Static task
static1
Behavioral task
behavioral1
Sample
47089b04f14dd89cdb1c2b44d46fe3a8c8a7eb4a77c9c36edaaa4c94866dfb96.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
47089b04f14dd89cdb1c2b44d46fe3a8c8a7eb4a77c9c36edaaa4c94866dfb96.exe
Resource
win10v2004-20240412-en
General
-
Target
47089b04f14dd89cdb1c2b44d46fe3a8c8a7eb4a77c9c36edaaa4c94866dfb96
-
Size
2.9MB
-
MD5
276ffdc1cd537fb29a5fa5ca3b197966
-
SHA1
8c441ea7a299d3090238645e316437aaf1b03d22
-
SHA256
47089b04f14dd89cdb1c2b44d46fe3a8c8a7eb4a77c9c36edaaa4c94866dfb96
-
SHA512
28b319c82d81b62e9584d4af7b564f12f4b186de1a96a9b5f2d3e49b1fb7f205ec9e4c2028e507acb62edf12b05e52dadecd08ed47d336cb473b81bdcff8902f
-
SSDEEP
24576:nPhhCQeLHbHEIulxsMBc49l6q4iJOiDOT8jL5OYm3jbMJI2vaIYp+oGV35WjDDDq:nLpSqGM5OYm3jpp+oGV35z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47089b04f14dd89cdb1c2b44d46fe3a8c8a7eb4a77c9c36edaaa4c94866dfb96
Files
-
47089b04f14dd89cdb1c2b44d46fe3a8c8a7eb4a77c9c36edaaa4c94866dfb96.exe windows:1 windows x86 arch:x86
d88df90f3816d92083f1f1689477af3f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
dsound
ord1
gdi32
DeleteObject
CreateCompatibleDC
SelectObject
BitBlt
SetStretchBltMode
StretchBlt
DeleteDC
CreateDIBSection
StretchDIBits
GetObjectA
GetStockObject
CreateDCA
CreateCompatibleBitmap
SetTextAlign
SelectPalette
RealizePalette
CreateSolidBrush
SetBkMode
SetTextColor
GetDeviceCaps
StartDocA
StartPage
SetMapMode
SetWindowExtEx
SetViewportExtEx
CreateRectRgn
SelectClipRgn
EndPage
EndDoc
CreateICA
CreateFontA
GetTextMetricsA
GetTextExtentPoint32A
CreatePalette
CreatePen
Polygon
CombineRgn
RoundRect
Ellipse
MoveToEx
LineTo
TextOutA
GetClipRgn
Rectangle
GetTextExtentPointA
GetPixel
SetPixelV
SetViewportOrgEx
SetDIBitsToDevice
GetDIBits
GetSystemPaletteEntries
EnumFontsA
kernel32
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GlobalSize
LoadLibraryA
GetProcAddress
_lcreat
_lwrite
_lclose
_lopen
GetTempPathA
GetTempFileNameA
_llseek
_lread
OutputDebugStringA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
GetDateFormatA
GetTimeFormatA
CompareFileTime
GetModuleFileNameA
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
GetLocaleInfoA
GetSystemTime
lstrcpynA
_hread
_hwrite
FindFirstFileA
FindClose
GetLogicalDriveStringsA
SetFileAttributesA
RemoveDirectoryA
DeleteFileA
CreateDirectoryA
CopyFileA
FindNextFileA
CreateFileA
WriteFile
CloseHandle
LocalFileTimeToFileTime
SetFileTime
GetLogicalDrives
GetWindowsDirectoryA
GetSystemDirectoryA
MoveFileA
GetLastError
SetCommTimeouts
GetCommState
SetCommState
ReadFile
FreeLibrary
lstrcpyA
GetCommandLineA
DeleteCriticalSection
CreateSemaphoreA
WaitForSingleObject
ReleaseSemaphore
CreateThread
CompareStringA
IsDBCSLeadByte
GetStringTypeExA
FatalAppExitA
GetLocalTime
lstrcmpiA
FindResourceA
LoadResource
LockResource
GetCurrentThreadId
GetVersionExA
MultiByteToWideChar
GlobalReAlloc
IsBadReadPtr
GetCurrentDirectoryA
GetModuleHandleA
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
IsValidCodePage
WideCharToMultiByte
lstrcatA
SetUnhandledExceptionFilter
GetStartupInfoA
SetFilePointer
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentProcess
DuplicateHandle
shell32
DragQueryFileA
ShellExecuteA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHBrowseForFolderA
user32
WindowFromDC
GetSysColor
GetDC
ReleaseDC
SetRect
FillRect
DrawFocusRect
InvalidateRect
SetFocus
CreateCursor
SetCursor
wsprintfA
AdjustWindowRect
CreateWindowExA
SetWindowLongA
SetMenu
GetClientRect
GetWindowRect
ClientToScreen
ScreenToClient
MoveWindow
IsWindowVisible
ShowWindow
BringWindowToTop
GetSystemMetrics
BeginPaint
EndPaint
SetWindowTextA
GetWindowLongA
EnumWindows
EnumChildWindows
DefWindowProcA
GetMessageTime
GetMessagePos
SystemParametersInfoA
GetCursorPos
LoadIconA
RegisterClassA
OpenClipboard
IsClipboardFormatAvailable
CloseClipboard
GetParent
DrawTextA
SendMessageA
EmptyClipboard
GetClipboardData
SetClipboardData
RegisterClipboardFormatA
AppendMenuA
TrackPopupMenu
GetMenuStringA
CreatePopupMenu
DestroyMenu
SetPropA
RemovePropA
GetWindowTextLengthA
GetWindowTextA
EnableWindow
GetPropA
CallWindowProcA
LoadCursorA
FrameRect
ValidateRect
UpdateWindow
LockWindowUpdate
MessageBoxA
GetActiveWindow
DestroyWindow
GetKeyState
GetScrollRange
GetScrollPos
SetScrollPos
SetScrollRange
SetScrollInfo
GetScrollInfo
KillTimer
SetTimer
TranslateMDISysAccel
CreateMDIWindowA
FindWindowW
FindWindowA
GetClassNameA
MessageBeep
DefFrameProcA
DefMDIChildProcA
SetWindowPos
GetForegroundWindow
GetMenuState
GetMenu
CharUpperBuffA
CharLowerBuffA
InsertMenuA
DeleteMenu
SetMenuItemInfoA
EnableMenuItem
CheckMenuItem
CreateMenu
GetDoubleClickTime
WindowFromPoint
PeekMessageA
TranslateMessage
DispatchMessageA
GetMessageA
SetCapture
ReleaseCapture
GetSysColorBrush
DrawIcon
OffsetRect
ScrollWindow
SetParent
IsRectEmpty
GetAsyncKeyState
GetFocus
DragDetect
winmm
mciSendStringA
midiOutOpen
midiOutClose
midiOutShortMsg
comdlg32
PrintDlgA
PageSetupDlgA
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
ole32
RegisterDragDrop
RevokeDragDrop
DoDragDrop
OleInitialize
OleUninitialize
Sections
.text Size: 553KB - Virtual size: 553KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 201B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.exc Size: 512B - Virtual size: 188B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 31KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ