Static task
static1
Behavioral task
behavioral1
Sample
ea805b8003d5eb08bc37f38530e0454590541ecf23fac4ab61fce1c40c8ff180.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ea805b8003d5eb08bc37f38530e0454590541ecf23fac4ab61fce1c40c8ff180.exe
Resource
win10v2004-20240412-en
General
-
Target
ea805b8003d5eb08bc37f38530e0454590541ecf23fac4ab61fce1c40c8ff180
-
Size
6.4MB
-
MD5
091a8de8b2ccd34eab4a5997f0760bbd
-
SHA1
67fd7ef0846fef5268b379065da93c4a41f2c4ea
-
SHA256
ea805b8003d5eb08bc37f38530e0454590541ecf23fac4ab61fce1c40c8ff180
-
SHA512
1d7011c048ddf0f0d85c43930b52799011eac85a08e70dd9eff239fbd9a748cc30adab72b0c5615e6931d254449123e50025d3a61ccb819fafc6d64271e820b5
-
SSDEEP
98304:DgaAQ1atGnmjRk2EgFrsXPuOl66fiRuC0hslf3p1+MCxYoDuHKzAwXIvmlw4FMzs:caAZtzrs/uOl66fiEIRfsXIvmlxo4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea805b8003d5eb08bc37f38530e0454590541ecf23fac4ab61fce1c40c8ff180
Files
-
ea805b8003d5eb08bc37f38530e0454590541ecf23fac4ab61fce1c40c8ff180.exe windows:5 windows x86 arch:x86
be914539a68c012e7fcd9af1c7360aa2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
ioctlsocket
inet_addr
send
connect
inet_ntoa
WSAGetLastError
closesocket
socket
recvfrom
ntohl
sendto
WSAStartup
select
gethostbyname
recv
ntohs
htonl
__WSAFDIsSet
htons
winmm
waveOutWrite
waveOutSetVolume
waveOutGetNumDevs
waveOutUnprepareHeader
waveOutClose
waveOutRestart
waveOutReset
waveOutOpen
waveOutPrepareHeader
waveOutGetPosition
PlaySoundW
waveInAddBuffer
waveInStart
waveInOpen
waveInUnprepareHeader
waveInGetPosition
waveInReset
waveInGetNumDevs
waveInPrepareHeader
waveInStop
waveInClose
ptt
?CreatePttEngine@@YAPAVCEngineNotifier@@PAVCPttUINotifier@@@Z
?DestroyPttEngine@@YAHPAVCEngineNotifier@@@Z
libcef
cef_string_utf16_clear
cef_string_utf16_to_utf8
cef_string_utf8_to_utf16
cef_string_utf8_clear
cef_string_utf16_set
cef_string_utf16_cmp
cef_string_userfree_utf16_free
cef_string_list_alloc
cef_string_list_free
cef_currently_on
cef_post_task
cef_register_extension
cef_execute_process
cef_initialize
cef_shutdown
cef_api_hash
cef_v8value_create_string
cef_v8context_get_current_context
cef_process_message_create
cef_string_map_alloc
cef_string_map_free
cef_command_line_create
cef_browser_host_create_browser
cef_string_list_size
cef_string_list_value
cef_string_list_append
cef_string_map_size
cef_string_map_key
cef_string_map_value
cef_string_map_append
cef_string_multimap_size
cef_string_multimap_key
cef_string_multimap_value
cef_string_multimap_append
cef_string_multimap_alloc
cef_string_multimap_free
avcodec-57
av_free_packet
av_init_packet
av_new_packet
av_packet_unref
av_parser_close
av_parser_init
av_parser_parse2
avcodec_alloc_context3
avcodec_close
avcodec_decode_video2
avcodec_encode_audio2
avcodec_encode_video2
avcodec_fill_audio_frame
avcodec_find_decoder
avcodec_find_encoder
avcodec_free_context
avcodec_get_class
avcodec_open2
avcodec_parameters_copy
avpicture_alloc
avpicture_fill
avpicture_free
avpicture_get_size
avformat-57
av_dump_format
av_find_input_format
av_guess_format
av_interleaved_write_frame
av_read_frame
av_register_all
av_write_frame
av_write_trailer
avformat_alloc_context
avformat_alloc_output_context2
avformat_close_input
avformat_find_stream_info
avformat_free_context
avformat_match_stream_specifier
avformat_network_init
avformat_new_stream
avformat_open_input
avformat_write_header
avio_close
avio_open
avutil-55
av_compare_ts
av_dict_free
av_dict_get
av_dict_set
av_frame_alloc
av_frame_free
av_frame_unref
av_free
av_get_channel_layout_nb_channels
av_image_fill_arrays
av_image_get_buffer_size
av_int_list_length_for_size
av_log
av_malloc
av_mallocz
av_opt_find
av_opt_set_bin
av_opt_set_int
av_opt_set_sample_fmt
av_rescale_q
av_rescale_q_rnd
av_strdup
av_strerror
avdevice-57
SDL_CreateRenderer
SDL_CreateTexture
SDL_CreateThread
SDL_CreateWindowFrom
SDL_Delay
SDL_DestroyRenderer
SDL_DestroyTexture
SDL_DestroyWindow
SDL_Init
SDL_PushEvent
SDL_Quit
SDL_RenderClear
SDL_RenderCopy
SDL_RenderPresent
SDL_UpdateTexture
SDL_UpdateYUVTexture
avdevice_list_input_sources
avdevice_register_all
swscale-4
sws_freeContext
sws_getContext
sws_scale
swresample-2
swr_alloc
swr_convert
swr_init
avfilter-6
av_buffersink_params_alloc
avfilter_get_by_name
avfilter_graph_alloc
avfilter_graph_config
avfilter_graph_create_filter
avfilter_graph_parse_ptr
avfilter_inout_alloc
avfilter_register_all
libcurl
curl_global_init
curl_version
curl_easy_getinfo
curl_slist_append
curl_easy_setopt
curl_easy_cleanup
curl_free
curl_easy_init
curl_easy_perform
curl_unescape
curl_global_cleanup
curl_slist_free_all
advapi32
RegEnumKeyW
RegEnumKeyExW
RegEnumValueW
SetFileSecurityW
GetFileSecurityW
RegQueryValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegSetValueW
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
setupapi
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
hid
HidD_GetAttributes
HidD_GetHidGuid
HidD_SetFeature
HidD_FlushQueue
HidD_GetFeature
audiodecoder
?AudioDecoder4K@@YAHPBDHPADHAAH@Z
?CreateAudioDecoder@@YAHXZ
?AudioDecoder8K@@YAHPBDHPADHAAH@Z
libxl
xlCreateBookW
kernel32
SetFilePointerEx
GetFileInformationByHandleEx
FindFirstFileExW
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetFileInformationByHandle
SleepConditionVariableCS
SleepConditionVariableSRW
GetStringTypeW
GetLocaleInfoEx
LCMapStringEx
QueryPerformanceFrequency
SizeofResource
HeapFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
HeapSize
GetLastError
LockResource
HeapReAlloc
RaiseException
LoadResource
FindResourceW
HeapAlloc
DecodePointer
HeapDestroy
DeleteCriticalSection
GetProcessHeap
GetModuleHandleW
FindFirstFileW
FindNextFileW
FindClose
SetThreadPriority
WaitForSingleObject
TerminateThread
CloseHandle
CreateThread
Sleep
CopyFileW
MultiByteToWideChar
GlobalAlloc
GlobalLock
GlobalUnlock
CreateDirectoryA
CreateDirectoryW
GetModuleFileNameA
CompareStringW
GetModuleFileNameW
CopyFileA
GetCommandLineW
GetCurrentProcess
lstrlenW
CreateFileW
GetCurrentThreadId
GetPrivateProfileStringW
OutputDebugStringW
LoadLibraryW
GetLocalTime
GetCurrentDirectoryW
SetCurrentDirectoryW
GetProcAddress
GetCurrentProcessId
FreeLibrary
lstrcpyW
IsDebuggerPresent
SetUnhandledExceptionFilter
GetExitCodeProcess
SetThreadLocale
WideCharToMultiByte
GetPrivateProfileIntW
GetPrivateProfileSectionNamesW
GlobalFree
GetSystemDirectoryW
lstrcpynW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
GetFileAttributesW
HeapValidate
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
GetSystemInfo
HeapCompact
UnlockFile
LocalFree
LockFileEx
GetFileSize
SystemTimeToFileTime
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
ReleaseSemaphore
CreateSemaphoreA
CreateEventW
SetEvent
SetFileAttributesW
GetSystemTimes
K32GetModuleFileNameExW
OpenProcess
CreateToolhelp32Snapshot
GetTickCount64
Process32NextW
Process32FirstW
GetProcessTimes
GetLocaleInfoW
SetLastError
lstrlenA
lstrcmpA
ReleaseMutex
OpenFileMappingW
FileTimeToSystemTime
FileTimeToLocalFileTime
GlobalMemoryStatus
GetVersionExA
FlushConsoleInputBuffer
GetStdHandle
EncodePointer
GetModuleHandleA
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
MulDiv
GlobalSize
GlobalGetAtomNameW
GetVersionExW
GetCurrentThread
CompareStringA
ResumeThread
WritePrivateProfileStringW
GetFileTime
GetTempFileNameW
SetFileTime
ReplaceFileW
GetUserDefaultLCID
GetFileSizeEx
LocalFileTimeToFileTime
SystemTimeToTzSpecificLocalTime
GetShortPathNameW
GetVolumeInformationW
DuplicateHandle
lstrcmpiW
MoveFileW
GetStringTypeExW
GetThreadLocale
VerSetConditionMask
VerifyVersionInfoW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
VirtualProtect
GetProfileIntW
SetErrorMode
FindResourceExW
GetWindowsDirectoryW
SearchPathW
ResetEvent
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
GetStartupInfoW
CompareStringEx
GetCPInfo
RtlUnwind
VirtualQuery
VirtualAlloc
GetDriveTypeW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetFileType
PeekNamedPipe
ExitProcess
WriteConsoleW
SetConsoleCtrlHandler
GetCommandLineA
SetStdHandle
HeapQueryInformation
GetConsoleCP
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetConsoleMode
ReadConsoleW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleMode
ReadConsoleInputW
GetTimeZoneInformation
user32
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
GetActiveWindow
ClientToScreen
SendDlgItemMessageA
SetRectEmpty
GetMenuStringW
GetMenuState
InsertMenuW
RemoveMenu
GetWindowThreadProcessId
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
BringWindowToTop
ReleaseCapture
LoadAcceleratorsW
TranslateAcceleratorW
LoadMenuW
DestroyMenu
InsertMenuItemW
IntersectRect
DestroyIcon
UnpackDDElParam
ReuseDDElParam
SetCapture
MessageBeep
SetCursorPos
WindowFromPoint
IsRectEmpty
CopyIcon
NotifyWinEvent
GetSystemMenu
GetMenuItemInfoW
EnableScrollBar
FrameRect
DestroyCursor
DrawStateW
PostQuitMessage
TranslateMessage
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
CharUpperW
DrawEdge
GetSysColorBrush
DrawFocusRect
DrawIconEx
EnumDisplayMonitors
CopyImage
RealChildWindowFromPoint
TrackMouseEvent
UnionRect
DeleteMenu
IsClipboardFormatAvailable
GetUpdateRect
MonitorFromPoint
RegisterClipboardFormatW
IsZoomed
GetNextDlgGroupItem
GetIconInfo
DestroyAcceleratorTable
WaitMessage
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetDoubleClickTime
ModifyMenuW
SetActiveWindow
GetKeyboardLayout
IsDialogMessageW
CreateAcceleratorTableW
HideCaret
InvertRect
SubtractRect
CharUpperBuffW
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsCharLowerW
MapVirtualKeyExW
GetComboBoxInfo
CreateMenu
GetWindowRgn
ScreenToClient
DrawTextExW
RedrawWindow
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
LoadImageW
InflateRect
GetDC
IsWindow
OffsetRect
SetCursor
GetCursorPos
SetWindowRgn
PostMessageW
MessageBoxW
GetAsyncKeyState
SetForegroundWindow
SetWindowPos
FillRect
GetSysColor
SetRect
ShowWindow
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
CopyRect
PtInRect
wsprintfW
GetWindowLongW
GetMessagePos
CreatePopupMenu
SetWindowLongW
AppendMenuW
CloseWindow
SetParent
GetMessageW
PostThreadMessageW
GetWindowRect
IsWindowVisible
LockWindowUpdate
LoadCursorW
UpdateWindow
InvalidateRect
SendMessageW
GetSystemMetrics
UnregisterClassW
DrawIcon
SetTimer
LoadIconW
GetClientRect
KillTimer
RegisterWindowMessageW
IsIconic
EnableWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
SetWindowTextW
IsWindowEnabled
CheckDlgButton
GetDlgItemTextW
SetDlgItemTextW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
AdjustWindowRectEx
GetWindowTextLengthW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetKeyboardState
GetSubMenu
SetMenu
GetMenu
GetCapture
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
DispatchMessageW
MoveWindow
SetLayeredWindowAttributes
EqualRect
AnimateWindow
PeekMessageW
SetFocus
MapWindowPoints
GetParent
BeginPaint
EndPaint
DrawFrameControl
GetWindowTextW
MessageBoxExW
MapVirtualKeyW
GetKeyNameTextW
GetKeyState
SystemParametersInfoW
SetClassLongW
FindWindowW
GetDesktopWindow
GetFocus
ValidateRect
GetWindowDC
ReleaseDC
GetDlgItemTextA
SetDlgItemTextA
ScrollWindow
DrawTextW
GetForegroundWindow
TabbedTextOutW
ToUnicodeEx
GrayStringW
gdi32
GetWindowExtEx
CreateCompatibleBitmap
BitBlt
GetBkColor
CreatePen
SetStretchBltMode
CreateFontIndirectW
RoundRect
Rectangle
SetBkMode
GetDeviceCaps
SetBkColor
SetTextColor
CreateBitmap
CreateHatchBrush
CreateRectRgn
ExcludeClipRect
GetClipBox
GetObjectType
IntersectClipRect
LineTo
RestoreDC
SetROP2
SaveDC
SelectClipRgn
TextOutW
GetViewportExtEx
LPtoDP
Escape
GetMapMode
ExtSelectClipRgn
PtVisible
SelectPalette
SetMapMode
GetPixel
CreateSolidBrush
GetStockObject
CreateFontW
SelectObject
CreateDIBSection
GetDIBColorTable
SetDIBColorTable
CreateCompatibleDC
StretchBlt
DeleteObject
ExtTextOutW
DeleteDC
GetObjectW
GetTextFaceW
SetLayout
GetLayout
SetPixelV
GetViewportOrgEx
GetWindowOrgEx
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExW
SetPixel
RealizePalette
OffsetRgn
GetRgnBox
GetTextMetricsW
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetRectRgn
CombineRgn
PatBlt
CreateRectRgnIndirect
CreateDCW
CopyMetaFileW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
MoveToEx
RectVisible
DPtoLP
GetTextExtentPoint32W
CreatePatternBrush
CreateRoundRectRgn
SetTextAlign
SetPolyFillMode
msimg32
TransparentBlt
AlphaBlend
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
shell32
SHGetFileInfoW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
ShellExecuteA
DragQueryFileW
SHGetDesktopFolder
SHGetSpecialFolderLocation
DragFinish
ExtractIconW
SHAppBarMessage
comctl32
ImageList_AddMasked
_TrackMouseEvent
ImageList_ReplaceIcon
ImageList_Draw
shlwapi
PathFindFileNameW
StrCmpW
StrChrW
StrCpyW
PathRemoveFileSpecW
PathFileExistsA
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathFindExtensionW
uxtheme
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetThemeSysColor
GetWindowTheme
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
DrawThemeText
DrawThemeParentBackground
GetCurrentThemeName
IsAppThemed
ole32
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoRevokeClassObject
OleLockRunning
CoRegisterMessageFilter
CreateStreamOnHGlobal
CoTaskMemFree
CoCreateInstance
CoInitialize
DoDragDrop
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
CoInitializeEx
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
OleIsCurrentClipboard
CoCreateGuid
StringFromCLSID
oleaut32
LoadTypeLi
VarBstrFromDate
VariantCopy
OleCreateFontIndirect
SafeArrayDestroy
VariantChangeType
VariantClear
VariantInit
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocString
SysAllocStringLen
oledlg
OleUIBusyW
gdiplus
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipLoadImageFromFile
GdipSetInterpolationMode
GdipScaleWorldTransform
GdipDrawImageI
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImageWidth
GdipGetImagePalette
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipBitmapLockBits
GdipFree
GdipGetImagePixelFormat
GdipDisposeImage
GdipAlloc
GdipBitmapUnlockBits
GdipCloneImage
GdipGetImagePaletteSize
GdipGetImageHeight
GdiplusShutdown
GdiplusStartup
GdipDrawImage
GdipCreateFromHDC
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
Sections
.text Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 820KB - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 107KB - Virtual size: 641KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 185KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 750KB - Virtual size: 749KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ