Static task
static1
Behavioral task
behavioral1
Sample
a0984c506c8ebe4e7490a55a0b77378e54f61b2468e62a6cb177494dd42ea553.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a0984c506c8ebe4e7490a55a0b77378e54f61b2468e62a6cb177494dd42ea553.exe
Resource
win10v2004-20240412-en
General
-
Target
a0984c506c8ebe4e7490a55a0b77378e54f61b2468e62a6cb177494dd42ea553
-
Size
188KB
-
MD5
64a8568e630bc9e7f1310835feff506b
-
SHA1
a6b10852e4b05be8f84693b6a03f87d9d965ed74
-
SHA256
a0984c506c8ebe4e7490a55a0b77378e54f61b2468e62a6cb177494dd42ea553
-
SHA512
32486c8dae538eb612590a8bda10eaaaacb816e3144eaf0a922d93fde53c602fb995d9ff11c85807553e6d07588c73d2f9e9d975dafb90f93e325ecc6b0f236b
-
SSDEEP
3072:d0uU7u3oyW4vHbZIVzXw7ydpsFHusAtMJCo+2UokUmciI:+Pbg7GVLSYZ3o3m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0984c506c8ebe4e7490a55a0b77378e54f61b2468e62a6cb177494dd42ea553
Files
-
a0984c506c8ebe4e7490a55a0b77378e54f61b2468e62a6cb177494dd42ea553.exe windows:4 windows x86 arch:x86
b7a86e04a82b96dddded8290c3f774c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
winmm
PlaySoundA
kernel32
GetCurrentProcess
WriteFile
SetFilePointer
FlushFileBuffers
SetErrorMode
GetFullPathNameA
GetCurrentDirectoryA
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
HeapAlloc
GetACP
TerminateProcess
HeapReAlloc
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProcAddress
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
WinExec
GetProcessVersion
GetOEMCP
GetCPInfo
LocalReAlloc
GlobalFlags
TlsGetValue
GlobalReAlloc
TlsSetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
TlsFree
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
GetCurrentThread
LocalAlloc
lstrcmpA
lstrcpynA
FindClose
FindNextFileA
GetLastError
FileTimeToLocalFileTime
FileTimeToSystemTime
MulDiv
LocalFree
WideCharToMultiByte
SetLastError
MultiByteToWideChar
InterlockedIncrement
lstrlenA
InterlockedDecrement
LockResource
FindResourceA
LoadResource
lstrcmpiA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
GlobalAlloc
GetModuleHandleA
GetModuleFileNameA
GlobalFree
GlobalLock
GlobalUnlock
GetVersionExA
lstrcatA
CloseHandle
lstrcpyA
FindFirstFileA
GetUserDefaultLangID
GetVersion
GetTickCount
HeapDestroy
OpenFile
HeapCreate
HeapSize
user32
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
CreateDialogIndirectParamA
GetActiveWindow
EndDialog
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
DestroyMenu
SetMenu
ReuseDDElParam
UnpackDDElParam
LoadStringA
ValidateRect
TranslateMessage
GetMessageA
PostQuitMessage
ShowOwnedPopups
GetClassNameA
PtInRect
GetSysColorBrush
ReleaseDC
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
GetTopWindow
GetCapture
WinHelpA
RegisterClassA
GetMenu
GetMenuItemCount
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
LoadBitmapA
IsDialogMessageA
ClientToScreen
GetDC
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IsIconic
GetWindowPlacement
GetWindowRect
wsprintfA
GetWindowTextA
IsWindowVisible
ShowWindow
EnumWindows
FindWindowA
LoadMenuA
GetSubMenu
GetMenuItemID
SetMenuDefaultItem
GetMenuStringA
ModifyMenuA
TrackPopupMenu
IsWindow
UnregisterHotKey
GetCursorPos
KillTimer
GetAsyncKeyState
GetClassInfoA
PostMessageA
LoadIconA
GetSystemMetrics
RegisterHotKey
MessageBeep
SetCursor
OffsetRect
SystemParametersInfoA
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
SetWindowTextA
GetDesktopWindow
LoadCursorA
SetTimer
BringWindowToTop
SetForegroundWindow
EnableWindow
InflateRect
GetClientRect
GetParent
SendMessageA
GetMenuCheckMarkDimensions
SetWindowsHookExA
GetClassLongA
GetKeyState
DefWindowProcA
InvalidateRect
GetSysColor
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
DestroyWindow
CreateWindowExA
CallNextHookEx
MessageBoxA
UnregisterClassA
gdi32
CreateFontIndirectA
SetTextColor
SetBkColor
GetClipBox
CreateBitmap
DeleteDC
GetObjectA
SaveDC
LPtoDP
SelectObject
GetStockObject
RestoreDC
SetBkMode
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetDeviceCaps
DeleteObject
CreateSolidBrush
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
PatBlt
comdlg32
GetSaveFileNameA
GetOpenFileNameA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegSetValueExA
RegCloseKey
RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
RegDeleteValueA
shell32
DragFinish
ShellExecuteA
Shell_NotifyIconA
DragQueryFileA
comctl32
ord17
Sections
.text Size: 132KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ