Static task
static1
Behavioral task
behavioral1
Sample
f16dd264d5a19692ddcd938cc26d3991413ee5693dac1db98bcdee3891210e57.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f16dd264d5a19692ddcd938cc26d3991413ee5693dac1db98bcdee3891210e57.exe
Resource
win10v2004-20240508-en
General
-
Target
f16dd264d5a19692ddcd938cc26d3991413ee5693dac1db98bcdee3891210e57
-
Size
5.3MB
-
MD5
dc488343902f9412ef013759834d4baf
-
SHA1
fcf4a4bc96c499a63eab0a7df68afeb65fef9bb7
-
SHA256
f16dd264d5a19692ddcd938cc26d3991413ee5693dac1db98bcdee3891210e57
-
SHA512
faeafca27a599230faa5ab3ab1e251bb39ed0b9ad3db27a5758569d265c9a68ff2c9b8af2776688fd2087c086bbe0ed09a9ffd77d08a6682c1234aca745caefb
-
SSDEEP
49152:fFjLjeUW036xOSh53+lzCNr+om8e+75TQUvDEBEeF8F:fRLLwD+Wr+bTsUIEmeaF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f16dd264d5a19692ddcd938cc26d3991413ee5693dac1db98bcdee3891210e57
Files
-
f16dd264d5a19692ddcd938cc26d3991413ee5693dac1db98bcdee3891210e57.exe windows:4 windows x86 arch:x86
6897dd7c402b72f7ac12ee6bbbea04a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
GetAtomNameA
VirtualProtect
GetProfileIntA
GetCPInfo
GetOEMCP
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetThreadLocale
GetFileTime
GetTempFileNameA
GetFullPathNameA
GetDiskFreeSpaceA
GetHandleInformation
DuplicateHandle
GetCurrentProcess
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
GetVolumeInformationA
GetShortPathNameA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
FindResourceExA
RtlUnwind
ExitProcess
HeapValidate
IsBadReadPtr
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
RaiseException
ExitThread
DebugBreak
GetStdHandle
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
FatalAppExitA
SetConsoleCtrlHandler
LoadLibraryW
GetACP
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
GetConsoleCP
GetConsoleMode
GetTimeFormatA
GetDateFormatA
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
SetEnvironmentVariableA
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
OpenEventA
FileTimeToLocalFileTime
OpenFileMappingA
GlobalFlags
InterlockedDecrement
GetModuleFileNameW
CreateEventA
SetEvent
lstrcmpA
GetCurrentThread
GetLocaleInfoA
ConvertDefaultLocale
EnumResourceLanguagesA
FindNextFileA
FindFirstFileA
FindClose
MulDiv
GlobalSize
GlobalAlloc
LocalFree
SetLastError
LoadLibraryA
lstrcmpW
FreeLibrary
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
SuspendThread
ResumeThread
GetThreadPriority
SetThreadPriority
GlobalLock
GlobalUnlock
GlobalFree
GetLocalTime
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetFileInformationByHandle
FileTimeToSystemTime
SetFileTime
GetFileAttributesA
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFilePointer
lstrcmpiA
lstrcmpiW
GetStringTypeExA
GetStringTypeExW
lstrlenW
CompareStringA
CompareStringW
GetEnvironmentVariableA
InterlockedExchange
GetVersion
GetEnvironmentVariableW
WinExec
CreateDirectoryA
GetFileSize
ReadFile
SetFileAttributesA
RemoveDirectoryA
Beep
GetTickCount
CreateThread
GetTempPathA
MoveFileExA
CopyFileA
GetCurrentProcessId
OpenProcess
CreateProcessA
lstrcpyA
MultiByteToWideChar
SetCurrentDirectoryA
lstrlenA
CreateFileA
WriteFile
FreeResource
GetCommandLineW
WaitForSingleObject
CloseHandle
DeleteFileA
GetCurrentDirectoryA
GetModuleFileNameA
GetLogicalDrives
GetDriveTypeA
GetModuleHandleA
GetProcAddress
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
FormatMessageA
GetLastError
user32
DrawStateA
DrawEdge
DrawFrameControl
DrawFocusRect
DrawTextA
DrawTextExA
GetTabbedTextExtentA
GrayStringA
ScrollDC
CreateMenu
CreatePopupMenu
DeleteMenu
CheckMenuItem
EnableMenuItem
SetMenuDefaultItem
GetMenuDefaultItem
GetMenuItemInfoA
SetMenuItemInfoA
InsertMenuItemA
ModifyMenuA
LoadMenuIndirectA
SetMenuContextHelpId
GetMenuContextHelpId
CheckMenuRadioItem
GetCursorPos
GetKeyNameTextA
MapVirtualKeyA
TranslateMessage
GetMessageA
GetWindowThreadProcessId
WaitMessage
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
ReuseDDElParam
UnpackDDElParam
SetRectEmpty
GetDialogBaseUnits
GetAsyncKeyState
GetClipboardFormatNameA
CopyAcceleratorTableA
PtInRect
CharNextA
MessageBeep
UnregisterClassA
RegisterClipboardFormatA
InSendMessage
IsClipboardFormatAvailable
IsRectEmpty
SetRect
InflateRect
UnionRect
SubtractRect
DispatchMessageW
GetMessageW
IsWindowUnicode
MsgWaitForMultipleObjects
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
GetMenuCheckMarkDimensions
LoadBitmapA
SetMenuItemBitmaps
RegisterWindowMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
SendDlgItemMessageA
DispatchMessageA
SetFocus
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetKeyState
GetDlgCtrlID
SetWindowsHookExA
GetClassLongA
GetClassNameA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
TabbedTextOutA
OpenIcon
CloseWindow
LoadIconA
LoadCursorA
PostThreadMessageA
SetScrollRange
DrawIcon
SetScrollPos
GetScrollPos
MapDialogRect
GetWindowContextHelpId
SetWindowContextHelpId
SendNotifyMessageA
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
GetParent
IsChild
GetLastActivePopup
GetWindow
GetTopWindow
FindWindowExA
FindWindowA
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExA
DlgDirSelectExA
DlgDirListComboBoxA
DlgDirListA
GetFocus
SetCapture
GetCapture
KillTimer
SetTimer
DrawCaption
DrawAnimatedRects
EnableScrollBar
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
ValidateRect
InvalidateRgn
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
EndPaint
BeginPaint
ScreenToClient
ClientToScreen
MapWindowPoints
GetClientRect
GetWindowRect
BringWindowToTop
GetWindowRgn
ArrangeIconicWindows
IsZoomed
IsIconic
HiliteMenuItem
GetSystemMenu
DrawMenuBar
SetMenu
GetMenu
DragDetect
EndDialog
GetActiveWindow
SetActiveWindow
EnableWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
SetWindowPos
SetWindowRgn
ReleaseDC
GetWindowDC
LoadImageA
DestroyMenu
DestroyCursor
DestroyIcon
SetCursor
PostMessageA
TrackPopupMenuEx
SendMessageA
GetSubMenu
GetSysColor
GetDC
CreateIconIndirect
GetIconInfo
LoadMenuA
RedrawWindow
SetWindowLongA
GetWindowLongA
IsWindow
AdjustWindowRectEx
CreateIconFromResource
wsprintfA
GetSystemMetrics
CallNextHookEx
PostQuitMessage
PeekMessageA
CharLowerW
CharLowerA
CharUpperW
CharUpperA
GetDesktopWindow
InvertRect
FrameRect
FillRect
ExcludeUpdateRgn
WindowFromDC
GetSysColorBrush
RemoveMenu
IsMenu
GetMenuItemCount
GetMenuState
GetMenuStringA
AppendMenuA
InsertMenuA
GetScrollRange
GetMenuItemID
WinHelpA
gdi32
DPtoLP
LPtoDP
FillRgn
FrameRgn
InvertRgn
PaintRgn
PtVisible
RectVisible
GetCurrentPositionEx
Arc
Polyline
Chord
Ellipse
Pie
Polygon
PolyPolygon
Rectangle
RoundRect
PatBlt
StretchBlt
FloodFill
ExtFloodFill
TextOutA
GetTextExtentPoint32A
GetTextAlign
GetTextFaceA
GetTextMetricsA
GetTextCharacterExtra
GetCharWidthA
GetFontLanguageInfo
GetCharacterPlacementA
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCA
GetOutlineTextMetricsA
GetCharABCWidthsA
GetFontData
GetKerningPairsA
CloseMetaFile
CreateEnhMetaFileA
CloseEnhMetaFile
ExtTextOutA
GetDCOrgEx
GetClipBox
CopyMetaFileA
CreateDCA
GetDeviceCaps
UnrealizeObject
GetViewportExtEx
CreatePen
GetWindowExtEx
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateBrushIndirect
CreatePatternBrush
CreateDIBPatternBrushPt
CreateFontIndirectA
CreateFontA
CreateBitmapIndirect
SetBitmapBits
GetBitmapBits
SetBitmapDimensionEx
GetBitmapDimensionEx
CreateDiscardableBitmap
CreatePalette
CreateHalftonePalette
GetPaletteEntries
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
CreateRectRgnIndirect
DeleteObject
SelectObject
CombineRgn
CreateRectRgn
GetDIBits
GetObjectA
GetStockObject
DeleteDC
SetTextColor
BitBlt
SetBkColor
CreateCompatibleDC
CreateBitmap
SetPixel
GetPixel
CreateCompatibleBitmap
GetViewportOrgEx
GetWorldTransform
GetGraphicsMode
GetMapMode
GetTextColor
GetStretchBltMode
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
CreatePenIndirect
GetWindowOrgEx
SetRectRgn
GetROP2
GetPolyFillMode
GetBkMode
GetBkColor
UpdateColors
RealizePalette
GetNearestColor
EnumObjects
SetBrushOrgEx
GetBrushOrgEx
CreateICA
GetObjectType
CreateMetaFileA
DeleteMetaFile
EnumFontFamiliesExA
StretchDIBits
PlayMetaFile
EnumMetaFile
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
RestoreDC
SaveDC
EqualRgn
OffsetRgn
GetRgnBox
PtInRegion
GetGlyphOutlineA
StartDocA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
MaskBlt
PlgBlt
SetPixelV
AngleArc
GetArcDirection
PolyPolyline
GetColorAdjustment
GetCurrentObject
PolyBezier
DrawEscape
ExtEscape
RectInRegion
GetCharABCWidthsFloatA
GetCharWidthFloatA
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetMiterLimit
GetPath
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
GdiComment
PlayEnhMetaFile
advapi32
RegCloseKey
IsTextUnicode
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyExA
RegDeleteValueA
SetThreadToken
RevertToSelf
OpenThreadToken
RegOpenKeyA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegQueryValueExA
RegSetValueA
shell32
SHGetFileInfoA
CommandLineToArgvW
SHGetSpecialFolderPathA
DragAcceptFiles
DragFinish
DragQueryFileA
ShellExecuteExA
ExtractIconA
ole32
OleFlushClipboard
CreateItemMoniker
CreateGenericComposite
CreateFileMoniker
GetClassFile
CoGetMalloc
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
OleLockRunning
OleSetContainedObject
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateFromFile
OleCreateLinkToFile
OleCreate
OleLoad
OleSave
OleSetClipboard
GetHGlobalFromILockBytes
OleGetIconOfClass
WriteClassStm
OleSaveToStream
OleIsRunning
OleQueryCreateFromData
OleQueryLinkFromData
OleGetClipboard
OleSetMenuDescriptor
DoDragDrop
OleRegEnumVerbs
OleRegGetMiscStatus
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CreateOleAdviseHolder
CreateDataAdviseHolder
OleTranslateAccelerator
IsAccelerator
GetRunningObjectTable
CoLockObjectExternal
CoReleaseMarshalData
CoMarshalInterface
CoUnmarshalInterface
OleIsCurrentClipboard
CoInitialize
CoCreateInstance
CoUninitialize
CoRevokeClassObject
CoRegisterClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleRun
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
StringFromGUID2
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
CreateStreamOnHGlobal
ReleaseStgMedium
CoTaskMemAlloc
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CreateBindCtx
OleDuplicateData
StgIsStorageILockBytes
comctl32
_TrackMouseEvent
shlwapi
PathRemoveExtensionA
PathFindFileNameA
PathIsUNCA
PathFindExtensionA
PathStripToRootA
oledlg
ord8
ord3
ord7
ord6
ord5
ord9
ord4
urlmon
URLDownloadToFileA
winmm
PlaySoundA
wininet
InternetCloseHandle
HttpQueryInfoA
InternetOpenUrlA
DeleteUrlCacheEntry
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetSetOptionA
InternetReadFile
ws2_32
sendto
recvfrom
socket
select
WSAGetLastError
connect
getpeername
recv
gethostbyname
closesocket
htonl
inet_addr
htons
accept
ntohs
inet_ntoa
WSASetLastError
WSAStartup
WSACleanup
send
getsockname
setsockopt
getsockopt
bind
ioctlsocket
listen
shutdown
WSAAsyncSelect
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
winspool.drv
GetJobA
ClosePrinter
DocumentPropertiesA
OpenPrinterA
comdlg32
GetFileTitleA
oleaut32
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SysAllocString
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayRedim
SafeArrayCreate
VariantCopy
SysReAllocStringLen
VarCyFromStr
VariantClear
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VarBstrFromDec
VarDecFromStr
VarDateFromStr
VarBstrFromDate
OleCreateFontIndirect
SafeArrayCreateVector
LoadTypeLi
DosDateTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate
VarDateFromUdate
SystemTimeToVariantTime
VarBstrFromCy
Sections
.textbss Size: - Virtual size: 1001KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 980KB - Virtual size: 977KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.enigma1 Size: 116KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE