Static task
static1
Behavioral task
behavioral1
Sample
8c633569639263774570229be22eb9dc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8c633569639263774570229be22eb9dc.exe
Resource
win10v2004-20240226-en
General
-
Target
8c633569639263774570229be22eb9dc
-
Size
1.2MB
-
MD5
8c633569639263774570229be22eb9dc
-
SHA1
0c192e44d51816074f1cc1b55e8f98dd794241f6
-
SHA256
5952348d43b2338cfe79b713b03c9d1913b29e5e210fb137cbf13ca438b2666e
-
SHA512
b46356250e916fb8d11d54574438189fe22c749e1a312bd9e5ab1f590a58d2cfc0517abeb0ce48866cf19747be5e89b34fd2eb188b6817b9c2294f600dc49934
-
SSDEEP
24576:bSKMA7yC4aOe/q/A/yI1DBqd3wjTVouJUnne7GTQDim+Hbduno134B4F9GZU56r1:bSJA7185wVoumnAWcimURwoGB8R5c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c633569639263774570229be22eb9dc
Files
-
8c633569639263774570229be22eb9dc.exe windows:6 windows x86 arch:x86
812c6c8c7ff7cd3416ada72d1c08a854
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
GetDiskFreeSpaceA
GetTempPathA
GetCurrentProcess
OpenProcess
GetModuleFileNameA
VerifyVersionInfoW
MultiByteToWideChar
GetCurrentDirectoryA
LocalFileTimeToFileTime
SetFileTime
SystemTimeToFileTime
WriteConsoleW
CreateFileW
DecodePointer
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
SetFilePointerEx
GetStringTypeW
SetStdHandle
GetProcessHeap
VerSetConditionMask
WriteFile
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
LCMapStringW
GetFileType
HeapAlloc
HeapFree
GetStdHandle
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
LoadLibraryExW
FreeLibrary
TlsFree
GetWindowsDirectoryA
GetSystemDirectoryA
CopyFileA
FindResourceA
SizeofResource
LockResource
LoadResource
FreeEnvironmentStringsW
GetLastError
SetFilePointer
ReadFile
GetFileSize
GetFileAttributesExA
CreateDirectoryA
CreateFileA
MoveFileExA
GetProcAddress
GetModuleHandleA
CreateProcessA
GetExitCodeProcess
TerminateProcess
DeleteFileA
Sleep
CloseHandle
RemoveDirectoryA
GetFileAttributesA
FindNextFileA
FindFirstFileA
FindClose
GetEnvironmentStringsW
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
RaiseException
RtlUnwind
LocalFree
WideCharToMultiByte
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
user32
ShowWindow
CallWindowProcA
wsprintfA
SetProcessDPIAware
GetWindowThreadProcessId
GetClassNameA
EnumWindows
FindWindowExA
FindWindowA
DialogBoxParamA
MonitorFromWindow
SystemParametersInfoA
DrawIconEx
LoadImageA
EnumChildWindows
SetClassLongA
GetDlgItem
MessageBoxA
GetWindowTextA
SetWindowTextA
ReleaseDC
GetDC
SetForegroundWindow
EnableWindow
SendDlgItemMessageA
SetDlgItemTextA
EndDialog
CreateDialogParamA
PostMessageA
PeekMessageA
DispatchMessageA
TranslateMessage
LoadStringA
SendMessageA
LoadCursorA
SetWindowLongA
GetWindowLongA
FillRect
DrawFocusRect
SetCursor
GetClientRect
InvalidateRect
EndPaint
BeginPaint
DrawTextA
GetFocus
SetFocus
GetDlgItemTextA
gdi32
DeleteObject
CreateSolidBrush
CreateFontA
CreateFontIndirectA
SetTextColor
SetBkMode
SelectObject
GetDeviceCaps
advapi32
ControlService
GetUserNameA
RevertToSelf
ImpersonateLoggedOnUser
DuplicateTokenEx
OpenProcessToken
OpenServiceA
OpenSCManagerA
CloseServiceHandle
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
LookupAccountSidW
FreeSid
AllocateAndInitializeSid
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
ord680
SHFileOperationA
ShellExecuteA
SHGetMalloc
SHGetSpecialFolderLocation
SHChangeNotify
ole32
CoInitializeSecurity
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx
oleaut32
VariantClear
VariantInit
SysFreeString
SysAllocString
shlwapi
PathIsRelativeA
SHDeleteKeyA
PathIsNetworkPathA
Sections
.text Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ