Static task
static1
Behavioral task
behavioral1
Sample
e022573c02dd628faa1c1e2c1f5c40d969f9bd6194f87c629ce9069dc2301d3c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e022573c02dd628faa1c1e2c1f5c40d969f9bd6194f87c629ce9069dc2301d3c.exe
Resource
win10v2004-20240412-en
General
-
Target
e022573c02dd628faa1c1e2c1f5c40d969f9bd6194f87c629ce9069dc2301d3c
-
Size
3.8MB
-
MD5
1d8a71b35a76f50ecd5afd8f53b2eabc
-
SHA1
a3fbdb183deae5dcab4c41287972face3631b205
-
SHA256
e022573c02dd628faa1c1e2c1f5c40d969f9bd6194f87c629ce9069dc2301d3c
-
SHA512
91af2bee4a2dd770386049b2d8118989dd936eba95022ad5fb1593d2c9a12808a5557b386522269f4d04f6ed57d5c958299db0f0e47b8d94799213d233c4ff36
-
SSDEEP
49152:3FT64xm3uQNwHsSUGe1L4GrzTlFkP544vqnIBtB1n39C8w:Ykm3uQN6s7GY4GHTlFkWyqnIBtb392
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e022573c02dd628faa1c1e2c1f5c40d969f9bd6194f87c629ce9069dc2301d3c
Files
-
e022573c02dd628faa1c1e2c1f5c40d969f9bd6194f87c629ce9069dc2301d3c.exe windows:5 windows x86 arch:x86
d098fff0a2689521120256fd10649fc4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
PlaySoundW
imm32
ImmGetDefaultIMEWnd
ImmReleaseContext
ImmGetCompositionStringW
ImmSetCompositionFontW
ImmNotifyIME
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetContext
kernel32
GetTimeFormatA
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLangID
GetUserDefaultLCID
GetVersionExA
GetVersionExW
GetVolumeInformationA
GetVolumeInformationW
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFileTimeToFileTime
LocalFree
lstrcmpiA
lstrcmpW
lstrlenA
lstrlenW
MapViewOfFile
MoveFileA
MoveFileW
MultiByteToWideChar
OpenFileMappingW
OpenProcess
OutputDebugStringW
PeekNamedPipe
PulseEvent
QueryPerformanceCounter
GetStringTypeW
RaiseException
ReadFile
ReadProcessMemory
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryA
RemoveDirectoryW
ResetEvent
ResumeThread
SetCurrentDirectoryA
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesA
SetFileAttributesW
SetFileTime
SetHandleCount
SetHandleInformation
SetLastError
SetNamedPipeHandleState
SetPriorityClass
SetProcessAffinityMask
SetStdHandle
SetSystemTime
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObjectEx
WideCharToMultiByte
WriteFile
WriteProcessMemory
Process32FirstW
Process32NextW
GetStringTypeA
GetStdHandle
GetStartupInfoW
GetStartupInfoA
GetShortPathNameA
GetProfileStringW
GetProcessHeap
GetThreadSelectorEntry
GetProcAddress
GetPriorityClass
GetOverlappedResult
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLongPathNameW
GetLogicalDrives
GetLocalTime
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileType
GetFileSize
GetFileInformationByHandle
GetFileAttributesW
GetFileAttributesExW
GetExitCodeThread
GetExitCodeProcess
GetEnvironmentVariableW
GetEnvironmentVariableA
GetEnvironmentStringsW
GetDriveTypeW
GetDriveTypeA
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetDiskFreeSpaceA
GetDateFormatW
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentDirectoryW
GetCurrentDirectoryA
GetCurrencyFormatW
GetCPInfo
GetCommandLineW
GetACP
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FormatMessageA
FlushFileBuffers
FindNextFileW
FindNextFileA
FindNextChangeNotification
FindFirstFileW
FindFirstFileA
FindFirstChangeNotificationW
FindCloseChangeNotification
FindClose
RtlUnwind
GetVersion
GetCurrentProcess
UnhandledExceptionFilter
GetEnvironmentStrings
FileTimeToSystemTime
FileTimeToLocalFileTime
FatalAppExitA
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
ExitThread
ExitProcess
EnumSystemLocalesA
DuplicateHandle
DisconnectNamedPipe
DeviceIoControl
DeleteFileW
DeleteFileA
DeleteCriticalSection
DefineDosDeviceA
CreateThread
CreateSemaphoreW
CreateSemaphoreA
CreateProcessW
CreateProcessA
CreatePipe
CreateNamedPipeA
CreateMutexW
CreateMutexA
CreateFileW
CreateFileMappingW
CreateFileMappingA
CreateFileA
CreateEventW
CreateEventA
CreateDirectoryW
CreateDirectoryA
CopyFileW
CopyFileA
ConnectNamedPipe
CompareStringW
CompareStringA
CloseHandle
CancelIo
CallNamedPipeA
BackupWrite
BackupSeek
GetSystemTimeAsFileTime
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
GetThreadPriority
GetThreadContext
GetTempPathW
GetTempPathA
GetSystemTime
GetSystemInfo
GetSystemDirectoryW
GetProcessAffinityMask
GetSystemDirectoryA
QueryPerformanceFrequency
user32
UnregisterClassW
UpdateWindow
ValidateRgn
WindowFromPoint
wsprintfA
ToAscii
SystemParametersInfoW
ShowWindow
SetWindowTextW
SetWindowTextA
SetWindowsHookExW
SetWindowRgn
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetParent
SetMenuItemInfoW
SetForegroundWindow
SetFocus
SetDoubleClickTime
SetCursorPos
SetClipboardViewer
SetClipboardData
SetClassLongW
SetCaretPos
SetCaretBlinkTime
SetCapture
SendMessageW
SendMessageTimeoutW
SendMessageA
ScrollWindowEx
ScreenToClient
ReleaseDC
UnhookWindowsHookEx
RegisterWindowMessageW
RegisterWindowMessageA
RegisterClipboardFormatW
RegisterClassW
RegisterClassExW
PostThreadMessageW
PostMessageW
PeekMessageW
OpenClipboard
MsgWaitForMultipleObjectsEx
MoveWindow
MessageBoxW
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyW
MapDialogRect
LoadImageW
LoadIconW
KillTimer
IsZoomed
IsWindowVisible
IsIconic
IsChild
InvalidateRgn
InvalidateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextA
GetWindowRgn
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetUserObjectInformationW
GetUpdateRect
TranslateMessage
TrackPopupMenuEx
ReleaseCapture
ToUnicode
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetQueueStatus
GetProcessWindowStation
GetParent
GetMessageW
GetMenu
GetKeyState
GetKeyboardState
GetKeyboardLayoutList
GetKeyboardLayout
GetIconInfo
GetFocus
GetDoubleClickTime
GetDlgItem
GetDesktopWindow
GetDC
GetCursorPos
GetClipboardFormatNameW
GetClientRect
GetClassNameA
GetClassLongW
GetClassInfoW
GetCaretBlinkTime
GetAsyncKeyState
GetActiveWindow
FindWindowW
FindWindowExW
ExitWindowsEx
EnumWindows
EnumDisplaySettingsW
EnumChildWindows
EndPaint
EndDialog
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextA
DrawIconEx
DispatchMessageW
DialogBoxIndirectParamW
DestroyWindow
DestroyIcon
DestroyCaret
DefWindowProcW
CreateWindowExW
CreateIconIndirect
CreateCursor
CreateCaret
CloseClipboard
ClipCursor
ClientToScreen
CharUpperBuffW
CharUpperBuffA
CharNextExA
CharLowerBuffW
CharLowerBuffA
ChangeDisplaySettingsW
ChangeClipboardChain
CallNextHookEx
BeginPaint
AdjustWindowRectEx
DestroyCursor
gdi32
StretchBlt
StartPage
SetWorldTransform
SetTextColor
SetTextAlign
SetPolyFillMode
SetGraphicsMode
SetBkMode
SelectPalette
SelectObject
SelectClipRgn
SaveDC
RestoreDC
ResetDCW
RealizePalette
PtInRegion
PolyBezierTo
OffsetRgn
MoveToEx
LineTo
GetTextMetricsW
GetTextFaceW
GetTextExtentPoint32W
GetStockObject
GetRegionData
GetPaletteEntries
GetOutlineTextMetricsW
GetObjectW
GetObjectA
GetNearestPaletteIndex
GetGlyphOutlineW
GetFontData
GetDIBits
GetDeviceCaps
GetCharABCWidthsW
GetCharABCWidthsFloatW
GetBkMode
GdiFlush
ExtTextOutW
ExtCreatePen
EnumFontFamiliesExW
EndPage
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePalette
CreateFontIndirectW
CreateEllipticRgn
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CombineRgn
CloseFigure
BitBlt
CreatePen
CreateBrushIndirect
winspool.drv
ClosePrinter
EnumFormsW
EnumPrintersW
OpenPrinterW
GetPrinterW
DeviceCapabilitiesW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
StartServiceCtrlDispatcherW
SetServiceStatus
SetSecurityDescriptorDacl
SetFileSecurityW
RevertToSelf
ReportEventW
ReportEventA
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenKeyExA
RegisterServiceCtrlHandlerW
RegisterEventSourceW
RegisterEventSourceA
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
RegCreateKeyExW
RegCreateKeyExA
RegConnectRegistryW
RegConnectRegistryA
RegCloseKey
QueryServiceStatus
QueryServiceConfigW
QueryServiceConfigA
PrivilegeCheck
OpenThreadToken
OpenServiceW
OpenServiceA
OpenSCManagerW
OpenSCManagerA
OpenProcessToken
LookupPrivilegeValueA
LookupAccountSidW
LookupAccountSidA
LogonUserW
InitiateSystemShutdownA
InitializeSecurityDescriptor
ImpersonateNamedPipeClient
ImpersonateLoggedOnUser
GetUserNameW
GetUserNameA
GetTokenInformation
GetLengthSid
FreeSid
EqualSid
DuplicateToken
DeregisterEventSource
DeleteService
CreateServiceW
CreateServiceA
CopySid
ControlService
AllocateAndInitializeSid
ChangeServiceConfigW
CloseServiceHandle
StartServiceW
shell32
ExtractIconExA
SHGetFileInfoW
ShellExecuteW
ole32
OleInitialize
OleIsCurrentClipboard
OleGetClipboard
OleUninitialize
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
StringFromGUID2
OleFlushClipboard
DoDragDrop
CoUninitialize
CoTaskMemFree
CoLockObjectExternal
CoGetMalloc
CoCreateInstance
OleSetClipboard
Sections
.text Size: 752KB - Virtual size: 751KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 508KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rview6 Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE