Static task
static1
Behavioral task
behavioral1
Sample
P.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
P.exe
Resource
win7-20240611-en
Behavioral task
behavioral3
Sample
P.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral4
Sample
P.exe
Resource
win11-20240508-en
General
-
Target
P.exe
-
Size
27.9MB
-
MD5
5b3558cf8679391fbf4d2392323ca741
-
SHA1
0a0fa7f2de6082923b590745c6b90ec8008ad729
-
SHA256
547fc9e56ecd3e72430eefd14fc934ac1e25acc256f0e5ddd86ed5637dc096c3
-
SHA512
7811b645b042ccb4a374840775931fdafdd271bf60ee70f8d0b355c823b7550202a854716e0c349efb3b669d98d1027df71acf4a9fc2d247b542be8b14c43972
-
SSDEEP
393216:XmRzc5GLKoyCeXJ+Sxr4xONXW1mMYN+vlKhEh6zhWazOJ:MTLKoyCeXJ+Sxr4xONXWoM3qEE4ayJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource P.exe
Files
-
P.exe.exe windows:5 windows x64 arch:x64
c628626ce9885e92bfe6eec0eb271632
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
RtlCaptureContext
SetFilePointerEx
OutputDebugStringW
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
GetStdHandle
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
MultiByteToWideChar
ExitProcess
ExitThread
CreateThread
RtlPcToFileHeader
IsProcessorFeaturePresent
TerminateProcess
RtlUnwindEx
RtlLookupFunctionEntry
GetCommandLineW
FindResourceExW
VirtualProtect
SearchPathW
Sleep
GetTempPathW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
GetCurrentDirectoryW
SetErrorMode
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
FileTimeToSystemTime
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
SystemTimeToFileTime
ReplaceFileW
SetFileTime
GetFileTime
GetDiskFreeSpaceW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
GetVersionExW
GetCurrentThread
ResumeThread
SetThreadPriority
WaitForSingleObject
GetThreadLocale
GetStringTypeExW
lstrcmpiW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFullPathNameW
GetFileSize
FlushFileBuffers
GlobalGetAtomNameW
GetCurrentProcessId
lstrcmpA
GetProfileIntW
GetTickCount
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleExW
GetModuleHandleW
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
EncodePointer
OutputDebugStringA
CopyFileW
FormatMessageW
LocalFree
GlobalFree
GlobalSize
SetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
GetModuleFileNameW
LoadLibraryA
GetProcAddress
lstrcpynW
MulDiv
GlobalAlloc
WideCharToMultiByte
MoveFileW
FindFirstFileW
DeleteFileW
GetFileAttributesW
CreateFileW
GetTempFileNameW
lstrlenW
lstrcatW
lstrcpyW
CloseHandle
FindClose
ReadFile
WriteFile
GlobalUnlock
GlobalLock
FindResourceW
SizeofResource
LoadResource
LockResource
ReadConsoleW
user32
ModifyMenuW
CharUpperBuffW
FrameRect
GetUpdateRect
SubtractRect
MapDialogRect
GetWindowRgn
InvertRect
MessageBeep
GetIconInfo
DrawIconEx
DrawFocusRect
GetNextDlgGroupItem
WaitMessage
GetMenuDefaultItem
LockWindowUpdate
GetDCEx
CreateMenu
CopyAcceleratorTableW
PostThreadMessageW
GetTabbedTextExtentW
SetWindowRgn
DrawIcon
UnionRect
SendDlgItemMessageA
CopyImage
GetMenuItemInfoW
RealChildWindowFromPoint
GetSysColorBrush
RegisterClipboardFormatW
ShowOwnedPopups
PostQuitMessage
TranslateMessage
GetMessageW
CharUpperW
GetSystemMetrics
IsZoomed
SystemParametersInfoW
SetParent
DeleteMenu
GetSystemMenu
WindowFromPoint
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
IsRectEmpty
SetCursorPos
DestroyCursor
SetRect
MapVirtualKeyW
GetKeyNameTextW
FillRect
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
ReuseDDElParam
UnpackDDElParam
LoadImageW
DestroyIcon
GetWindowThreadProcessId
IntersectRect
InsertMenuItemW
DestroyMenu
CreatePopupMenu
LoadMenuW
BringWindowToTop
InflateRect
IsIconic
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IsDialogMessageW
SetWindowTextW
SetMenuDefaultItem
IsWindowEnabled
CheckDlgButton
SetDlgItemTextW
MoveWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
LoadBitmapW
GetParent
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
CopyIcon
GetDoubleClickTime
SetClassLongPtrW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
IsMenu
GetFocus
RemoveMenu
DrawFrameControl
DrawEdge
DrawStateW
EnumDisplayMonitors
SetLayeredWindowAttributes
NotifyWinEvent
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
UnregisterClassW
MessageBoxW
ShowWindow
SetTimer
SetCapture
GetKeyState
IsClipboardFormatAvailable
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
LoadCursorW
OffsetRect
GetSysColor
ScreenToClient
GetCursorPos
SetCursor
EnableScrollBar
InvalidateRect
ReleaseDC
GetDC
TranslateAcceleratorW
LoadAcceleratorsW
KillTimer
ReleaseCapture
GetDlgItem
IsWindow
SetCaretPos
ShowCaret
HideCaret
CreateCaret
GetClientRect
UpdateWindow
GetAsyncKeyState
EnableWindow
SendMessageW
SetRectEmpty
gdi32
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetViewportOrgEx
Rectangle
GetBkColor
GetTextMetricsW
CreateFontW
GetCharWidthW
StretchDIBits
CreateEllipticRgn
Ellipse
CreateDIBSection
LPtoDP
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetTextAlign
GetTextColor
GetWindowOrgEx
GetTextFaceW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
SetDIBColorTable
CreatePolygonRgn
Polygon
Polyline
EnumFontFamiliesExW
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetLayout
SetLayout
SetMapMode
SetPolyFillMode
StartDocW
SetTextAlign
SetStretchBltMode
GetStretchBltMode
BitBlt
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetCurrentPositionEx
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
SetTextColor
SetBkColor
CreateBitmap
CreateDCW
CopyMetaFileW
GetObjectW
GetTextExtentPoint32W
GetDeviceCaps
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
SetROP2
msimg32
AlphaBlend
TransparentBlt
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
GetJobW
advapi32
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
SetFileSecurityW
GetFileSecurityW
RegEnumKeyW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegSetValueW
RegQueryValueW
RegOpenKeyExW
shell32
ShellExecuteW
DragQueryFileW
DragFinish
SHGetFileInfoW
SHAddToRecentDocs
ExtractIconW
SHAppBarMessage
SHBrowseForFolderW
DragAcceptFiles
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
comctl32
ImageList_Draw
shlwapi
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
StrFormatKBSizeW
uxtheme
GetThemePartSize
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
DrawThemeText
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeParentBackground
ole32
CoDisconnectObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoRegisterMessageFilter
CoRevokeClassObject
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
CoInitializeEx
RevokeDragDrop
CreateStreamOnHGlobal
oleaut32
SysFreeString
VarBstrFromDate
VariantCopy
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
VariantTimeToSystemTime
oledlg
OleUIBusyW
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
gdiplus
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundW
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 716KB - Virtual size: 715KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25.1MB - Virtual size: 25.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 143KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ