Static task
static1
Behavioral task
behavioral1
Sample
215d8cc5186c8f15016b6e59126e7206448d3c8e7c937fc3513d027b47304a81.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
215d8cc5186c8f15016b6e59126e7206448d3c8e7c937fc3513d027b47304a81.exe
Resource
win10v2004-20240508-en
General
-
Target
215d8cc5186c8f15016b6e59126e7206448d3c8e7c937fc3513d027b47304a81
-
Size
836KB
-
MD5
3aee146a4e63d6eebee79f4978e35cad
-
SHA1
922bd52f70d714e0256a77516a7585e737ca266b
-
SHA256
215d8cc5186c8f15016b6e59126e7206448d3c8e7c937fc3513d027b47304a81
-
SHA512
bd80a68c58c3e3b38ff1fea8d80ca171a8f4e548a11157f35de28ea2b4f91f77ad1b308980c251d5abbe6480c212bfe277c8846e99bda9f56370a229c5a8d314
-
SSDEEP
12288:jIfqyWuI/EhHXdWJA2s23/4ZrvVFtS6A5KrXd/Y609UHFVrNfOzBHyYZtI+LENSk:5MXdWkbdgCFVWZyAtu3T3ppb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 215d8cc5186c8f15016b6e59126e7206448d3c8e7c937fc3513d027b47304a81
Files
-
215d8cc5186c8f15016b6e59126e7206448d3c8e7c937fc3513d027b47304a81.exe windows:4 windows x86 arch:x86
f7f0f0266a9668f6f58efcebd306aec1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteExA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
DragAcceptFiles
SHGetFileInfoA
DragFinish
DragQueryFileA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
kernel32
GetStringTypeExA
GetFullPathNameA
FileTimeToLocalFileTime
GetVolumeInformationA
GetThreadLocale
MoveFileA
FileTimeToSystemTime
UnlockFile
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
TlsAlloc
LocalAlloc
GlobalHandle
GetCPInfo
GetOEMCP
RtlUnwind
TlsFree
GlobalFlags
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapAlloc
HeapReAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
SetEnvironmentVariableA
CreateThread
GetProcessVersion
SizeofResource
SetStdHandle
HeapFree
HeapSize
FatalAppExitA
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
RaiseException
SetFileTime
GlobalDeleteAtom
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
GetLocaleInfoW
CompareStringA
CompareStringW
SetFileAttributesA
GetCurrentProcess
GlobalSize
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
lstrcpyA
ExpandEnvironmentStringsA
GetVersionExA
lstrcmpA
FindFirstFileA
FindClose
GetLastError
GetPrivateProfileStringA
GetShortPathNameA
CreateProcessA
WritePrivateProfileStringA
FreeLibrary
SetErrorMode
LoadLibraryA
GetProcAddress
QueryPerformanceCounter
GetTickCount
InterlockedExchange
LockFile
FlushFileBuffers
lstrcpynA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetLastError
GetFileTime
GetFileAttributesA
GlobalAddAtomA
lstrcatA
GlobalGetAtomNameA
FindResourceA
GlobalFindAtomA
LockResource
LocalFree
LoadResource
FormatMessageA
SetThreadPriority
CreateEventA
SuspendThread
WideCharToMultiByte
ResumeThread
SetEvent
IsBadWritePtr
lstrcmpiA
GetSystemTimeAsFileTime
GetCurrentThreadId
DeviceIoControl
GetVersion
_lclose
_lopen
_lread
GetFileInformationByHandle
SetEndOfFile
GetFileSize
CreateDirectoryA
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
InitializeCriticalSection
InterlockedDecrement
GetDriveTypeA
MulDiv
GetPrivateProfileIntA
lstrlenA
GetModuleHandleA
GetDiskFreeSpaceA
FindNextFileA
GetTempPathA
GetModuleFileNameA
GetWindowsDirectoryA
OpenFile
DeleteFileA
RemoveDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
SetCurrentDirectoryA
GetSystemDirectoryA
GetCurrentThread
PeekNamedPipe
ReadFile
CreatePipe
CreateFileA
SetFilePointer
DuplicateHandle
Sleep
WriteFile
TerminateProcess
CloseHandle
WaitForSingleObject
GetExitCodeProcess
WinExec
GetPrivateProfileSectionA
WritePrivateProfileSectionA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ExitThread
GetACP
GetFileType
user32
GetScrollPos
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
EqualRect
ScreenToClient
SetFocus
MapWindowPoints
SendDlgItemMessageA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
LoadStringA
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
CharUpperA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
DestroyMenu
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
GetClassNameA
InsertMenuA
DeleteMenu
GetMenuStringA
GetSysColorBrush
GetDialogBaseUnits
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
SetScrollRange
GetScrollRange
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
SetWindowPos
MessageBoxA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
OemToCharA
CharToOemA
UnhookWindowsHookEx
AdjustWindowRect
PeekMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
SetRect
AdjustWindowRectEx
GetTopWindow
GetWindow
BringWindowToTop
wvsprintfA
WaitForInputIdle
LoadCursorA
LoadIconA
PostMessageA
GetFocus
FlashWindow
MessageBeep
PostThreadMessageA
CopyRect
RedrawWindow
PtInRect
GetDC
SetScrollPos
GetClassLongA
CreateWindowExA
RegisterWindowMessageA
ReleaseDC
ExitWindowsEx
GetWindowRect
GetParent
GetSystemMetrics
GetDesktopWindow
DdeGetLastError
DdeClientTransaction
DdeDisconnect
DdeConnect
DdeCreateStringHandleA
DdeAccessData
DdeUnaccessData
DdeUninitialize
DdeInitializeA
IsWindow
UpdateWindow
wsprintfA
GetSysColor
FillRect
SendMessageA
GetClientRect
InvalidateRect
EnableWindow
SetCursor
ShowOwnedPopups
GetNextDlgTabItem
UnregisterClassA
gdi32
GetTextExtentPoint32A
SetDIBitsToDevice
RealizePalette
SelectPalette
CreatePalette
GetDeviceCaps
Rectangle
CreatePen
GetTextColor
GetStockObject
GetBkColor
GetPaletteEntries
GetObjectA
DeleteObject
ExtTextOutA
SetBkColor
SetTextColor
SetTextAlign
DeleteDC
CreateCompatibleDC
CreateFontA
CreateBitmap
GetDCOrgEx
GetClipBox
StartDocA
SaveDC
RestoreDC
SelectObject
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
CreateFontIndirectA
OffsetClipRgn
MoveToEx
LineTo
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
GetTextMetricsA
SetColorAdjustment
PolyBezierTo
PolylineTo
CreateRectRgn
SelectClipPath
GetClipRgn
PlayMetaFileRecord
GetObjectType
ExtSelectClipRgn
PlayMetaFile
GetViewportExtEx
EnumMetaFile
ExtCreatePen
CreateHatchBrush
GetWindowExtEx
CreateDIBPatternBrushPt
PtVisible
CreatePatternBrush
TextOutA
Escape
RectVisible
CreateSolidBrush
StretchDIBits
CreateDCA
SetStretchBltMode
comdlg32
ChooseFontA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegCreateKeyExA
OpenThreadToken
RegCreateKeyA
RegOpenKeyExA
RegQueryValueA
GetTokenInformation
AdjustTokenPrivileges
LookupPrivilegeValueA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegQueryValueExA
AllocateAndInitializeSid
OpenServiceA
CreateServiceA
EqualSid
OpenProcessToken
CloseServiceHandle
DeleteService
FreeSid
OpenSCManagerA
RegEnumKeyA
RegOpenKeyA
comctl32
ord17
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
Sections
.text Size: 600KB - Virtual size: 599KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ