Static task
static1
Behavioral task
behavioral1
Sample
c0b7d190febbfa120ecdc2558f457648b16c91fca4d0f2586ad2484b7dfd34b2.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c0b7d190febbfa120ecdc2558f457648b16c91fca4d0f2586ad2484b7dfd34b2.exe
Resource
win10v2004-20240226-en
General
-
Target
c0b7d190febbfa120ecdc2558f457648b16c91fca4d0f2586ad2484b7dfd34b2
-
Size
448KB
-
MD5
5471f1add954764cff176adcb4213103
-
SHA1
653cb31833d973950388a0088fa20f3ee6d1ec76
-
SHA256
c0b7d190febbfa120ecdc2558f457648b16c91fca4d0f2586ad2484b7dfd34b2
-
SHA512
bb767b8dbc799c7c1ade04eb0da8ee2b58159016d1c28fe4bfb68055980a152ddd69c63e7d5c39ca85409d44df30a95b7687dff7e9a2c84dabae5825383c873a
-
SSDEEP
6144:GZ+ngt9rA/vi8Um33ja50m3BwaV4xrhYMj68:Gkgt9oUmHjm0m5AmMt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0b7d190febbfa120ecdc2558f457648b16c91fca4d0f2586ad2484b7dfd34b2
Files
-
c0b7d190febbfa120ecdc2558f457648b16c91fca4d0f2586ad2484b7dfd34b2.exe windows:4 windows x86 arch:x86
c944f484bc9d4ec90f9bbcf4d6a94978
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
SetUnhandledExceptionFilter
msvcrt
_chdir
_strdup
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
atoi
fclose
fflush
fgets
fopen
fprintf
fputc
fputs
fread
free
fwrite
getenv
localtime
malloc
memcpy
memset
printf
puts
realloc
signal
sprintf
strcat
strchr
strcmp
strcpy
strftime
strlen
strncmp
strrchr
strstr
strtok
time
sdl
SDL_Init
SDL_Quit
sdl_net
SDLNet_TCP_Send
SDLNet_AddSocket
SDLNet_Init
SDLNet_AllocSocketSet
SDLNet_Quit
SDLNet_TCP_Close
SDLNet_ResolveHost
SDLNet_TCP_Open
SDLNet_DelSocket
SDLNet_CheckSockets
SDLNet_TCP_Recv
SDLNet_TCP_Accept
SDLNet_TCP_GetPeerAddress
SDLNet_ResolveIP
libatk-1.0-0
atk_action_get_n_actions
atk_action_get_name
atk_action_set_description
libgdk-win32-2.0-0
gdk_flush
gdk_pixbuf_render_pixmap_and_mask
gdk_screen_get_height
gdk_screen_get_width
gdk_threads_enter
gdk_threads_init
gdk_threads_leave
gdk_window_invalidate_rect
gdk_window_set_back_pixmap
libgdk_pixbuf-2.0-0
gdk_pixbuf_get_height
gdk_pixbuf_get_n_channels
gdk_pixbuf_get_pixels
gdk_pixbuf_get_rowstride
gdk_pixbuf_get_width
gdk_pixbuf_new_from_file_utf8
gdk_pixbuf_new_from_inline
gdk_pixbuf_rotate_simple
libglib-2.0-0
g_ascii_digit_value
g_ascii_strncasecmp
g_ascii_table
g_error_free
g_file_test_utf8
g_free
g_idle_add
g_list_append
g_list_copy
g_list_delete_link
g_list_first
g_list_foreach
g_list_free
g_list_last
g_list_length
g_list_nth
g_list_nth_data
g_list_prepend
g_list_reverse
g_list_sort
g_log
g_main_context_iteration
g_malloc
g_rand_free
g_rand_int_range
g_rand_new
g_source_remove
g_strchomp
g_strchug
g_strdelimit
g_strdup
g_strdup_printf
g_strjoin
g_timeout_add
g_timer_destroy
g_timer_elapsed
g_timer_new
g_timer_reset
libgobject-2.0-0
g_object_get_data
g_object_set
g_object_set_data
g_object_set_data_full
g_object_unref
g_signal_connect_data
g_type_check_instance_cast
g_type_check_instance_is_a
libgthread-2.0-0
g_thread_init
libgtk-win32-2.0-0
gtk_accel_group_new
gtk_adjustment_get_type
gtk_adjustment_new
gtk_alignment_get_type
gtk_alignment_new
gtk_alignment_set_padding
gtk_box_get_type
gtk_box_pack_start
gtk_button_box_get_type
gtk_button_box_set_layout
gtk_button_get_type
gtk_button_new
gtk_button_new_from_stock
gtk_button_new_with_mnemonic
gtk_button_set_label
gtk_cell_renderer_text_new
gtk_cell_renderer_toggle_new
gtk_check_button_new_with_mnemonic
gtk_check_menu_item_get_active
gtk_check_menu_item_get_type
gtk_check_menu_item_new_with_mnemonic
gtk_check_menu_item_set_active
gtk_combo_box_append_text
gtk_combo_box_entry_new_text
gtk_combo_box_get_active
gtk_combo_box_get_type
gtk_combo_box_new_text
gtk_combo_box_remove_text
gtk_combo_box_set_active
gtk_container_add
gtk_container_get_children
gtk_container_get_type
gtk_container_remove
gtk_container_set_border_width
gtk_dialog_add_action_widget
gtk_dialog_get_type
gtk_dialog_new
gtk_dialog_response
gtk_dialog_run
gtk_dialog_set_has_separator
gtk_editable_get_type
gtk_editable_select_region
gtk_entry_get_text
gtk_entry_get_type
gtk_entry_new
gtk_entry_set_activates_default
gtk_entry_set_max_length
gtk_entry_set_text
gtk_entry_set_visibility
gtk_event_box_get_type
gtk_event_box_new
gtk_event_box_set_above_child
gtk_event_box_set_visible_window
gtk_file_chooser_add_filter
gtk_file_chooser_dialog_new
gtk_file_chooser_get_current_folder_utf8
gtk_file_chooser_get_filename_utf8
gtk_file_chooser_get_type
gtk_file_chooser_remove_filter
gtk_file_chooser_set_current_folder_utf8
gtk_file_chooser_set_current_name
gtk_file_chooser_set_filename_utf8
gtk_file_chooser_set_filter
gtk_file_filter_add_pattern
gtk_file_filter_new
gtk_file_filter_set_name
gtk_fixed_get_type
gtk_fixed_move
gtk_fixed_new
gtk_fixed_put
gtk_hbox_new
gtk_hbutton_box_new
gtk_hpaned_new
gtk_hseparator_new
gtk_image_get_pixbuf
gtk_image_get_storage_type
gtk_image_get_type
gtk_image_menu_item_get_type
gtk_image_menu_item_new_from_stock
gtk_image_menu_item_new_with_mnemonic
gtk_image_menu_item_set_image
gtk_image_new
gtk_image_new_from_file_utf8
gtk_image_new_from_pixbuf
gtk_image_new_from_stock
gtk_init_abi_check
gtk_label_get_text
gtk_label_get_type
gtk_label_new
gtk_label_new_with_mnemonic
gtk_label_select_region
gtk_label_set_justify
gtk_label_set_line_wrap
gtk_label_set_markup
gtk_label_set_single_line_mode
gtk_label_set_text
gtk_label_set_use_markup
gtk_list_store_append
gtk_list_store_clear
gtk_list_store_new
gtk_list_store_remove
gtk_list_store_set
gtk_main
gtk_main_quit
gtk_menu_bar_new
gtk_menu_get_attach_widget
gtk_menu_get_type
gtk_menu_item_get_type
gtk_menu_item_new_with_mnemonic
gtk_menu_item_set_submenu
gtk_menu_new
gtk_menu_popup
gtk_message_dialog_format_secondary_text
gtk_message_dialog_get_type
gtk_message_dialog_new_with_markup
gtk_misc_get_type
gtk_misc_set_alignment
gtk_misc_set_padding
gtk_notebook_get_nth_page
gtk_notebook_get_type
gtk_notebook_new
gtk_notebook_set_tab_label
gtk_object_get_type
gtk_paned_get_type
gtk_paned_pack1
gtk_paned_pack2
gtk_paned_set_position
gtk_progress_bar_get_type
gtk_progress_bar_new
gtk_progress_bar_set_fraction
gtk_radio_button_get_group
gtk_radio_button_get_type
gtk_radio_button_new_with_mnemonic
gtk_radio_button_set_group
gtk_rc_add_default_file_utf8
gtk_scrolled_window_get_type
gtk_scrolled_window_new
gtk_scrolled_window_set_policy
gtk_scrolled_window_set_shadow_type
gtk_separator_menu_item_new
gtk_set_locale
gtk_show_about_dialog
gtk_spin_button_get_type
gtk_spin_button_get_value_as_int
gtk_spin_button_new
gtk_spin_button_set_numeric
gtk_spin_button_set_range
gtk_spin_button_set_snap_to_ticks
gtk_spin_button_set_value
gtk_statusbar_get_context_id
gtk_statusbar_get_type
gtk_statusbar_new
gtk_statusbar_pop
gtk_statusbar_push
gtk_statusbar_set_has_resize_grip
gtk_text_buffer_apply_tag
gtk_text_buffer_create_mark
gtk_text_buffer_create_tag
gtk_text_buffer_delete
gtk_text_buffer_get_char_count
gtk_text_buffer_get_end_iter
gtk_text_buffer_get_iter_at_line
gtk_text_buffer_get_iter_at_offset
gtk_text_buffer_get_line_count
gtk_text_buffer_get_start_iter
gtk_text_buffer_get_tag_table
gtk_text_buffer_get_text
gtk_text_buffer_insert
gtk_text_tag_table_lookup
gtk_text_view_get_buffer
gtk_text_view_get_type
gtk_text_view_new
gtk_text_view_scroll_to_mark
gtk_text_view_set_accepts_tab
gtk_text_view_set_editable
gtk_text_view_set_left_margin
gtk_text_view_set_right_margin
gtk_text_view_set_wrap_mode
gtk_toggle_button_get_active
gtk_toggle_button_get_type
gtk_toggle_button_new_with_mnemonic
gtk_toggle_button_set_active
gtk_tooltips_disable
gtk_tooltips_enable
gtk_tooltips_new
gtk_tooltips_set_tip
gtk_tree_model_get_iter
gtk_tree_model_get_iter_first
gtk_tree_model_get_type
gtk_tree_model_iter_next
gtk_tree_path_free
gtk_tree_path_new_from_string
gtk_tree_selection_get_selected
gtk_tree_selection_iter_is_selected
gtk_tree_selection_set_mode
gtk_tree_selection_unselect_all
gtk_tree_view_append_column
gtk_tree_view_column_new_with_attributes
gtk_tree_view_get_selection
gtk_tree_view_get_type
gtk_tree_view_new
gtk_tree_view_scroll_to_point
gtk_tree_view_set_enable_search
gtk_tree_view_set_model
gtk_vbox_new
gtk_viewport_new
gtk_vpaned_new
gtk_vseparator_new
gtk_widget_add_accelerator
gtk_widget_destroy
gtk_widget_get_parent
gtk_widget_get_pointer
gtk_widget_get_type
gtk_widget_grab_default
gtk_widget_grab_focus
gtk_widget_hide
gtk_widget_modify_bg
gtk_widget_queue_draw
gtk_widget_realize
gtk_widget_ref
gtk_widget_set_app_paintable
gtk_widget_set_name
gtk_widget_set_sensitive
gtk_widget_set_size_request
gtk_widget_set_state
gtk_widget_show
gtk_widget_unref
gtk_window_add_accel_group
gtk_window_get_position
gtk_window_get_screen
gtk_window_get_type
gtk_window_move
gtk_window_new
gtk_window_present
gtk_window_set_default_icon_list
gtk_window_set_default_size
gtk_window_set_destroy_with_parent
gtk_window_set_icon_list
gtk_window_set_modal
gtk_window_set_position
gtk_window_set_resizable
gtk_window_set_skip_pager_hint
gtk_window_set_skip_taskbar_hint
gtk_window_set_title
gtk_window_set_transient_for
gtk_window_set_type_hint
Sections
.text Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 14KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE