Static task
static1
Behavioral task
behavioral1
Sample
c73156c3a8813fb0d026af9e655bc1b1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c73156c3a8813fb0d026af9e655bc1b1.exe
Resource
win10v2004-20240226-en
General
-
Target
c73156c3a8813fb0d026af9e655bc1b1
-
Size
1.7MB
-
MD5
c73156c3a8813fb0d026af9e655bc1b1
-
SHA1
37b600d64b8b767ec00152106879a9d6f0f7c3b8
-
SHA256
a86bdf6a3d4f8ccb7c737086dca83ccb9016f82e8ba85b05875f4fa0cb96698d
-
SHA512
56c61bc7a999538088e9cdaa05e30b1246b1d98f9952ce6c56b03b0b955e874afbff8207543c8ca911c03aa7e23003f63595a514fd95453aa2403f33b9052e57
-
SSDEEP
24576:Acutkr5cD1QI9yWIMxJf7PMwveTaBgDIFj308DKux+AW:8xD9y+/7P2T830st5W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c73156c3a8813fb0d026af9e655bc1b1
Files
-
c73156c3a8813fb0d026af9e655bc1b1.exe windows:4 windows x86 arch:x86
3a5080107e1a5b8451ab1a0b69e118b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
SetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
GetACP
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocalTime
GetProfileStringA
WinExec
GetWindowsDirectoryA
GetSystemTime
GetTimeZoneInformation
RaiseException
ExitThread
TerminateProcess
HeapReAlloc
HeapFree
HeapAlloc
RtlUnwind
GetCurrentDirectoryA
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
GetCurrentThread
FileTimeToLocalFileTime
FileTimeToSystemTime
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
MulDiv
SetLastError
FormatMessageA
WideCharToMultiByte
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersion
GetVersionExA
LocalSize
GetModuleHandleA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
lstrcatA
GetCommandLineA
GetStartupInfoA
CreateProcessA
ExitProcess
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CancelIo
InterlockedExchange
InterlockedIncrement
InterlockedDecrement
GetQueuedCompletionStatus
CreateIoCompletionPort
GetSystemInfo
PostQueuedCompletionStatus
InitializeCriticalSection
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
MultiByteToWideChar
FreeLibrary
lstrcmpA
GetSystemDirectoryA
FindResourceA
LoadResource
SizeofResource
LockResource
SetUnhandledExceptionFilter
ReleaseMutex
LoadLibraryA
GetProcAddress
GetTempPathA
lstrcpyA
CreateDirectoryA
GetLastError
MoveFileA
RemoveDirectoryA
SetFilePointer
WriteFile
FindFirstFileA
FindNextFileA
FindClose
lstrcpynA
LocalAlloc
LocalFree
GetLogicalDriveStringsA
GetVolumeInformationA
lstrlenA
GetDiskFreeSpaceExA
GetFileAttributesA
GetTickCount
GetModuleFileNameA
CopyFileA
CreateFileA
DeleteFileA
GetFileSize
ReadFile
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
VirtualAlloc
VirtualFree
Sleep
CreateThread
ResumeThread
SetEvent
WaitForSingleObject
TerminateThread
CloseHandle
GetStringTypeA
CreateEventA
user32
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
RegisterClassA
GetMenu
GetWindowTextLengthA
GetWindowTextA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
IsIconic
GetWindowPlacement
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
SetMenuDefaultItem
TrackPopupMenu
GetMenuItemID
IsWindow
SetWindowRgn
GetSysColorBrush
RegisterClassExA
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DrawTextA
GetMenuState
ShowScrollBar
DrawIconEx
IntersectRect
CheckMenuRadioItem
SetClassLongA
LoadBitmapA
GetSystemMenu
AppendMenuA
CheckMenuItem
MessageBeep
GetSystemMetrics
DrawEdge
RedrawWindow
SetForegroundWindow
ShowWindow
GetDesktopWindow
SystemParametersInfoA
CharNextA
DeleteMenu
GetMenuItemCount
SetScrollRange
GetCursorPos
GetFocus
GetDlgCtrlID
SetWindowPos
GetScrollInfo
UpdateWindow
ScreenToClient
GetWindow
GetNextDlgGroupItem
PtInRect
KillTimer
GetKeyState
ReleaseCapture
SetCapture
SetTimer
SetRectEmpty
DrawFrameControl
GetCursor
GetClassInfoA
DefWindowProcA
PostMessageA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
FindWindowA
LoadCursorA
MessageBoxA
wsprintfA
FrameRect
LoadMenuA
LoadImageA
GetIconInfo
GetDC
ReleaseDC
GetSysColor
FillRect
DrawStateA
OffsetRect
GetClientRect
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
EqualRect
PostThreadMessageA
RegisterClipboardFormatA
LockWindowUpdate
CopyRect
InflateRect
DrawFocusRect
GetWindowRect
GetSubMenu
TrackPopupMenuEx
ClientToScreen
WindowFromPoint
GetActiveWindow
InvalidateRect
SetCursor
GetParent
GetNextDlgTabItem
SendMessageA
EnableWindow
AdjustWindowRectEx
DispatchMessageA
GetClassNameA
IsRectEmpty
SetParent
SetCursorPos
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
TranslateAcceleratorA
TranslateMessage
GetMessageA
LoadIconA
SetRect
DestroyMenu
DestroyCursor
DestroyIcon
GetWindowLongA
GetDCEx
IsWindowVisible
InvertRect
LoadAcceleratorsA
MapDialogRect
SetWindowContextHelpId
ValidateRect
ShowOwnedPopups
PostQuitMessage
IsZoomed
CharUpperA
CopyIcon
CopyAcceleratorTableA
LoadStringA
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
wvsprintfA
GetMenuCheckMarkDimensions
ModifyMenuA
SetMenuItemBitmaps
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
EnableMenuItem
SetFocus
gdi32
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
StretchDIBits
RestoreDC
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
PtVisible
RectVisible
Escape
GetMapMode
PatBlt
SetRectRgn
CreateRectRgnIndirect
DPtoLP
GetTextMetricsA
GetCharWidthA
CreateFontA
GetTextColor
GetBkColor
LPtoDP
CreateDIBSection
GetTextExtentPoint32A
SetPixelV
StretchBlt
PtInRegion
CreateFontIndirectA
Rectangle
PlgBlt
FillRgn
CreatePolygonRgn
GetObjectA
GetPixel
CreateBitmap
SelectObject
SaveDC
GetClipBox
CreatePen
RoundRect
SetBkMode
TextOutA
CreateRectRgn
CombineRgn
CreateSolidBrush
GetDeviceCaps
ExtTextOutA
SetBkColor
SetTextColor
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
CreateDIBitmap
GetTextExtentPointA
DeleteObject
comdlg32
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegDeleteValueA
RegCloseKey
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
SetFileSecurityA
GetFileSecurityA
RegSetValueA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
shell32
Shell_NotifyIconA
ShellExecuteExA
DragQueryFileA
DragFinish
ShellExecuteA
ExtractIconA
ord71
SHGetFileInfoA
comctl32
ImageList_Create
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_ReplaceIcon
_TrackMouseEvent
oledlg
ord8
ole32
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoUninitialize
CoInitialize
olepro32
ord253
oleaut32
SysAllocString
VariantChangeType
SysAllocStringByteLen
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
SysStringLen
VariantCopy
shlwapi
PathRemoveFileSpecA
SHAutoComplete
ws2_32
WSACleanup
inet_ntoa
gethostbyname
WSACloseEvent
WSASend
gethostname
WSARecv
accept
WSAGetLastError
setsockopt
WSAIoctl
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSASocketA
WSACreateEvent
WSAEventSelect
bind
listen
socket
ioctlsocket
htons
connect
select
closesocket
getpeername
WSAStartup
pdh
PdhGetFormattedCounterValue
PdhOpenQueryA
PdhAddCounterA
PdhCloseQuery
PdhCollectQueryData
avifil32
AVIFileExit
AVIStreamSetFormat
AVIFileCreateStreamA
AVIFileOpenA
AVIStreamWrite
AVIFileRelease
AVIFileInit
AVIStreamRelease
msvfw32
ICSeqCompressFrameEnd
ICCompressorFree
ICClose
ICOpen
ICSendMessage
ICSeqCompressFrameStart
ICDecompress
DrawDibOpen
DrawDibClose
DrawDibDraw
wininet
InternetGetLastResponseInfoA
FtpPutFileA
InternetConnectA
InternetSetStatusCallback
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
winmm
waveInPrepareHeader
waveOutClose
waveOutUnprepareHeader
waveOutReset
PlaySoundA
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveInGetNumDevs
waveInOpen
sndPlaySoundA
waveInAddBuffer
waveInStart
waveOutWrite
waveInStop
waveInReset
waveInUnprepareHeader
waveInClose
skinppwtl
ord2
ord3
Sections
.text Size: 545KB - Virtual size: 545KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ