Static task
static1
Behavioral task
behavioral1
Sample
d771b9fd5e2fbc95c6ad4a1a9f1caa27.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d771b9fd5e2fbc95c6ad4a1a9f1caa27.exe
Resource
win10v2004-20240226-en
General
-
Target
d771b9fd5e2fbc95c6ad4a1a9f1caa27
-
Size
156KB
-
MD5
d771b9fd5e2fbc95c6ad4a1a9f1caa27
-
SHA1
fee021f06d3f0fbc03723899c78ac228f99f3187
-
SHA256
0b3ac4db7f9529b13e6a32c04a9ec14da7f53c6c5c539fdb07f128dc9760de86
-
SHA512
4b025af48b858473981a4773a7cafea48d34b2929db7adb7aaf9519e2033dea1a5f291e97db93c9b43d23bf8c72699bd6dfc4f465a5d62385e974639ab0a7fc6
-
SSDEEP
3072:4cKgouRvMWEv6lUzHp9ui3w5ohvtZJsooPfy+DlcK:4sou+vFzHTwehFMPfh/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d771b9fd5e2fbc95c6ad4a1a9f1caa27
Files
-
d771b9fd5e2fbc95c6ad4a1a9f1caa27.exe windows:4 windows x86 arch:x86
09822b8caef82b8e785d71212feee89d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
LoadResource
IsDBCSLeadByte
CreateMutexA
GetCurrentThreadId
GetCommandLineA
InitializeCriticalSection
lstrcpyA
GetShortPathNameA
SizeofResource
CopyFileA
GetCurrentProcess
WideCharToMultiByte
lstrlenW
lstrlenA
MultiByteToWideChar
GetModuleFileNameA
GetWindowsDirectoryA
GetModuleHandleA
GetSystemDefaultLCID
GetVersionExA
lstrcatA
DeleteCriticalSection
FreeLibrary
GetACP
FlushFileBuffers
ReadFile
SetStdHandle
SetFilePointer
IsBadCodePtr
IsBadReadPtr
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
HeapSize
TerminateProcess
LCMapStringW
LCMapStringA
GetOEMCP
GetDateFormatA
GetCPInfo
ExitProcess
GetVersion
GetStartupInfoA
RaiseException
HeapReAlloc
HeapAlloc
HeapFree
InterlockedDecrement
LoadLibraryA
GetProcAddress
GetLocaleInfoA
GetSystemDirectoryA
WriteFile
CreateFileA
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
RtlUnwind
LocalFree
InterlockedIncrement
GetUserDefaultLangID
CloseHandle
user32
CreateWindowExA
GetMessageA
PostMessageA
PostThreadMessageA
RegisterClassA
DispatchMessageA
LoadIconA
SetForegroundWindow
FindWindowA
PostQuitMessage
EnableWindow
GetDlgCtrlID
EndDialog
GetDlgItem
SetWindowTextA
WinHelpA
LoadStringA
GetWindowRect
EnableMenuItem
GetSystemMenu
EnumChildWindows
DialogBoxParamA
GetParent
SetWindowLongA
CallWindowProcA
wsprintfA
DefWindowProcA
SendMessageA
CharNextA
EnumDisplaySettingsA
GetSystemMetrics
gdi32
CreateDCA
DeleteDC
GetDeviceCaps
advapi32
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegEnumValueA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CLSIDFromProgID
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
CoUninitialize
CoSuspendClassObjects
oleaut32
LoadTypeLi
SysAllocString
VariantClear
SysFreeString
VarUI4FromStr
SysAllocStringByteLen
SysStringByteLen
SysStringLen
RegisterTypeLi
comctl32
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
hccutils
ReleaseClassDevice
GetCUIDriverFromClassDevice
FindDeviceByNameAndClass
GetDisplayDevice
IsDisplayValid
LoadDialogString
EnumDeviceByClass
GetAttachedMonitorDevice
FindResources
LoadSTRING
Sections
.text Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE