Static task
static1
Behavioral task
behavioral1
Sample
ff5d5be91e7f5a5efb74571938cab5c73ff8f48c2b5db473ba288713e403cf83.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ff5d5be91e7f5a5efb74571938cab5c73ff8f48c2b5db473ba288713e403cf83.exe
Resource
win10v2004-20240226-en
General
-
Target
ff5d5be91e7f5a5efb74571938cab5c73ff8f48c2b5db473ba288713e403cf83
-
Size
179KB
-
MD5
5ad4fb32f1d4b2af4efe141b1e4afde3
-
SHA1
bb14d635fcaeda10995c9b89551de117bb62c6f6
-
SHA256
ff5d5be91e7f5a5efb74571938cab5c73ff8f48c2b5db473ba288713e403cf83
-
SHA512
9bc79c2ab89595c3c46adbff7b028fc9b4f03554d9559176a52691be9b1e8e3953e2470648ebbec6ced3f7f9242c7e9d45b51c11fd1627f1ca5eab01d5766463
-
SSDEEP
3072:qeygboCR59hs/sK2gZlQtoviLCfRZKnlopdoXzr67Y4zKaHGKjjaC8DSCvmnEnpJ:/ygEqwCtmi4ilocbTH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff5d5be91e7f5a5efb74571938cab5c73ff8f48c2b5db473ba288713e403cf83
Files
-
ff5d5be91e7f5a5efb74571938cab5c73ff8f48c2b5db473ba288713e403cf83.exe windows:4 windows x86 arch:x86
8dfab061af0291645706954960701093
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
TerminateProcess
ExitProcess
HeapAlloc
HeapReAlloc
HeapSize
GetCPInfo
GetACP
RaiseException
GetOEMCP
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStdHandle
HeapDestroy
VirtualFree
GetModuleHandleA
GetCommandLineA
WritePrivateProfileStringA
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetLocaleInfoW
LCMapStringA
LCMapStringW
SetStdHandle
LockResource
FindResourceA
LoadResource
GetStartupInfoA
RtlUnwind
GlobalGetAtomNameA
SetErrorMode
GetModuleFileNameA
GlobalAddAtomA
FindFirstFileA
GetFullPathNameA
GetVolumeInformationA
GetProcAddress
FindClose
LoadLibraryA
FreeLibrary
WriteFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
GetVersion
GetProcessVersion
WideCharToMultiByte
SetLastError
MultiByteToWideChar
lstrcpyA
CloseHandle
VirtualAlloc
GlobalFlags
lstrlenA
lstrcmpiA
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
MulDiv
InterlockedDecrement
lstrcatA
GlobalUnlock
GlobalFree
SetUnhandledExceptionFilter
HeapCreate
GetLastError
GetCurrentThreadId
CreateMutexA
CreateProcessA
GetVersionExA
GlobalAlloc
GetCurrentThread
lstrcmpA
GlobalDeleteAtom
GlobalLock
user32
IsDialogMessageA
SetWindowTextA
ShowWindow
GetDC
ReleaseDC
UpdateWindow
TabbedTextOutA
DrawTextA
GrayStringA
DestroyMenu
LoadCursorA
ReleaseCapture
GetDesktopWindow
WindowFromPoint
ClientToScreen
GetClassNameA
PtInRect
EndPaint
BeginPaint
CharUpperA
GetSysColorBrush
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
GetTopWindow
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
SystemParametersInfoA
SendDlgItemMessageA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
SetPropA
UnhookWindowsHookEx
GetForegroundWindow
GetPropA
RemovePropA
GetMessagePos
GetWindow
GetWindowRect
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
GetFocus
GetParent
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
SetWindowsHookExA
MessageBoxA
SetCursor
ShowOwnedPopups
PostQuitMessage
EnableWindow
LoadMenuA
GetSubMenu
ModifyMenuA
EnableMenuItem
GetCursorPos
SetForegroundWindow
TrackPopupMenu
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
LoadIconA
LoadStringA
FindWindowA
GetSysColor
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScreenToClient
MapWindowPoints
GetMenuItemCount
GetMenuItemID
GetMenu
PostMessageA
GetMessageTime
CallWindowProcA
GetLastActivePopup
UnregisterClassA
gdi32
CreateBitmap
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
SetTextColor
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
shell32
DragQueryFileA
Shell_NotifyIconA
DragFinish
comctl32
ImageList_Destroy
ord17
Sections
.text Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ