Static task
static1
Behavioral task
behavioral1
Sample
07f9569ec82145611ff93be819142bcea6ad639b110cd8843ac05fce91b72bdc.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
07f9569ec82145611ff93be819142bcea6ad639b110cd8843ac05fce91b72bdc.exe
Resource
win10v2004-20240426-en
General
-
Target
07f9569ec82145611ff93be819142bcea6ad639b110cd8843ac05fce91b72bdc.exe
-
Size
570KB
-
MD5
443be3fb1a096e49c717b9e56fede9ee
-
SHA1
a821fde0ec2f492dc8c83c0ef7bcb18f2db14164
-
SHA256
07f9569ec82145611ff93be819142bcea6ad639b110cd8843ac05fce91b72bdc
-
SHA512
3fe604535dd76f3225d1fe75fcdec9ad7dc606a77edab04a1d2704b1302fb05eac627563766fe98aaa337cb380223ef730b548c213cd1eee01ff002abb465f45
-
SSDEEP
12288:0F4vFvnvPc+szmweVkmz7X/T/qamirYx9c:0gFvnvPu5ekgbCtiO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07f9569ec82145611ff93be819142bcea6ad639b110cd8843ac05fce91b72bdc.exe
Files
-
07f9569ec82145611ff93be819142bcea6ad639b110cd8843ac05fce91b72bdc.exe.exe windows:5 windows x86 arch:x86
179877c87274179b7d3df7ba6e714baa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetSystemPaletteUse
SetTextColor
GetPolyFillMode
GetMetaRgn
GetNearestPaletteIndex
SetTextAlign
GetRandomRgn
SetPixel
GetStretchBltMode
GetObjectType
GetTextAlign
GetTextCharacterExtra
UpdateColors
SetTextJustification
GetPixelFormat
GetMapMode
GetTextColor
GetTextCharset
GetFontLanguageInfo
GetNearestColor
GetTextCharsetInfo
GetFontUnicodeRanges
SetSystemPaletteUse
user32
IsWindowEnabled
GetDialogBaseUnits
GetMenuCheckMarkDimensions
EndPaint
GetForegroundWindow
DrawTextA
PostMessageA
GetMenuItemCount
SendMessageA
LoadIconA
GetScrollPos
MoveWindow
EnableWindow
GetDlgItem
SetWindowTextA
WindowFromDC
GetMenuItemID
GetWindowDC
SetDlgItemTextA
BeginPaint
GetMenuState
IsWindowUnicode
GetQueueStatus
GetInputState
ShowWindow
EndDialog
GetMenuContextHelpId
GetDC
GetPropA
GetKeyboardType
GetWindowContextHelpId
RemovePropA
GetMenu
CallWindowProcA
GetCursor
CheckDlgButton
kernel32
SetEnvironmentVariableW
SetEndOfFile
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
HeapSize
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameA
CreateFileW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
WriteConsoleW
SetStdHandle
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
FindFirstFileExW
FindClose
LoadLibraryExW
FreeLibrary
SetConsoleCtrlHandler
CreateSemaphoreW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
CloseHandle
GetVersion
GlobalHandle
GlobalFlags
IsProcessorFeaturePresent
WriteFile
LoadResource
GetModuleHandleA
LockResource
QueryPerformanceCounter
MoveFileA
GetLastError
GetCurrentProcess
GetTickCount
GlobalSize
FlushFileBuffers
GetCurrentProcessId
GetStdHandle
GlobalAlloc
LocalFlags
SizeofResource
GetFileType
GetCurrentThreadId
GetProcessHeap
DeleteFileA
IsDebuggerPresent
FindResourceA
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
MultiByteToWideChar
ReadFile
GetFullPathNameW
DeleteFileW
GetLocalTime
DuplicateHandle
CreateProcessA
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
WideCharToMultiByte
HeapReAlloc
GetCommandLineA
GetModuleFileNameW
SetLastError
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
DeleteCriticalSection
GetStartupInfoW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
RaiseException
GetTimeZoneInformation
FatalAppExitA
SetFilePointerEx
ReadConsoleW
GetFileAttributesExW
WaitForSingleObject
GetExitCodeProcess
CreatePipe
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
SetEnvironmentVariableA
Sections
.text Size: 508KB - Virtual size: 507KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE