Static task
static1
Behavioral task
behavioral1
Sample
75f30f64c93b8b756ee0b15883415a8e7dc83ef68934e355f657b45358963278.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
75f30f64c93b8b756ee0b15883415a8e7dc83ef68934e355f657b45358963278.exe
Resource
win10v2004-20231215-en
General
-
Target
75f30f64c93b8b756ee0b15883415a8e7dc83ef68934e355f657b45358963278
-
Size
281KB
-
MD5
fdfcb23f537d4265bab7f28ec9b9e036
-
SHA1
990ed60e1c20d1fdb6906b3da3bb269af997ea9e
-
SHA256
75f30f64c93b8b756ee0b15883415a8e7dc83ef68934e355f657b45358963278
-
SHA512
f265188e7e2d829dc6a53510d45a20049454a1c227e3bf3a2b257c506935d390b5ee09093cfb2f8454468290a4763f34e5fe22e9b1da3ec324a7b84179635d15
-
SSDEEP
6144:1o7zBJtW0v7Hsbdj8KMywxmsmNkIOvnHgQd:87Hs9MywxmsqLO/gQd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75f30f64c93b8b756ee0b15883415a8e7dc83ef68934e355f657b45358963278
Files
-
75f30f64c93b8b756ee0b15883415a8e7dc83ef68934e355f657b45358963278.exe windows:5 windows x86 arch:x86
ca2d1d2fa89e7554e0a4266f631587d8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLocaleInfoA
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
GetCurrentProcessId
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalGetAtomNameA
WaitForSingleObject
WritePrivateProfileStringA
GlobalFlags
GlobalAddAtomA
GetFileAttributesA
GetFileSizeEx
GetFileTime
GetVersionExA
lstrcmpW
GlobalFindAtomA
GetCPInfo
GetOEMCP
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
VirtualAlloc
HeapReAlloc
HeapSize
SetStdHandle
GetFileType
VirtualFree
HeapCreate
GetStdHandle
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
LoadLibraryA
CompareStringA
InterlockedExchange
lstrcmpA
FreeLibrary
GetProcAddress
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
lstrlenA
WinExec
GetModuleFileNameA
GetLastError
CreateEventA
SetLastError
Sleep
GetModuleHandleA
GetComputerNameA
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
CreateDirectoryA
SizeofResource
LockResource
LoadResource
LocalAlloc
FindResourceA
user32
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
GetClientRect
SetForegroundWindow
SetMenu
MapWindowPoints
GetMessagePos
GetMessageTime
DestroyWindow
GetTopWindow
GetForegroundWindow
RemovePropA
GetPropA
SetPropA
GetClassLongA
GetCapture
WinHelpA
LoadIconA
RegisterWindowMessageA
DestroyMenu
SetWindowLongA
IsWindow
GetMenu
AdjustWindowRectEx
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetWindowTextA
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
UnhookWindowsHookEx
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
CharUpperA
GetSystemMetrics
PostMessageA
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
LoadStringA
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
DefWindowProcA
CallWindowProcA
SetWindowPos
GetDlgItem
ShowWindow
advapi32
RegQueryValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyExA
InitializeSecurityDescriptor
RegDeleteKeyA
RegEnumKeyA
RegSetValueExA
SetSecurityDescriptorDacl
shell32
SHGetSpecialFolderPathA
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ole32
CoUninitialize
CoInitialize
CoCreateInstance
shlwapi
PathFindFileNameA
PathIsUNCA
PathStripToRootA
PathFindExtensionA
PathRemoveFileSpecA
oleacc
CreateStdAccessibleObject
LresultFromObject
wininet
InternetOpenA
InternetGetLastResponseInfoA
InternetSetFilePointer
InternetWriteFile
InternetReadFile
HttpOpenRequestA
InternetConnectA
HttpSendRequestExA
HttpEndRequestA
InternetCloseHandle
HttpAddRequestHeadersA
InternetQueryDataAvailable
InternetSetStatusCallback
gdi32
GetStockObject
DeleteDC
CreateBitmap
SaveDC
RestoreDC
SetBkColor
SetTextColor
SetMapMode
GetClipBox
DeleteObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
GetDeviceCaps
SetViewportOrgEx
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
comdlg32
GetFileTitleA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ