Static task
static1
Behavioral task
behavioral1
Sample
81798ea125359ca4e618a5619cd856f95f3fb809f5f3022a42563bd3b627f2ca.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
81798ea125359ca4e618a5619cd856f95f3fb809f5f3022a42563bd3b627f2ca.exe
Resource
win10v2004-20240611-en
General
-
Target
81798ea125359ca4e618a5619cd856f95f3fb809f5f3022a42563bd3b627f2ca
-
Size
179KB
-
MD5
0e4b4bc895030757f82bc0e0a87ec1c9
-
SHA1
90467fcea3d824f2c08bada186c1159ca05fc448
-
SHA256
81798ea125359ca4e618a5619cd856f95f3fb809f5f3022a42563bd3b627f2ca
-
SHA512
ce835489855c48cdd3671a289053819617d29fe7799b5a59cc9a62c023658c1a43b93b1db513b18099631b79ff0293607e235d5a10b308540a38535866b89c8f
-
SSDEEP
3072:lAcQ0YeiwMOaUnVlaGDQZmLbxPxU5sdYzugicoTWO0U3eEpStHgc:U0Y/wMONnVlaGImVxU5cYzugPoTn0U3G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81798ea125359ca4e618a5619cd856f95f3fb809f5f3022a42563bd3b627f2ca
Files
-
81798ea125359ca4e618a5619cd856f95f3fb809f5f3022a42563bd3b627f2ca.exe windows:5 windows x86 arch:x86
5add800dec1560e8a6c4d82a070cb0fb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetSysColor
RegisterClassExW
CharNextW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
GetKeyboardLayoutList
GetClassInfoExW
EnableWindow
AdjustWindowRectEx
GetWindow
MonitorFromWindow
RedrawWindow
EndDialog
DialogBoxIndirectParamW
DrawTextW
LoadCursorW
SetCursor
SetRect
ShowWindow
GetDesktopWindow
GetActiveWindow
SetWindowRgn
FindWindowW
GetKeyboardState
keybd_event
GetForegroundWindow
AttachThreadInput
SetForegroundWindow
SetActiveWindow
SetFocus
MonitorFromPoint
GetMonitorInfoW
MessageBoxW
GetClassLongW
SetTimer
IntersectRect
KillTimer
MapWindowPoints
LoadStringW
EnumWindows
UnregisterClassA
WindowFromPoint
kernel32
GetSystemTime
RtlUnwind
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
DecodePointer
EncodePointer
InterlockedDecrement
InterlockedIncrement
HeapSetInformation
GetCommandLineA
WritePrivateProfileStringW
MoveFileW
GetEnvironmentVariableW
lstrlenA
SetFileAttributesW
RemoveDirectoryW
SetEndOfFile
GetStdHandle
GetLogicalDriveStringsW
EnterCriticalSection
ResumeThread
OpenEventA
CreateSemaphoreA
CancelIo
DisconnectNamedPipe
GetOverlappedResult
CreateNamedPipeW
ConnectNamedPipe
SetNamedPipeHandleState
PeekNamedPipe
LeaveCriticalSection
LoadResource
FindResourceW
SizeofResource
LockResource
FreeResource
MulDiv
GetLastError
GlobalFree
GlobalUnlock
GetSystemDirectoryW
ExitThread
FlushInstructionCache
GlobalReAlloc
lstrlenW
LoadLibraryA
QueryDosDeviceW
RaiseException
ReleaseMutex
GetExitCodeProcess
GetModuleHandleW
GetVersionExW
FindResourceExW
MultiByteToWideChar
GetVersion
GetCurrentProcess
LocalFree
GetModuleFileNameW
FreeConsole
GetCurrentProcessId
CreateRemoteThread
CreateMutexW
Sleep
GetModuleHandleA
LoadLibraryW
ReadFile
CreateFileW
LocalAlloc
InitializeCriticalSection
FreeLibrary
DeleteCriticalSection
GetDriveTypeW
CreateDirectoryW
CreateProcessW
SetLastError
GetWindowsDirectoryW
WideCharToMultiByte
GetTickCount
GetTimeZoneInformation
GetSystemInfo
GetPrivateProfileStringW
GetSystemTimeAsFileTime
GetDiskFreeSpaceExW
IsValidLocale
GetFileSize
GetUserDefaultUILanguage
GetTempFileNameW
CopyFileW
WriteFile
ProcessIdToSessionId
lstrcpyW
GetFileAttributesW
MoveFileExW
DeviceIoControl
FindClose
lstrcmpiW
GetLocaleInfoW
GetFullPathNameW
FindFirstFileW
lstrcmpW
LoadLibraryExW
GetACP
SetEvent
ExitProcess
CreateThread
GetModuleFileNameA
TerminateThread
GlobalFindAtomW
TerminateProcess
OpenMutexW
SetErrorMode
SystemTimeToFileTime
WaitForMultipleObjects
ResetEvent
CreateEventA
GetSystemWindowsDirectoryW
GetVolumeInformationW
VirtualFree
VirtualAlloc
ReleaseSemaphore
HeapFree
GetProcessHeap
HeapAlloc
IsProcessorFeaturePresent
HeapDestroy
HeapReAlloc
HeapSize
LocalFileTimeToFileTime
SetFilePointerEx
GetFileSizeEx
OutputDebugStringW
FormatMessageW
TlsGetValue
TlsSetValue
GetAtomNameW
OpenThread
AddAtomW
TlsAlloc
FindAtomW
DeleteAtom
TlsFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GlobalMemoryStatusEx
GetStartupInfoW
GetCPInfo
LCMapStringA
LCMapStringW
GetStringTypeW
HeapCreate
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetStringTypeA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoA
ExpandEnvironmentStringsW
WriteConsoleA
WriteConsoleW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
lstrcmpA
lstrcmpiA
GetProcAddress
OpenProcess
CreateEventW
WaitForSingleObject
CloseHandle
GetCurrentThreadId
GlobalAlloc
GlobalLock
Sections
.text Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ