Static task
static1
Behavioral task
behavioral1
Sample
80852077f656a4d1b5016582a975f8107f3124d7e475add115de2a3a5f502418.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
80852077f656a4d1b5016582a975f8107f3124d7e475add115de2a3a5f502418.exe
Resource
win10v2004-20240419-en
General
-
Target
80852077f656a4d1b5016582a975f8107f3124d7e475add115de2a3a5f502418
-
Size
176KB
-
MD5
4d943da34fabfaeacedf6a05f3084d93
-
SHA1
92135f57c52e456153dcaff2fcd36f64036435b6
-
SHA256
80852077f656a4d1b5016582a975f8107f3124d7e475add115de2a3a5f502418
-
SHA512
b291a728fe158b404793d9f517b70d7dbec772ee08ce00dd31770ae1624cc27507f1563804358933c3169406e1e770fbf2619b1bd377043dda95266436044fef
-
SSDEEP
3072:i5dFf/n8+mS1Pa00M9Qor2uFPnmffeJYzszdDKJ7tQI:iCpSRc0Qe2kmffPsdI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80852077f656a4d1b5016582a975f8107f3124d7e475add115de2a3a5f502418
Files
-
80852077f656a4d1b5016582a975f8107f3124d7e475add115de2a3a5f502418.exe windows:4 windows x86 arch:x86
5ad2b78ca39ce19670b4bbad7c7d59d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
InterlockedExchange
LCMapStringA
LoadLibraryA
GetProcAddress
FreeLibrary
GetEnvironmentVariableA
GetStdHandle
WriteFile
GetCommandLineW
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
GetProcessHeap
GetCommandLineA
GetModuleHandleA
lstrcpyn
LocalFree
LocalAlloc
WriteProcessMemory
IsBadCodePtr
Sleep
ReadProcessMemory
VirtualProtectEx
VirtualQueryEx
Module32Next
Module32First
CreateToolhelp32Snapshot
IsWow64Process
RtlMoveMemory
CloseHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
SetUnhandledExceptionFilter
OpenProcess
WideCharToMultiByte
IsBadWritePtr
VirtualAlloc
SetErrorMode
lstrcatA
lstrcpyA
GetModuleFileNameA
lstrcpynA
lstrlenA
GetCurrentThreadId
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalFree
GlobalUnlock
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalLock
GlobalReAlloc
GlobalAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
InterlockedDecrement
GetVersion
SetLastError
GetLastError
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetProcessVersion
lstrcmpA
GlobalFlags
InterlockedIncrement
MultiByteToWideChar
GetCPInfo
GetOEMCP
GetCurrentProcess
ReadFile
SetFilePointer
FlushFileBuffers
RtlUnwind
RaiseException
HeapSize
TerminateProcess
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
user32
GrayStringA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
wvsprintfA
SetWindowsHookExA
CallNextHookEx
GetKeyState
SendMessageA
UnhookWindowsHookEx
LoadStringA
GetNextDlgTabItem
GetParent
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
SetWindowPos
SetWindowLongA
GetWindowLongA
GetWindow
SetForegroundWindow
GetForegroundWindow
GetLastActivePopup
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
GetDlgCtrlID
GetWindowTextA
GetDlgItem
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
EnableWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
IsWindowEnabled
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
gdi32
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
shell32
CommandLineToArgvW
comctl32
ord17
oleaut32
SystemTimeToVariantTime
VariantTimeToSystemTime
Sections
.text Size: 128KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ