Static task
static1
Behavioral task
behavioral1
Sample
d8191f5d97000d9131fd83abbe140c1881f8ddcb66762686dabc40c882d8c33c.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
d8191f5d97000d9131fd83abbe140c1881f8ddcb66762686dabc40c882d8c33c.exe
Resource
win10v2004-20240226-en
General
-
Target
d8191f5d97000d9131fd83abbe140c1881f8ddcb66762686dabc40c882d8c33c
-
Size
2.2MB
-
MD5
025b684e576ce33085418b0f31edd9f9
-
SHA1
1ba4f791c3d96cb4b9249a7931b9718a2d8fe780
-
SHA256
d8191f5d97000d9131fd83abbe140c1881f8ddcb66762686dabc40c882d8c33c
-
SHA512
3011f8a3ad5f8d48cadca3bec027a6a684385cfc809bf2fc49cc80b0085fa37907f5b05becf4008b5aadbcd7dd54996b2b4586fc77fd09c780044965a65148c2
-
SSDEEP
24576:q+4XfJz3KHdFozL4US4fx283x9BG/sTl5Txlko3Xb+0++L5f0ls:+36qhdZ2YxpPlrC0+Y5f0ls
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d8191f5d97000d9131fd83abbe140c1881f8ddcb66762686dabc40c882d8c33c
Files
-
d8191f5d97000d9131fd83abbe140c1881f8ddcb66762686dabc40c882d8c33c.exe windows:4 windows x86 arch:x86
78a050e3e7db05c8da406fc5e569104c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessVersion
GetPrivateProfileIntW
WritePrivateProfileStringW
GlobalGetAtomNameW
GetStartupInfoW
ExitProcess
RtlUnwind
RaiseException
HeapAlloc
HeapFree
GetTimeZoneInformation
GetSystemTime
TerminateProcess
ExitThread
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
FatalAppExitA
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
SizeofResource
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
PulseEvent
SleepEx
QueryPerformanceCounter
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GlobalFlags
GlobalSize
MulDiv
SetLastError
SuspendThread
SetThreadPriority
ResumeThread
GlobalAlloc
lstrcmpiA
GetCurrentThread
LoadLibraryA
GetVersion
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GlobalFree
LockResource
GetFullPathNameA
SetCurrentDirectoryW
SetEnvironmentVariableW
GetDiskFreeSpaceW
OpenFileMappingW
DefineDosDeviceW
GetDiskFreeSpaceExW
SetVolumeLabelW
QueryDosDeviceA
QueryDosDeviceW
GetLogicalDrives
GetDriveTypeW
GetDriveTypeA
FindResourceA
GlobalAddAtomA
GetProfileStringA
VirtualProtect
GetWindowsDirectoryA
CreateFileMappingA
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
EnumResourceTypesW
EnumResourceNamesW
VirtualQuery
OpenSemaphoreW
GetQueuedCompletionStatus
PostQueuedCompletionStatus
DisconnectNamedPipe
CreateIoCompletionPort
CancelIo
GetOverlappedResult
CreateNamedPipeW
ConnectNamedPipe
WaitNamedPipeW
SetNamedPipeHandleState
VirtualQueryEx
InterlockedExchangeAdd
InterlockedExchange
InterlockedCompareExchange
CreateProcessA
ReadProcessMemory
GetThreadPriority
GetPriorityClass
SetPriorityClass
TerminateThread
MoveFileExA
RemoveDirectoryA
CopyFileA
CreateDirectoryA
MoveFileA
DeleteFileA
GetFileAttributesA
SetFileAttributesA
GetEnvironmentVariableW
GetTempPathA
ExpandEnvironmentStringsW
GetSystemDirectoryA
ExpandEnvironmentStringsA
SetThreadLocale
OutputDebugStringA
LoadLibraryExW
LoadLibraryExA
EnumResourceLanguagesW
GetCurrentDirectoryA
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
GetVersionExW
FindResourceExW
FormatMessageA
FindResourceW
LoadResource
WaitForMultipleObjects
ReleaseMutex
ReleaseSemaphore
CreateSemaphoreW
FormatMessageW
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetShortPathNameW
lstrcmpiW
GetThreadLocale
GetStringTypeExW
GetFullPathNameW
lstrcpynW
GetVolumeInformationW
lstrcpyW
FlushFileBuffers
DuplicateHandle
lstrcmpA
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalLock
GlobalUnlock
lstrlenA
lstrlenW
InterlockedDecrement
AllocConsole
GetStdHandle
WriteConsoleW
FreeConsole
OutputDebugStringW
GetLocalTime
UnlockFile
LockFile
GetFileSize
SetEndOfFile
SetFilePointer
GetPrivateProfileStringW
GetProfileStringW
OpenMutexW
OpenEventW
SetEvent
CreateEventW
CreateMutexW
ResetEvent
FreeLibrary
WriteFile
CreateFileMappingW
MapViewOfFile
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
UnmapViewOfFile
InterlockedIncrement
WriteProfileStringW
GetTempPathW
GetCommandLineW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetComputerNameA
GetComputerNameW
GetFileAttributesExW
CreateFileW
ReadFile
MoveFileExW
GetTickCount
Sleep
MoveFileW
CopyFileW
GetSystemDirectoryW
lstrcmpW
RemoveDirectoryW
GetSystemInfo
FindFirstFileW
FindNextFileW
FindFirstFileA
FindNextFileA
FindClose
LoadLibraryW
LocalFree
OpenProcess
GetCurrentProcess
CreateThread
GetModuleHandleA
CreateFileA
GetFileInformationByHandle
CloseHandle
GetModuleHandleW
GetProcAddress
GetCurrentProcessId
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
GetLastError
GetFileAttributesW
SetFileAttributesW
DeleteFileW
CreateDirectoryW
GetWindowsDirectoryW
GetCurrentDirectoryW
GetModuleFileNameW
GetExitCodeThread
user32
wvsprintfW
LoadStringW
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
PostMessageW
PostQuitMessage
GetProcessWindowStation
MessageBoxA
GetUserObjectInformationW
OpenInputDesktop
OpenDesktopW
GetThreadDesktop
SetThreadDesktop
CloseDesktop
ShowOwnedPopups
UpdateWindow
SendDlgItemMessageW
CloseWindowStation
SetProcessWindowStation
OpenWindowStationW
SetCursor
GetCursorPos
ValidateRect
TranslateMessage
MessageBoxW
EnumDesktopWindows
GetWindowThreadProcessId
GetWindowLongW
GetParent
IsWindowVisible
EnumWindows
EnumChildWindows
GetDesktopWindow
GetWindowTextA
GetWindowTextW
EnableWindow
LoadIconW
SendMessageW
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
ExitWindowsEx
GetWindowTextLengthW
wsprintfW
UnregisterClassW
CharToOemBuffA
OemToCharBuffA
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetMessageW
SetWindowContextHelpId
MapDialogRect
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutW
DrawTextW
GrayStringW
InsertMenuW
AppendMenuW
GetMenuStringW
RemoveMenu
GetClassNameW
PtInRect
GetDialogBaseUnits
LoadCursorW
GetSysColorBrush
DestroyMenu
SetCapture
ReleaseCapture
WaitMessage
WindowFromPoint
DeleteMenu
CharNextW
CopyAcceleratorTableW
SetRect
GetNextDlgGroupItem
MessageBeep
SetRectEmpty
LoadAcceleratorsW
TranslateAcceleratorW
LoadMenuW
SetMenu
ReuseDDElParam
DestroyIcon
DrawTextA
DrawFocusRect
GetClassInfoA
UnpackDDElParam
InvalidateRect
BringWindowToTop
InflateRect
RegisterClipboardFormatW
PostThreadMessageW
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
CharUpperW
MsgWaitForMultipleObjects
IsWindowEnabled
GetDlgItem
DestroyWindow
CreateDialogIndirectParamW
IsWindow
SetActiveWindow
GetActiveWindow
EndDialog
GetNextDlgTabItem
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageW
DispatchMessageW
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetDlgCtrlID
GetKeyState
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongW
SetWindowPos
RegisterWindowMessageW
OffsetRect
IntersectRect
SystemParametersInfoW
GetWindowPlacement
GetWindowRect
gdi32
GetClipRgn
CreateRectRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
CopyMetaFileW
SetColorAdjustment
GetTextExtentPoint32W
GetTextMetricsW
CreateFontIndirectW
GetTextColor
GetBkColor
DeleteObject
LPtoDP
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
PolylineTo
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
GetDCOrgEx
GetClipBox
SetTextColor
SetBkColor
GetObjectW
CreateBitmap
DeleteDC
StartDocW
SaveDC
RestoreDC
SelectObject
GetStockObject
SelectPalette
DPtoLP
PolyBezierTo
ExtTextOutA
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateDIBitmap
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
GetBitmapBits
GetObjectA
CreateCompatibleBitmap
CreateDCA
OffsetClipRgn
CreateDCW
comdlg32
GetOpenFileNameW
GetSaveFileNameW
GetFileTitleW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegisterEventSourceA
DeregisterEventSource
RegSetKeySecurity
SetFileSecurityW
RegCreateKeyExA
RegCreateKeyA
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
GetAce
SetSecurityDescriptorDacl
LookupAccountNameW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExA
RegQueryValueExA
RegConnectRegistryW
RegEnumKeyW
RegQueryValueW
RegDeleteKeyW
RegDeleteValueW
RegSetValueW
RegCreateKeyExW
RegOpenKeyExW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
QueryServiceConfigW
RegSetValueExW
RegOpenKeyW
GetUserNameW
GetTokenInformation
LookupAccountSidW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyW
RegQueryValueExW
RegCloseKey
ReportEventA
shell32
ExtractIconW
DragQueryFileW
DragFinish
DragAcceptFiles
SHGetFileInfoW
SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListW
CommandLineToArgvW
comctl32
ord17
oledlg
OleUIBusyW
ole32
OleSetClipboard
OleInitialize
OleRun
CoDisconnectObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
ReleaseStgMedium
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
CoFreeUnusedLibraries
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CreateBindCtx
CoInitialize
CoInitializeEx
CoTaskMemAlloc
OleDuplicateData
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoRegisterMessageFilter
CoRegisterClassObject
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
WriteClassStg
CoRevokeClassObject
OleUninitialize
olepro32
ord253
oleaut32
SafeArrayCopy
CreateErrorInfo
SetErrorInfo
GetErrorInfo
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
LoadTypeLi
SysStringLen
SysReAllocStringLen
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantInit
VarBstrFromDate
VarDateFromStr
VarBstrFromCy
VarCyFromStr
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
SysAllocString
VariantCopy
SafeArrayRedim
VariantClear
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
rpcrt4
UuidCreate
UuidToStringW
RpcStringFreeW
RpcStringFreeA
UuidToStringA
UuidFromStringW
ws2_32
getpeername
ntohl
ntohs
listen
shutdown
closesocket
connect
getsockname
WSAIoctl
htons
htonl
bind
accept
setsockopt
WSACleanup
WSAStartup
getsockopt
send
recv
sendto
WSAGetLastError
recvfrom
socket
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 264KB - Virtual size: 263KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 152KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ