Static task
static1
Behavioral task
behavioral1
Sample
85d675e60af8dd4a7f9d2d7303f2a47cb4ca175e0bdd396ce3f0043225eb5d3a.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
85d675e60af8dd4a7f9d2d7303f2a47cb4ca175e0bdd396ce3f0043225eb5d3a.exe
Resource
win10v2004-20240508-en
General
-
Target
85d675e60af8dd4a7f9d2d7303f2a47cb4ca175e0bdd396ce3f0043225eb5d3a
-
Size
3.7MB
-
MD5
752bea9482251609ba955746c144a0d3
-
SHA1
785d1ff7f57fe0c19e3fa43a0ee97501dcee3964
-
SHA256
85d675e60af8dd4a7f9d2d7303f2a47cb4ca175e0bdd396ce3f0043225eb5d3a
-
SHA512
e6d12fa1342c2b14c3c3a6aa29162d4d6122fb4a64b338375c2a41bac6382fa1bb23ce8dfb30087b645ecd363c6741cb8a14715407f4b3fb5ed447149431e4a9
-
SSDEEP
24576:kHl4amZHlrHYQMRYHM3bH963PH4HwLNHrhGqMj7sl3tx15kmop5kGh4E70Waypo7:qWQQ23B63Le43f1O/D4NzgkVaaDEW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85d675e60af8dd4a7f9d2d7303f2a47cb4ca175e0bdd396ce3f0043225eb5d3a
Files
-
85d675e60af8dd4a7f9d2d7303f2a47cb4ca175e0bdd396ce3f0043225eb5d3a.exe windows:4 windows x86 arch:x86
eeaddcacf1f0685782e53926bb906e1a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Destroy
ImageList_AddMasked
ImageList_Add
kernel32
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileAttributesW
SetFileTime
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnlockFile
UnmapViewOfFile
VirtualAlloc
VirtualProtect
SetEndOfFile
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileStringW
LCMapStringA
GetStringTypeA
InterlockedIncrement
InterlockedDecrement
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
SetHandleCount
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetVersion
GetStartupInfoA
RtlUnwind
SearchPathW
ResumeThread
ResetEvent
ReadFile
RaiseException
QueryPerformanceCounter
OutputDebugStringW
OutputDebugStringA
OpenProcess
OpenFileMappingW
MultiByteToWideChar
MulDiv
MoveFileW
MapViewOfFile
lstrlenW
lstrcpynW
lstrcmpW
lstrcmpiW
lstrcmpA
LockResource
LockFile
LocalReAlloc
LocalFree
LocalFileTimeToFileTime
LocalAlloc
LoadResource
LoadLibraryExW
LoadLibraryExA
LCMapStringW
IsValidCodePage
IsProcessorFeaturePresent
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalGetAtomNameW
GlobalFree
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVolumeInformationW
GetVersionExW
GetUserDefaultLangID
GetTimeZoneInformation
GetTimeFormatW
GetThreadLocale
GetTempPathW
GetTempFileNameW
GetSystemInfo
GetSystemDirectoryW
GetStringTypeW
GetStringTypeExW
GetStdHandle
GetStartupInfoW
GetShortPathNameW
GetProfileIntW
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileSectionNamesW
GetPrivateProfileIntW
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLocalTime
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileAttributesW
GetFileAttributesExW
GetEnvironmentStringsW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetCPInfo
GetConsoleMode
GetConsoleCP
GetCommandLineW
GetACP
FreeResource
FreeLibraryAndExitThread
FreeEnvironmentStringsW
FormatMessageW
FlushFileBuffers
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
ExitProcess
EnumResourceTypesW
EnumResourceNamesW
EnumResourceLanguagesW
DuplicateHandle
DeleteFileW
DeleteCriticalSection
CreateThread
CreateFileW
CreateFileMappingW
CreateEventW
CreateDirectoryW
GetSystemTimeAsFileTime
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
FreeLibrary
VirtualQuery
user32
RemoveMenu
RemovePropW
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageTimeoutW
SendMessageW
SetActiveWindow
SetCapture
SetClipboardData
SetCursorPos
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenu
SetMenuDefaultItem
SetMenuItemBitmaps
SetMenuItemInfoW
SetParent
SetPropW
SetRectEmpty
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowContextHelpId
SetWindowLongA
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowCaret
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoW
TabbedTextOutW
ToUnicodeEx
TrackPopupMenu
TrackPopupMenuEx
TranslateAcceleratorW
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassW
UnregisterHotKey
UpdateWindow
ValidateRect
VkKeyScanExW
WaitMessage
WinHelpW
wsprintfW
MessageBeep
MapWindowPoints
MapVirtualKeyW
MapVirtualKeyExW
MapDialogRect
LookupIconIdFromDirectoryEx
LockWindowUpdate
LoadMenuW
LoadMenuIndirectW
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
LoadAcceleratorsW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsRectEmpty
IsIconic
IsDlgButtonChecked
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
IsCharLowerW
InvertRect
InvalidateRgn
InvalidateRect
IntersectRect
InsertMenuW
InsertMenuItemW
InflateRect
HideCaret
GrayStringW
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowRgn
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetUserObjectInformationW
GetTopWindow
GetTabbedTextExtentW
ReleaseDC
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetKeyNameTextW
GetKeyboardState
GetKeyboardLayoutList
GetKeyboardLayout
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItemTextW
GetDlgCtrlID
GetDialogBaseUnits
GetDesktopWindow
GetDCEx
GetCursorPos
GetClipboardData
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowW
FindWindowExW
FillRect
ReuseDDElParam
UnpackDDElParam
EqualRect
EnumWindows
EnumDesktopWindows
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
LoadStringW
BeginDeferWindowPos
BeginPaint
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawStateW
DrawMenuBar
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyAcceleratorTable
DeleteMenu
ReleaseCapture
RegisterWindowMessageW
RegisterHotKey
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
BringWindowToTop
CallNextHookEx
CallWindowProcW
CharNextW
CharUpperW
CheckDlgButton
CheckMenuItem
CheckMenuRadioItem
CheckRadioButton
ClientToScreen
CloseClipboard
CloseDesktop
CopyAcceleratorTableW
CopyIcon
CopyRect
CreateDialogIndirectParamW
CreateIconFromResourceEx
CreateIconIndirect
CreateMenu
CreatePopupMenu
CreateWindowExW
DefFrameProcW
DefWindowProcW
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
OpenInputDesktop
OpenClipboard
OffsetRect
MoveWindow
GetTabbedTextExtentA
MessageBoxW
IsMenu
gdi32
Ellipse
EndDoc
EndPage
EnumFontFamiliesExW
Escape
ExcludeClipRect
ExtCreatePen
ExtCreateRegion
ExtSelectClipRgn
ExtTextOutW
FillRgn
FrameRgn
GdiFlush
GetBitmapBits
GetBkColor
GetBkMode
GetCharWidthW
GetClipBox
GetClipRgn
GetCurrentObject
GetCurrentPositionEx
GetDeviceCaps
GetDIBits
GetMapMode
GetNearestColor
GetObjectA
GetObjectW
GetPixel
GetPolyFillMode
GetRegionData
GetRgnBox
GetROP2
GetStockObject
GetStretchBltMode
GetTextAlign
GetTextColor
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextFaceW
DPtoLP
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
IntersectClipRect
LineTo
LPtoDP
MoveToEx
OffsetRgn
OffsetViewportOrgEx
PatBlt
PolyBezierTo
Polygon
Polyline
PtInRegion
PtVisible
RealizePalette
Rectangle
RectVisible
RestoreDC
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetBkColor
SetBkMode
SetGraphicsMode
SetMapMode
SetPixel
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetWorldTransform
StartDocW
StartPage
StretchBlt
StretchDIBits
StrokeAndFillPath
StrokePath
DeleteObject
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreatePolygonRgn
CreatePatternBrush
CreateFontIndirectW
CreateEllipticRgn
CreateDIBSection
CreateDIBitmap
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CombineRgn
GetTextMetricsW
CloseFigure
winspool.drv
DocumentPropertiesW
GetJobW
advapi32
MapGenericMask
OpenThreadToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumKeyW
RegEnumValueW
SetFileSecurityW
RevertToSelf
RegSetValueW
RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegOpenKeyExW
IsTextUnicode
shell32
DragQueryFileW
ExtractIconW
Shell_NotifyIconW
ShellExecuteExW
ShellExecuteW
DragQueryPoint
ole32
RevokeDragDrop
RegisterDragDrop
PropVariantClear
OleUninitialize
OleTranslateAccelerator
OleRun
OleIsCurrentClipboard
OleInitialize
OleFlushClipboard
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
CreateStreamOnHGlobal
StgCreateDocfileOnILockBytes
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterMessageFilter
CoLockObjectExternal
CoInitialize
CoGetClassObject
CoFreeUnusedLibraries
CoDisconnectObject
CoCreateInstance
CoCreateGuid
CLSIDFromString
StgOpenStorageOnILockBytes
StringFromCLSID
CreateILockBytesOnHGlobal
shlwapi
PathRemoveFileSpecW
PathRemoveExtensionW
PathIsUNCW
PathIsDirectoryW
PathFindFileNameW
StrCmpIW
PathStripToRootW
PathFindExtensionW
PathFileExistsW
Sections
.text Size: 768KB - Virtual size: 767KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 796KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.roll9 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE