectEx
LocalFileTimeToFileTime
IsDBCSLeadByte
HeapCreate
RemoveDirectoryW
GetSystemTimeAsFileTime
CompareStringW
GlobalDeleteAtom
GetVersionExA
UnhandledExceptionFilter
ExpandEnvironmentStringsW
UnmapViewOfFile
LocalReAlloc
DuplicateHandle
ReadFile
CreateTimerQueueTimer
FormatMessageW
WaitForMultipleObjects
IsWow64Process
OpenMutexA
GetFileAttributesW
GetShortPathNameW
FileTimeToSystemTime
EnterCriticalSection
SetUnhandledExceptionFilter
Process32NextW
SetLastError
CreateProcessW
EnumUILanguagesW
GetCurrentThreadId
GetLocalTime
HeapDestroy
lstrcmpW
GetUserDefaultUILanguage
GetDateFormatW
CreateFileA
GetCurrentThread
lstrcmpiW
GetACP
GetSystemDirectoryW
InterlockedCompareExchange
SetFileAttributesW
GetFileInformationByHandle
HeapAlloc
WideCharToMultiByte
CreateToolhelp32Snapshot
FindNextFileW
InterlockedIncrement
GetSystemInfo
GlobalFlags
GetPrivateProfileSectionNamesW
CreateActCtxW
DebugBreak
GetTempPathW
TerminateProcess
QueueUserWorkItem
CreateEventW
InterlockedExchange
UnlockFileEx
lstrlenW
TlsGetValue
SetFileTime
Sleep
LCMapStringW
OpenProcess
lstrcmpiA
lstrcmpA
SetEvent
GetCurrentDirectoryW
ResumeThread
GetTimeFormatW
GetCurrentProcessId
LocalSize
GetTickCount
CreateEventA
GetAtomNameW
SetCurrentDirectoryW
LoadResource
GetCurrentProcess
GetUserDefaultLCID
SetCurrentDirectoryA
GetThreadLocale
MulDiv
SetFilePointer
MoveFileW
GetTempFileNameW
GlobalAddAtomW
GetSystemDirectoryA
QueryPerformanceCounter
TryEnterCriticalSection
GetVersionExW
ActivateActCtx
GlobalSize
WritePrivateProfileStringW
MapViewOfFile
MoveFileExW
GetFullPathNameW
FlushInstructionCache
FindResourceW
VirtualQuery
ExitProcess
SetThreadPriority
CreateMutexA
GetEnvironmentVariableW
DeleteAtom
GetPrivateProfileSectionW
LoadLibraryExW
GetModuleHandleExW
GetFileAttributesExW
GetModuleFileNameA
InterlockedDecrement
GetSystemDefaultLCID
GlobalUnlock
WaitForSingleObject
GlobalLock
GetSystemWow64DirectoryW
GetWindowsDirectoryW
GetFileSizeEx
VirtualAlloc
QueryDosDeviceW
SuspendThread
DeleteFileW
GetFileAttributesA
TerminateThread
RaiseException
LockFileEx
GetCPInfo
ReleaseMutex
GetProcessHeap
OpenMutexW
DeleteCriticalSection
WritePrivateProfileSectionW
ReplaceFileW
LockResource
GetProcAddress
ReleaseSemaphore
FindClose
GlobalReAlloc
OutputDebugStringA
HeapReAlloc
SystemTimeToFileTime
CreateThread
OpenEventW
LeaveCriticalSection
SearchPathW
GetModuleHandleExA
CopyFileW
LocalFree
DeactivateActCtx
WriteFile
SetEnvironmentVariableW
GetLocaleInfoW
CloseHandle
TlsFree
GetLongPathNameW
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetErrorMode
CreateDirectoryW
SetThreadContext
CreateFileW
FindAtomW
SetProcessWorkingSetSize
SetFilePointerEx
GetNumberFormatW
CompareStringA
GetThreadPriority
GetLastError
CreateDirectoryA
VirtualFree
HeapFree
GetModuleHandleA
SetEndOfFile
LocalAlloc
GetExitCodeThread
GetSystemDefaultUILanguage
TlsSetValue
ExpandEnvironmentStringsA
DisableThreadLibraryCalls
LoadLibraryA
CreateFileMappingW
GlobalAlloc
advapi32
CryptReleaseContext
ConvertSidToStringSidW
CryptCreateHash
RegOpenKeyW
RegDeleteKeyA
TraceEvent
CryptHashData
TraceMessage
RegQueryValueW
RegCreateKeyA
ImpersonateSelf
CryptAcquireContextW
GetTokenInformation
IsTextUnicode
ConvertStringSidToSidW
RegSetValueExA
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegSetValueExW
RegDeleteValueA
RegCreateKeyExW
RegDeleteValueW
CryptGetHashParam
DuplicateTokenEx
RegCreateKeyExA
RegOpenCurrentUser
UnregisterTraceGuids
SetThreadToken
RegisterTraceGuidsW
CryptDestroyHash
RegEnumKeyExW
RegOpenKeyExA
GetTraceLoggerHandle
GetLengthSid
GetTraceEnableLevel
OpenThreadToken
RegEnumKeyW
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueExW
OpenProcessToken
RegCloseKey
SetTokenInformation
RegDeleteKeyW
RegOpenKeyExW
RegEnumValueA
GetTraceEnableFlags
GetUserNameW
CreateProcessAsUserW
RegEnumValueW
psapi
GetProcessImageFileNameW
gdi32
SetViewportExtEx
GetPixel
CreateFontIndirectW
SetViewportOrgEx
CreateFontIndirectA
ExtCreateRegion
CloseEnhMetaFile
GetObjectW
EqualRgn
SaveDC
StretchDIBits
PatBlt
CreateDCW
SetMapMode
DeleteObject
PlayEnhMetaFile
CreateFontW
LPtoDP
CreateMetaFileW
CreateDCA
LineTo
GetTextAlign
TextOutW
GetBrushOrgEx
GetTextCharset
OffsetRgn
GetLayout
StretchBlt
SetRectRgn
RealizePalette
GetSystemPaletteEntries
CreateRectRgnIndirect
CreateEnhMetaFileA
GetRgnBox
DeleteEnhMetaFile
TextOutA
SetPaletteEntries
CreateBitmap
SetBkMode
CreatePolygonRgn
Rectangle
BitBlt
CreateCompatibleDC
CreateDIBPatternBrushPt
GetTextMetricsW
CloseMetaFile
SetTextColor
GetTextColor
OffsetWindowOrgEx
GetTextExtentPointW
CreateSolidBrush
CreatePatternBrush
SetWindowOrgEx
GetGlyphIndicesW
CreateRectRgn
GetTextExtentPoint32A
MoveToEx
GetDCOrgEx
CreatePalette
SelectObject
GetStockObject
GetBkColor
SetBrushOrgEx
RestoreDC
RectVisible
SetDCPenColor
GetObjectA
SetStretchBltMode
GetTextExtentExPointI
SetLayout
CreateCompatibleBitmap
SelectPalette
CreatePen
GetPaletteEntries
GetBkMode
SetBkColor
DeleteDC
CreateHalftonePalette
GetClipBox
GetTextExtentPoint32W
GetDeviceCaps
SetTextAlign
CreateDIBSection
CombineRgn
GetRegionData
GetDIBits
ExtTextOutW
SetWindowExtEx
IntersectClipRect
shell32
ShellExecuteA
SHPathPrepareForWriteW
SHGetDesktopFolder
Shell_NotifyIconA
SHBrowseForFolderW
ShellAboutW
SHGetInstanceExplorer
SHGetSpecialFolderLocation
SHAppBarMessage
ExtractAssociatedIconExW
SHGetFileInfoW
ShellExecuteExW
SHGetFolderPathAndSubDirW
SHGetSpecialFolderPathW
SHGetFolderLocation
SHChangeNotify
ExtractIconExW
SHGetPathFromIDListA
ExtractIconW
SHGetPathFromIDListW
DragQueryFileW
SHGetFolderPathW
SHSetLocalizedName
SHBindToParent
SHCreateShellItem
SHGetDataFromIDListW
Shell_NotifyIconW
ShellExecuteW
SHFileOperationW
user32
EnableMenuItem
RegisterClipboardFormatA
CreateIconIndirect
SetDlgItemTextW
SendMessageTimeoutW
DrawEdge
CharPrevW
GetPropA
GetMonitorInfoW
DdeConnect
CopyImage
GetSystemMetrics
CallWindowProcW
DdeGetData
SetWindowLongA
MessageBoxW
RemovePropW
DdeDisconnect
DefWindowProcW
IsDlgButtonChecked
GetCursorPos
SetCapture
GetWindowInfo
GetWindowLongA
UnregisterClassW
DrawIconEx
SetWindowRgn
IsWindowUnicode
SetFocus
BeginPaint
IsChild
LockSetForegroundWindow
GetTopWindow
GetWindowTextW
MessageBoxIndirectW
GetSubMenu
DrawFrameControl
DdeCreateDataHandle
GetShellWindow
GetWindowRgnBox
LoadBitmapW
SetPropW
AdjustWindowRect
PtInRect
LoadCursorW
HideCaret
MapVirtualKeyW
InsertMenuW
CharUpperW
SetParent
SetActiveWindow
GetMessageA
GetSystemMenu
DdeNameService
GetComboBoxInfo
LoadIconW
GetKeyboardLayout
RegisterWindowMessageW
MsgWaitForMultipleObjects
CheckRadioButton
WinHelpW
CallMsgFilterW
TranslateAcceleratorW
KillTimer
DdeQueryStringW
TrackMouseEvent
GetDlgItemTextW
GetSysColor
GetKeyNameTextW
ShowOwnedPopups
SendMessageA
SetRect
IsCharAlphaNumericW
LoadMenuW
AppendMenuW
InsertMenuItemW
ScreenToClient
CreateWindowExW
DialogBoxIndirectParamW
SendMessageW
GetClassNameW
RemoveMenu
PeekMessageA
EnumDesktopWindows
GetSysColorBrush
GetMenuState
GetClassInfoExW
AllowSetForegroundWindow
GetPropW
SetScrollInfo
AttachThreadInput
GetClientRect
InflateRect
GetNextDlgTabItem
GetWindowLongW
SetClipboardData
CreateDialogParamW
GetWindowRect
IsWindow
AnimateWindow
LoadAcceleratorsW
MessageBeep
DialogBoxParamA
InvalidateRect
GetMenuItemID
GetDialogBaseUnits
GetAsyncKeyState
SetPropA
CreateMenu
CharNextW
CallNextHookEx
CopyIcon
EnumChildWindows
DdeFreeDataHandle
LoadImageW
NotifyWinEvent
EnableWindow
FindWindowW
ClientToScreen
GetMenuStringW
SetMenuItemBitmaps
GetMessageW
CheckMenuItem
DdeFreeStringHandle
SendNotifyMessageW
WindowFromPoint
MessageBoxExW
MessageBoxExA
GetActiveWindow
MoveWindow
ShowCaret
GetScrollInfo
GetWindowThreadProcessId
SendDlgItemMessageW
GetLastActivePopup
MessageBoxIndirectA
SetTimer
GetCursor
SetDlgItemInt
PostMessageW
DrawTextW
CharLowerW
DdeCreateStringHandleW
IsMenu
EmptyClipboard
WaitForInputIdle
GetDesktopWindow
DestroyAcceleratorTable
GetProcessWindowStation
GetWindowDC
UnhookWindowsHookEx
SetMenuItemInfoW
SetForegroundWindow
EndDeferWindowPos
IsIconic
CreatePopupMenu
PostThreadMessageW
MapWindowPoints
EndPaint
DdeInitializeW
SetWindowTextW
RegisterWindowMessageA
MonitorFromPoint
DestroyWindow
DefWindowProcA
GetIconInfo
SetClipboardViewer
MonitorFromWindow
GetParent
EndDialog
FillRect
SystemParametersInfoW
SetCursor
CloseClipboard
SetWindowsHookExW
PostQuitMessage
WaitMessage
SetMenu
DialogBoxIndirectParamA
GetLastInputInfo
FindWindowExW
ReleaseDC
RegisterClassW
GetMenuItemCount
GetClassInfoW
GetForegroundWindow
DeleteMenu
EnumWindows
IntersectRect
BeginDeferWindowPos
GetDlgItem
GetWindowPlacement
RegisterClassExW
AdjustWindowRectEx
DrawTextExW
IsWindowEnabled
DdeClientTransaction
ShowWindow
TrackPopupMenu
RegisterClipboardFormatW
GetAncestor
GetMessageTime
FindWindowA
DialogBoxParamW
IsHungAppWindow
IsWindowVisible
DispatchMessageA
SetRectEmpty
EnumThreadWindows
GetMessagePos
GetDlgCtrlID
GetClassLongW
LoadCursorA
ChangeClipboardChain
EqualRect
PostMessageA
DestroyMenu
EnumDisplaySettingsW
TrackPopupMenuEx
GetClassWord
SetWindowPlacement
UpdateLayeredWindow
MsgWaitForMultipleObjectsEx
SetWindowPos
GetClipboardFormatNameW
GetClipboardData
IsRectEmpty
CharPrevA
UnionRect
OffsetRect
GetMenuDefaultItem
VkKeyScanExW
GetWindow
DestroyIcon
GetWindowTextLengthW
RemovePropA
CharNextA
SetCursorPos
MapDialogRect
PeekMessageW
GetKeyState
SetWindowLongW
CharLowerBuffW
GetCapture
PostThreadMessageA
CheckDlgButton
DdeUninitialize
SystemParametersInfoA
DrawFocusRect
SetScrollPos
ShowScrollBar
GetMenuItemInfoA
CheckMenuRadioItem
GetFocus
SetMenuDefaultItem
LoadStringA
SendMessageTimeoutA
ChildWindowFromPoint
DeferWindowPos
TranslateMessage
EndMenu
MonitorFromRect
wsprintfW
IsDialogMessageW
DispatchMessageW
RedrawWindow
UpdateWindow
ReleaseCapture
LoadStringW
GetDC
GetMenuItemInfoW
GetDoubleClickTime
CopyRect
OpenClipboard
ntdll
LdrGetDllHandle
NtAllocateVirtualMemory
RtlUshortByteSwap
uxtheme
CloseThemeData
GetThemeColor
GetThemeBackgroundContentRect
GetThemeMargins
GetThemeBackgroundExtent
GetThemeFont
GetThemeMetric
GetThemePartSize
SetWindowTheme
IsThemeActive
OpenThemeData
IsAppThemed
GetThemeAppProperties
DrawThemeBackground
DrawThemeParentBackground
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE