Static task
static1
Behavioral task
behavioral1
Sample
da918d21dbafd9ddf1bd6c85cfcd491146f742976549e08b8b011e043114357a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
da918d21dbafd9ddf1bd6c85cfcd491146f742976549e08b8b011e043114357a.exe
Resource
win10v2004-20240226-en
General
-
Target
da918d21dbafd9ddf1bd6c85cfcd491146f742976549e08b8b011e043114357a
-
Size
253KB
-
MD5
c48e5210cf6fb3286f8bc66106456686
-
SHA1
8038cc659252e260bd4074fa139676bb7402423b
-
SHA256
da918d21dbafd9ddf1bd6c85cfcd491146f742976549e08b8b011e043114357a
-
SHA512
eb997bd97ce727c9774b69ad9a77101949ec67392a24e8e34e456aead667ba02da5c3254db3f32df65872c42c95fb12e46d77b542e00e9b51b14997af0fcb56c
-
SSDEEP
6144:E9e9wVUSzul3MiGcyc7GGw/7Pk33xFCEX/e:EziMilGGwDeF9G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da918d21dbafd9ddf1bd6c85cfcd491146f742976549e08b8b011e043114357a
Files
-
da918d21dbafd9ddf1bd6c85cfcd491146f742976549e08b8b011e043114357a.exe windows:5 windows x86 arch:x86
d02c130f29d4c32501b93d5824e49357
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
InitializeCriticalSection
CompareStringA
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
GetCurrentProcessId
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalGetAtomNameA
WaitForSingleObject
WritePrivateProfileStringA
GlobalFlags
GlobalAddAtomA
GetFileAttributesA
GetFileSizeEx
GetFileTime
GetVersionExA
lstrcmpW
GlobalFindAtomA
GetCPInfo
GetOEMCP
ExitProcess
HeapAlloc
HeapFree
GetLocalTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
VirtualAlloc
HeapReAlloc
HeapSize
SetStdHandle
GetFileType
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
VirtualFree
HeapCreate
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
GetTimeZoneInformation
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
InterlockedExchange
lstrcmpA
FreeLibrary
GetProcAddress
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MultiByteToWideChar
lstrlenA
GetLastError
CreateEventA
SetLastError
GetModuleFileNameA
GetTempPathA
Sleep
GetModuleHandleA
GetComputerNameA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GlobalFree
CloseHandle
WriteFile
CreateFileA
GlobalAlloc
DeleteCriticalSection
LocalAlloc
CreateFileW
user32
AdjustWindowRectEx
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
GetClientRect
SetForegroundWindow
SetMenu
MapWindowPoints
GetMessagePos
GetMessageTime
DestroyWindow
GetTopWindow
GetForegroundWindow
RemovePropA
GetPropA
SetPropA
GetClassLongA
GetCapture
WinHelpA
LoadIconA
RegisterWindowMessageA
DestroyMenu
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetWindowTextA
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
UnhookWindowsHookEx
LoadCursorA
ReleaseDC
GetSysColor
GetSysColorBrush
CharUpperA
GetSystemMetrics
PostMessageA
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetWindowPos
ShowWindow
SetWindowLongA
IsWindow
GetDlgItem
GetWindow
GetDlgCtrlID
GetClassNameA
PtInRect
SetWindowTextA
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CopyRect
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
DefWindowProcA
CallWindowProcA
GetMenu
CheckMenuItem
SetWindowsHookExA
GetDesktopWindow
GetWindowRect
LoadStringA
GetDC
CallNextHookEx
SetCursor
gdi32
GetClipBox
SetMapMode
GetObjectA
GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
DeleteObject
advapi32
RegEnumKeyA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueA
RegDeleteKeyA
shell32
ShellExecuteA
SHGetSpecialFolderPathA
shlwapi
PathRemoveFileSpecA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFindExtensionA
oleacc
CreateStdAccessibleObject
LresultFromObject
wininet
HttpOpenRequestA
InternetConnectA
HttpSendRequestExA
HttpEndRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
InternetQueryDataAvailable
HttpAddRequestHeadersA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
comdlg32
GetFileTitleA
oleaut32
VariantInit
VariantClear
VariantChangeType
Sections
.text Size: 199KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ