Static task
static1
Behavioral task
behavioral1
Sample
b187c5a1450f1cd356c98973d8f5447a66ca4d3fba9a2452fbd3467cf108ff69.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b187c5a1450f1cd356c98973d8f5447a66ca4d3fba9a2452fbd3467cf108ff69.exe
Resource
win10v2004-20240611-en
General
-
Target
b187c5a1450f1cd356c98973d8f5447a66ca4d3fba9a2452fbd3467cf108ff69
-
Size
1.2MB
-
MD5
8e6449ffc8d525909adc506f97eec4ef
-
SHA1
118bdbcd547d93d56308d482f87f358be39ad776
-
SHA256
b187c5a1450f1cd356c98973d8f5447a66ca4d3fba9a2452fbd3467cf108ff69
-
SHA512
3c9e3acbd0450b802b74a291786310ffe6421f6764729fde39df2e30a0c3075317c7d5dca0455a0f5585952412b3c04cc70e22e42ed3ef5ea63654c5f6a34276
-
SSDEEP
12288:ejUJ0ixiYuFAnyKKzqj9uLucMDiPDmcMdsx/3Ot3s8fjVOJ/i6h62G0Go01x4Coa:eQvxiYuFA2ej9ekiP9xA8M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b187c5a1450f1cd356c98973d8f5447a66ca4d3fba9a2452fbd3467cf108ff69
Files
-
b187c5a1450f1cd356c98973d8f5447a66ca4d3fba9a2452fbd3467cf108ff69.exe windows:5 windows x86 arch:x86
97909cfe68ded63282594c22591be28a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
AppendMenuA
CreatePopupMenu
GetSystemMetrics
GetDlgItemTextA
MessageBoxIndirectA
DispatchMessageA
PeekMessageA
CreateDialogParamA
DestroyWindow
PostQuitMessage
SetForegroundWindow
SendMessageA
GetKeyState
ScreenToClient
CharPrevA
wvsprintfA
DestroyIcon
CallNextHookEx
SetWindowsHookExA
MessageBoxW
GetParent
GetWindow
wsprintfA
SetDlgItemTextA
EndDialog
ShowWindow
GetClientRect
GetSystemMenu
EnableMenuItem
GetDesktopWindow
LoadIconA
SetTimer
GetWindowDC
DrawTextA
ReleaseDC
SetWindowPos
GetWindowRect
DialogBoxParamA
GetDlgItem
SetWindowTextW
SetWindowTextA
UnhookWindowsHookEx
KillTimer
GetGUIThreadInfo
MsgWaitForMultipleObjectsEx
GetInputState
TrackPopupMenu
BeginDeferWindowPos
GetPriorityClipboardFormat
GetWindowTextA
GetMenuDefaultItem
GetUserObjectInformationW
MapVirtualKeyA
GetMessageExtraInfo
HiliteMenuItem
gdi32
GetTextMetricsA
CreateCompatibleBitmap
GetKerningPairsA
CombineRgn
GetPath
CloseEnhMetaFile
SetDIBColorTable
GetRgnBox
RectVisible
BitBlt
GetDCBrushColor
GetNearestPaletteIndex
GetBkMode
EnumICMProfilesA
GetTextFaceW
SetDCBrushColor
SetPixelFormat
GetSystemPaletteUse
WidenPath
GetTextCharset
GetTextFaceA
DrawEscape
SetArcDirection
SetPixel
kernel32
GlobalLock
CreateProcessA
GetTempFileNameA
lstrcatA
GetSystemDirectoryA
lstrcmpiA
GlobalFree
GlobalAlloc
GetExitCodeProcess
LoadLibraryExA
FreeLibrary
WritePrivateProfileStringA
GetPrivateProfileStringA
MulDiv
GetWindowsDirectoryA
SystemTimeToTzSpecificLocalTime
GetLocaleInfoW
CompareStringW
GlobalUnlock
SetStdHandle
QueryPerformanceCounter
LockResource
LoadResource
SizeofResource
FindResourceExA
CreateMutexA
FlushFileBuffers
LockFileEx
UnlockFile
GetFileInformationByHandle
SetThreadAffinityMask
GetCurrentThread
GetProcessAffinityMask
RemoveDirectoryW
FindFirstFileW
FindNextFileW
GetFullPathNameW
GetEnvironmentVariableW
GetDiskFreeSpaceA
lstrcpynA
SetErrorMode
CopyFileA
GetTickCount
Sleep
MoveFileA
GetFullPathNameA
GetShortPathNameA
SearchPathA
CompareFileTime
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
SetFileTime
UpdateResourceW
GetWriteWatch
RemoveVectoredExceptionHandler
SetInformationJobObject
GetProcessHeap
MapUserPhysicalPagesScatter
RequestWakeupLatency
SetHandleInformation
RtlUnwind
CloseHandle
RaiseException
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetExitCodeThread
ReadFile
WaitForSingleObject
SetUnhandledExceptionFilter
GetEnvironmentVariableA
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateEventA
GetLastError
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
SetEndOfFile
CreateThread
SetFilePointer
GetFileSize
CreateFileW
ResetEvent
WaitForMultipleObjects
SetEvent
VirtualFree
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
GetDriveTypeA
CreateFileA
WriteFile
GetVersionExA
GetCommandLineW
GetModuleFileNameA
SetCurrentDirectoryA
GetTempPathA
FindFirstFileA
lstrcmpA
FindNextFileA
FindClose
RemoveDirectoryA
lstrlenW
DeleteFileW
DeleteFileA
SetFileAttributesW
SetFileAttributesA
CreateDirectoryW
CreateDirectoryA
GetFileAttributesW
GetFileAttributesA
ExpandEnvironmentStringsA
AreFileApisANSI
WideCharToMultiByte
MultiByteToWideChar
FormatMessageA
lstrlenA
lstrcpyA
LocalFree
GetCurrentThreadId
LoadLibraryA
GetProcAddress
GetLocalTime
SystemTimeToFileTime
GetModuleHandleA
GetCommModemStatus
GetSystemInfo
VirtualQuery
SetEnvironmentVariableW
SetEnvironmentVariableA
HeapSize
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
TlsFree
FatalAppExitA
GetCurrentProcessId
ExitThread
VirtualProtect
OutputDebugStringA
FileTimeToSystemTime
GetTimeZoneInformation
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
SetThreadPriority
ReleaseMutex
WaitForSingleObjectEx
GetModuleFileNameW
SetCurrentDirectoryW
GetCurrentDirectoryW
MoveFileExW
GetFileAttributesExW
Sections
.text Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 347KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ