Static task
static1
Behavioral task
behavioral1
Sample
bbe84960ac34c42337ddd1fe5b46dd76a07d9ced242267ac1ab4d5b7490f03d1.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
bbe84960ac34c42337ddd1fe5b46dd76a07d9ced242267ac1ab4d5b7490f03d1.exe
Resource
win10v2004-20240508-en
General
-
Target
bbe84960ac34c42337ddd1fe5b46dd76a07d9ced242267ac1ab4d5b7490f03d1
-
Size
1.9MB
-
MD5
dc101b8a55b402d5c0adf35ff92d5bd1
-
SHA1
e3960ab35c0f675a8af7d3ac6d81b7d88e902c3b
-
SHA256
bbe84960ac34c42337ddd1fe5b46dd76a07d9ced242267ac1ab4d5b7490f03d1
-
SHA512
d0534c75ae27b76211a016c2fb8600cd2faf366596a181fc7597d827548ba71dc2f674f050a3c8f6bdee67f9fcdbb4c92e19eb8428425f58930a6c4aa6965fda
-
SSDEEP
49152:Uaw6ceu86FJ/hh5QSEOVm4fMjCMREd3Kj5rXZ0D:Uawdeu86FJ/hh5QSEWrsj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbe84960ac34c42337ddd1fe5b46dd76a07d9ced242267ac1ab4d5b7490f03d1
Files
-
bbe84960ac34c42337ddd1fe5b46dd76a07d9ced242267ac1ab4d5b7490f03d1.exe windows:4 windows x86 arch:x86
44156361e1dabd91295ca2b3f0234189
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileIntA
WritePrivateProfileStringA
GetProcessVersion
SizeofResource
GetCPInfo
GetOEMCP
RtlUnwind
GetTimeZoneInformation
GetSystemTime
RaiseException
GetStartupInfoA
ExitProcess
TerminateProcess
ExitThread
HeapReAlloc
HeapSize
GetACP
FatalAppExitA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetConsoleCtrlHandler
SetStdHandle
TlsGetValue
CompareStringW
SetEnvironmentVariableA
SleepEx
GetExitCodeThread
ResetEvent
SetThreadLocale
OutputDebugStringA
LoadLibraryExW
UnmapViewOfFile
GetWindowsDirectoryW
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GlobalFlags
GlobalSize
SetErrorMode
WaitForMultipleObjects
ReleaseMutex
ReleaseSemaphore
CreateSemaphoreA
SetLastError
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
DefineDosDeviceA
GetDiskFreeSpaceExA
SetVolumeLabelA
QueryDosDeviceW
GetLogicalDrives
GetDriveTypeW
GetDriveTypeA
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
EnumResourceLanguagesA
EnumResourceTypesA
EnumResourceNamesA
LoadLibraryExA
QueryPerformanceCounter
VirtualQueryEx
InterlockedExchangeAdd
InterlockedExchange
InterlockedCompareExchange
CreateProcessA
ReadProcessMemory
GetThreadPriority
GetPriorityClass
SetPriorityClass
TerminateThread
LoadLibraryW
MoveFileW
GetEnvironmentVariableW
GetTempPathW
GetTempPathA
GetSystemDirectoryW
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
FormatMessageW
FindResourceExA
GlobalFree
LockResource
FindResourceA
LoadResource
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
GlobalAlloc
GlobalDeleteAtom
GetCurrentThread
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
lstrlenW
GlobalLock
GlobalUnlock
GetShortPathNameA
lstrcmpiA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
lstrcpyA
DuplicateHandle
FormatMessageA
lstrlenA
InterlockedDecrement
InterlockedIncrement
UnlockFile
LockFile
SetEndOfFile
AllocConsole
GetStdHandle
WriteConsoleA
FreeConsole
OutputDebugStringW
SetFilePointer
GetPrivateProfileStringA
GetProfileStringA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCommandLineA
CreateMutexA
GetVersion
GetUserDefaultLangID
GetSystemDefaultLangID
FreeLibrary
MultiByteToWideChar
MulDiv
GetExitCodeProcess
GetProcessTimes
FileTimeToSystemTime
CopyFileW
GetDiskFreeSpaceExW
GetFileTime
SetFileTime
GetProcessHeap
HeapAlloc
HeapFree
VirtualQuery
CreateProcessW
WriteFile
CreateFileW
GetFileSize
GetComputerNameA
GetComputerNameW
FlushFileBuffers
CreateDirectoryA
GetFileAttributesExA
GetFileAttributesExW
GetVolumeInformationW
QueryDosDeviceA
DeviceIoControl
ReadFile
SetFileAttributesW
RemoveDirectoryW
PulseEvent
MoveFileExW
DeleteFileW
SetFileAttributesA
lstrcmpA
RemoveDirectoryA
MoveFileExA
GetSystemInfo
FindFirstFileA
FindNextFileA
LoadLibraryA
LocalFree
OpenProcess
GetLastError
GetCurrentProcess
CreateThread
GetSystemDirectoryA
GetModuleHandleW
GetFileInformationByHandle
GetModuleHandleA
GetProcAddress
GetCurrentThreadId
GetTickCount
GetFileAttributesW
CreateDirectoryW
GetLocalTime
GetCurrentProcessId
FindFirstFileW
lstrcmpW
FindNextFileW
FindClose
CreateFileA
CloseHandle
CopyFileA
GetLocaleInfoW
GetFileAttributesA
DeleteFileA
Sleep
MoveFileA
GetCurrentDirectoryW
GetModuleFileNameW
GetCurrentDirectoryA
CompareStringA
GetModuleFileNameA
user32
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
CloseDesktop
SetThreadDesktop
GetThreadDesktop
OpenDesktopA
OpenInputDesktop
GetUserObjectInformationA
GetProcessWindowStation
FindWindowExA
RegisterClassA
GetMenu
GetMenuItemCount
CheckDlgButton
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetDlgCtrlID
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
MapDialogRect
GetWindow
IsDialogMessageA
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
GetSubMenu
ScrollWindowEx
GetMessageA
TranslateMessage
GetWindowThreadProcessId
GetClassNameW
GetForegroundWindow
CloseWindowStation
SetProcessWindowStation
OpenWindowStationA
MessageBoxA
MessageBoxW
SendMessageTimeoutA
EnumDesktopWindows
GetDC
IsWindowVisible
GetWindowLongA
GetParent
EnumWindows
EnumChildWindows
GetDesktopWindow
GetWindowTextA
GetWindowTextW
SetForegroundWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetUserObjectInformationW
SetWindowPos
ShowWindow
AttachThreadInput
SendMessageA
GetClientRect
CreateWindowExA
DestroyIcon
LoadImageA
GetSystemMetrics
SetWindowTextA
MoveWindow
CharNextA
wvsprintfA
LoadStringA
ClientToScreen
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
DestroyMenu
MsgWaitForMultipleObjects
InsertMenuA
GetMenuStringA
RemoveMenu
GetClassNameA
PtInRect
LoadCursorA
SetCapture
ReleaseCapture
WaitMessage
WindowFromPoint
DeleteMenu
GetSysColorBrush
GetDialogBaseUnits
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
DrawIcon
AppendMenuA
GetSystemMenu
IsIconic
InvalidateRect
BringWindowToTop
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
SetWindowContextHelpId
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
SetCursor
ShowOwnedPopups
PostQuitMessage
PostMessageA
GetWindowTextLengthA
CharUpperA
wsprintfA
OemToCharA
CharToOemA
LoadIconA
EnableWindow
GetWindowRect
gdi32
GetViewportExtEx
GetWindowExtEx
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CopyMetaFileA
CreateDCA
GetObjectType
GetTextMetricsA
CreateFontIndirectA
DPtoLP
LPtoDP
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
DeleteObject
PolyBezierTo
PlayMetaFile
PolylineTo
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
SelectObject
RestoreDC
SaveDC
StartDocA
SetColorAdjustment
EnumMetaFile
GetBitmapBits
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetTextExtentPointA
CreateDIBitmap
DeleteDC
GetBkColor
GetTextColor
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CreateBitmap
CreateFontIndirectW
GetDeviceCaps
GetTextExtentPoint32A
GetStockObject
GetObjectW
comdlg32
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
OpenSCManagerA
CloseServiceHandle
QueryServiceStatus
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegSetKeySecurity
LookupAccountSidW
RegCreateKeyW
RegEnumValueA
RegQueryInfoKeyA
RegConnectRegistryA
RegEnumKeyA
RegQueryValueA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueA
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
AddAce
AddAccessAllowedAce
GetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
LookupAccountNameW
GetFileSecurityW
SetFileSecurityW
GetFileSecurityA
AllocateAndInitializeSid
EqualSid
FreeSid
SetFileSecurityA
RegSetValueExA
RegOpenKeyA
GetUserNameA
GetTokenInformation
LookupAccountSidA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyA
RegQueryValueExA
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyW
RegSetValueExW
RegCloseKey
OpenServiceA
shell32
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetFileInfoA
SHGetPathFromIDListW
SHGetSpecialFolderPathA
ExtractIconA
comctl32
ord17
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoDisconnectObject
OleRun
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
ReleaseStgMedium
CoTreatAsClass
CoRegisterMessageFilter
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemAlloc
OleDuplicateData
CLSIDFromString
CLSIDFromProgID
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
StringFromCLSID
CreateBindCtx
olepro32
ord253
oleaut32
SafeArrayAllocData
SafeArrayGetUBound
SystemTimeToVariantTime
VariantClear
VariantChangeType
SafeArrayUnaccessData
LoadTypeLi
SysStringLen
SysReAllocStringLen
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayGetLBound
SafeArrayCopy
VarBstrFromDate
VarDateFromStr
VarBstrFromCy
VarCyFromStr
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayAccessData
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
rpcrt4
RpcStringFreeW
UuidToStringW
RpcStringFreeA
UuidToStringA
UuidFromStringW
UuidCreate
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 228KB - Virtual size: 226KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ