Static task
static1
Behavioral task
behavioral1
Sample
c71eca03f33b891b38a107d8e7fc418b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c71eca03f33b891b38a107d8e7fc418b.exe
Resource
win10v2004-20231215-en
General
-
Target
c71eca03f33b891b38a107d8e7fc418b
-
Size
30KB
-
MD5
c71eca03f33b891b38a107d8e7fc418b
-
SHA1
6f97be6d68424d94bfe0f0f45f7c623b89a03a68
-
SHA256
0384a343e7da2baebfeffa254fa85323b63964393d88c7f57051acbe3f5164ff
-
SHA512
91f4cfb2de78f8ad6f963281b3a95422167271c5642e01e541be29665fc1066b1a1a0a8cef933bee0ad411c8a93ec73c56ec68d9717753bec972ec939ba5f1b6
-
SSDEEP
768:5h/E1YYubJWqhY+y5v6P+n+pfKKnEHrX8xTHWm:5a1YYeo+y5z+pflnW5m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c71eca03f33b891b38a107d8e7fc418b
Files
-
c71eca03f33b891b38a107d8e7fc418b.exe windows:5 windows x86 arch:x86
77b2996d1a8509fbaefce4047e9e949b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcp60
_LExp
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?pow@std@@YA?AV?$complex@M@1@ABMABV21@@Z
??4?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?do_neg_format@?$_Mpunct@G@std@@MBE?AUpattern@money_base@2@XZ
??_7time_base@std@@6B@
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
?do_thousands_sep@?$numpunct@D@std@@MBEDXZ
??_7?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?find@?$char_traits@G@std@@SAPBGPBGIABG@Z
??Pstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_Getptr@_Timevec@std@@QBEPAXXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
?id@?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
?real@?$_Complex_base@M@std@@QAEMABM@Z
_LXbig
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
??Hstd@@YA?AV?$complex@N@0@ABNABV10@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAC@Z
?_Gninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?pubseekpos@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@V32@F@Z
?min@?$numeric_limits@C@std@@SACXZ
??4?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
?do_grouping@?$numpunct@D@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?thousands_sep@?$numpunct@G@std@@QBEGXZ
?log@std@@YA?AV?$complex@N@1@ABV21@@Z
?atan2@?$_Ctr@O@std@@SAOOO@Z
?min@?$numeric_limits@D@std@@SADXZ
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z
?do_frac_digits@?$_Mpunct@D@std@@MBEHXZ
?max@?$numeric_limits@E@std@@SAEXZ
?denorm_min@?$numeric_limits@_N@std@@SA_NXZ
w32topl
ToplGraphFindEdgesForMST
ToplEdgeGetWeight
ToplGraphInit
ToplPScheduleValid
ToplVertexNumberOfOutEdges
ToplScheduleValid
ToplSTHeapExtractMin
ToplAddEdgeSetToGraph
ToplListAddElem
ToplVertexGetParent
ToplVertexGetOutEdge
ToplScheduleIsEqual
ToplVertexFree
ToplGraphCreate
ToplHeapIsEmpty
ToplEdgeSetToVertex
ToplEdgeDisassociate
ToplSTHeapCostReduced
ToplSTHeapInit
ToplGetSpanningTreeEdgesForVtx
ToplVertexSetId
ToplSetAllocator
ToplVertexNumberOfInEdges
ToplHeapExtractMin
ToplDeleteSpanningTreeEdges
ToplMakeGraphState
ToplHeapCreate
ToplHeapDestroy
ToplGraphRemoveVertex
ToplEdgeSetVtx
ToplIterAdvance
ToplIterCreate
ToplListRemoveElem
ToplVertexGetInEdge
msvcrt
puts
_aligned_realloc
__p__tzname
_wspawnlpe
_lseeki64
perror
fgetws
cosh
_mbstrlen
_getmbcp
??0bad_cast@@QAE@PBD@Z
_wexecvp
_wmkdir
iswxdigit
_wrmdir
isupper
_wfullpath
_local_unwind2
_mbsicoll
_mbsninc
_ismbbkprint
_ismbbtrail
_amsg_exit
strtok
iswdigit
_wgetdcwd
_rotr
___setlc_active_func
_mbsnbset
vfprintf
__CxxRegisterExceptionObject
_CIcos
__unDNameEx
gmtime
wcstoul
_chmod
_ismbcl0
_getmaxstdio
exit
wcstol
_ltow
user32
CreateAcceleratorTableA
GetAppCompatFlags2
SetWindowRgn
MBToWCSEx
LoadImageA
UserHandleGrantAccess
GetRawInputDeviceInfoW
GetKeyboardLayoutNameA
DdeInitializeW
DeleteMenu
DdeCreateDataHandle
MoveWindow
SetShellWindow
SetDlgItemInt
MessageBoxW
CreateWindowStationW
WaitForInputIdle
IsCharAlphaNumericA
ChangeDisplaySettingsExA
DragObject
DrawTextA
GetTabbedTextExtentA
GetThreadDesktop
BroadcastSystemMessageA
SetFocus
BroadcastSystemMessageExA
EndDialog
EqualRect
CreateWindowExW
DrawTextW
TrackMouseEvent
PrivateExtractIconExA
SetThreadDesktop
IsWindowUnicode
CharLowerBuffW
EnumDesktopWindows
GetDlgItemTextA
SendNotifyMessageA
LoadAcceleratorsW
EnumPropsExW
GetWindowRect
GetParent
GetComboBoxInfo
SetWindowLongW
SetWindowPlacement
DdeFreeDataHandle
CalcMenuBar
opengl32
glTexSubImage2D
glTexGeniv
glVertex3d
glCallList
glColor3us
glEdgeFlagPointer
glTexCoord4i
wglGetCurrentDC
glTexEnvf
glIsEnabled
glLoadMatrixf
glVertex3s
glEndList
glPopAttrib
glTexCoord3f
wglDeleteContext
glTexEnviv
glRasterPos4fv
glInitNames
glRotatef
glLightModelfv
glVertex2i
glPixelZoom
glGetMaterialiv
glVertex3f
glGetTexParameterfv
glClearStencil
wglRealizeLayerPalette
wglUseFontOutlinesA
glCopyPixels
glListBase
glStencilOp
glTexCoordPointer
glFogi
glVertex3dv
glGetPixelMapfv
glColor3ui
glIndexdv
msvcrt40
__lconv_init
_mbscoll
putchar
tmpnam
?pbackfail@streambuf@@UAEHH@Z
exit
??_7iostream@@6B@
calloc
_endthreadex
??0ostream@@IAE@XZ
?attach@ifstream@@QAEXH@Z
_clearfp
?seekp@ostream@@QAEAAV1@JW4seek_dir@ios@@@Z
__argv
_wfopen
__p___argv
mbtowc
_mbcjmstojis
_ismbcl1
??_Dostrstream@@QAEXXZ
_jn
_getws
?precision@ios@@QBEHXZ
isdigit
?get@istream@@QAEAAV1@PAEHD@Z
_strcmpi
?eof@ios@@QBEHXZ
_wexeclp
_outpd
??0streambuf@@IAE@XZ
??_7istream@@6B@
_exit
_wcsnicoll
kernel32
CreateMemoryResourceNotification
WriteTapemark
lstrcpyn
GetProcessWorkingSetSize
CreateSemaphoreW
RequestWakeupLatency
GetPrivateProfileSectionNamesA
BaseFlushAppcompatCache
GetVersion
GetConsoleKeyboardLayoutNameW
GetThreadLocale
GetCurrentActCtx
GetProfileStringW
SetVolumeMountPointA
CancelTimerQueueTimer
PurgeComm
SetFileShortNameA
Sleep
GetComputerNameExA
GetConsoleScreenBufferInfo
Beep
FindClose
GetLargestConsoleWindowSize
GlobalGetAtomNameW
FindAtomA
GetNumaNodeProcessorMask
SetVDMCurrentDirectories
DefineDosDeviceW
FormatMessageA
VirtualAlloc
GetProcessPriorityBoost
EnumSystemCodePagesA
ntdll
ZwCreatePagingFile
RtlQueryProcessLockInformation
NtTerminateThread
NtQueryMutant
NtFlushBuffersFile
NtDeleteBootEntry
ZwOpenSymbolicLinkObject
NtOpenProcessTokenEx
wcsrchr
RtlDumpResource
DbgUiConvertStateChangeStructure
NtSetIntervalProfile
NtUnlockVirtualMemory
NtImpersonateAnonymousToken
NtSaveMergedKeys
NtSetSystemEnvironmentValueEx
RtlDeregisterWaitEx
ZwAdjustGroupsToken
_wcslwr
NtAccessCheck
NtCreatePort
ZwCompressKey
RtlGetSetBootStatusData
DbgUiContinue
RtlAnsiCharToUnicodeChar
ZwGetWriteWatch
RtlSetOwnerSecurityDescriptor
NtSetVolumeInformationFile
NtDeviceIoControlFile
RtlRealPredecessor
_ultoa
RtlGetCurrentDirectory_U
_vsnwprintf
RtlMapGenericMask
wcstoul
CsrAllocateMessagePointer
RtlCreateUserThread
NtQueryAttributesFile
RtlUnlockHeap
ZwRenameKey
RtlFindClearBits
sqlwoa
_CallWindowProc@20
_MoveFile@8
_GetDiskFreeSpaceEx@16
_RemoveProp@8
_GetModuleFileName@12
_LoadString@16
_CommDlg_OpenSave_GetSpec@12
_TranslateAccelerator@12
newMultiByteFromWideCharSize
_CreateFile@28
_CreateFont@56
_FindResource@12
_GetWindowTextLength@4
_GetComputerName@8
_DefWindowProc@16
_CommDlg_OpenSave_GetFolderPath@12
_LoadMenu@8
_CharLower@4
_IsDialogMessage@8
ConvertMultiSZNameToW
_CreateWindowEx@48
_CreateDialogIndirectParam@20
_GetOpenFileName@4
_trename
shell32
SHGetMalloc
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE