Static task
static1
Behavioral task
behavioral1
Sample
80b92971a0e4cc1f7f6c720df8cf0accef78ba57c80d71e529d4e64eafd50540.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
80b92971a0e4cc1f7f6c720df8cf0accef78ba57c80d71e529d4e64eafd50540.exe
Resource
win10v2004-20240611-en
General
-
Target
80b92971a0e4cc1f7f6c720df8cf0accef78ba57c80d71e529d4e64eafd50540
-
Size
304KB
-
MD5
652548074996ecedf23b78b1c4323cc9
-
SHA1
8b6d33383ba7594618da8f98b13e1b2e4c3decd7
-
SHA256
80b92971a0e4cc1f7f6c720df8cf0accef78ba57c80d71e529d4e64eafd50540
-
SHA512
864a0b7d552fea00260ab1903ff20daf0620282cebf18d0a3dced85e29791d368b956ded8bd50baacc14a6448f25c05da3c58be545c05fed093c2345688a6bc7
-
SSDEEP
3072:8nyzaI9p+FfFfzVbiaMQSE/obncYW1f7wQ6Hl362BMDVC6AKQb7fa9+WoOjhrgjK:8n6rGFfzEEwb9ESH8DVC6AKQb7yBgj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80b92971a0e4cc1f7f6c720df8cf0accef78ba57c80d71e529d4e64eafd50540
Files
-
80b92971a0e4cc1f7f6c720df8cf0accef78ba57c80d71e529d4e64eafd50540.exe windows:4 windows x86 arch:x86
f0c3eb9087d9b7f94987857230e9bdba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
accept
listen
setsockopt
htonl
htons
WSACleanup
socket
WSAStartup
ntohl
send
recv
getpeername
ntohs
select
bind
shutdown
closesocket
ws2_32
WSAAddressToStringA
odbc32
ord8
ord75
ord24
ord36
ord18
ord43
ord11
ord15
ord14
ord13
ord7
ord5
ord9
ord16
kernel32
FileTimeToLocalFileTime
GetCPInfo
FileTimeToSystemTime
GetOEMCP
WritePrivateProfileStringA
GetCurrentDirectoryA
GetThreadLocale
DuplicateHandle
GetCurrentProcess
LocalReAlloc
TlsGetValue
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
ReadFile
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
CreateFileA
GetFileAttributesA
GetFileSize
GetFileTime
FormatMessageA
SetErrorMode
RtlUnwind
GetSystemTimeAsFileTime
GetStartupInfoA
GetCommandLineA
TlsSetValue
HeapFree
RaiseException
TerminateProcess
HeapReAlloc
LeaveCriticalSection
GetProcessVersion
GetACP
GlobalReAlloc
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsFree
GlobalHandle
TlsAlloc
LocalFree
LocalAlloc
GlobalFlags
HeapAlloc
ExitProcess
EnterCriticalSection
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrcmpiA
InterlockedIncrement
InterlockedDecrement
GetVersion
GetPrivateProfileStringA
CreateDirectoryA
GetLastError
CreateThread
Sleep
GetLocalTime
GetDriveTypeA
MulDiv
DeleteCriticalSection
InitializeCriticalSection
SetLastError
GetTickCount
CloseHandle
lstrcmpA
GetModuleFileNameA
GlobalAlloc
FreeLibrary
GetCurrentThread
LoadLibraryA
GlobalGetAtomNameA
lstrcatA
GetCurrentThreadId
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
GetProcAddress
lstrcpyA
GetModuleHandleA
GlobalFree
GlobalLock
GlobalUnlock
LoadResource
LockResource
FindResourceA
HeapSize
lstrcpynA
GetTimeZoneInformation
GetShortPathNameA
UnhandledExceptionFilter
user32
LoadStringA
DestroyMenu
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetSysColorBrush
GetClassNameA
PtInRect
GetDesktopWindow
DestroyIcon
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
CharUpperA
TranslateMessage
ValidateRect
SetCursor
PostQuitMessage
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
SetFocus
AdjustWindowRectEx
CopyRect
IsWindowVisible
GetMessageA
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
LoadImageA
CreatePopupMenu
RegisterClipboardFormatA
MapDialogRect
SetWindowContextHelpId
GetCursorPos
SetForegroundWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
LoadIconA
SendMessageA
EnableWindow
SetWindowsHookExA
DispatchMessageA
UnregisterClassA
gdi32
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
GetWindowExtEx
PtVisible
TextOutA
ExtTextOutA
RectVisible
Escape
GetTextColor
GetBkColor
LPtoDP
DPtoLP
GetMapMode
DeleteObject
GetViewportExtEx
CreateBitmap
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueA
RegSetValueA
RegOpenKeyA
shell32
ExtractIconA
Shell_NotifyIconA
comctl32
ord17
oledlg
ord8
ole32
CoGetClassObject
StringFromCLSID
CoRegisterClassObject
CoRevokeClassObject
CLSIDFromProgID
CLSIDFromString
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoDisconnectObject
CoTaskMemFree
CoTaskMemAlloc
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
olepro32
ord253
oleaut32
SysFreeString
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysAllocStringLen
VariantChangeType
VariantClear
VariantCopy
LoadTypeLi
VariantTimeToSystemTime
Sections
.text Size: 160KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ