Static task
static1
Behavioral task
behavioral1
Sample
e383582413cc53ec6a630e537eedfeee35d6b5f3495266f2530770f4dd3193a6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e383582413cc53ec6a630e537eedfeee35d6b5f3495266f2530770f4dd3193a6.exe
Resource
win10v2004-20240508-en
General
-
Target
e383582413cc53ec6a630e537eedfeee35d6b5f3495266f2530770f4dd3193a6
-
Size
805KB
-
MD5
d894d8517eb0fd488db2ed82a2b2df40
-
SHA1
46efad6fdf57881e53e51131852b3469fb0ef1c4
-
SHA256
e383582413cc53ec6a630e537eedfeee35d6b5f3495266f2530770f4dd3193a6
-
SHA512
5e2cc71f274c5d0dbef9cea84ba4e3b839f54866a10acfbab247330bfb4e129babbca0f202e55d7e8b783348684d4d92f90e60c6bd25cfe6a69d2c0942c4dc01
-
SSDEEP
24576:yXtqUf5AcLPVe9Ds6jpGP89NHNTZn3bsVG7SpQCW:yXtqe5AcLPV8Pjp2mNHNN3wVB2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e383582413cc53ec6a630e537eedfeee35d6b5f3495266f2530770f4dd3193a6
Files
-
e383582413cc53ec6a630e537eedfeee35d6b5f3495266f2530770f4dd3193a6.exe windows:5 windows x86 arch:x86
6e151b486e727abd57880c47ccc88164
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
VirtualFree
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetStringTypeA
IsDebuggerPresent
GetConsoleCP
GetConsoleMode
SetStdHandle
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
lstrcmpiA
TerminateProcess
HeapSize
ExitProcess
Sleep
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetStartupInfoA
GetCommandLineA
RaiseException
RtlUnwind
HeapAlloc
HeapFree
GetCurrentDirectoryA
GetFileSizeEx
FileTimeToLocalFileTime
SetErrorMode
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetModuleHandleW
GetFileTime
GetFileAttributesA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
GetStringTypeExA
GetCurrentProcessId
GetModuleFileNameA
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
GetVersionExA
GetCurrentThreadId
CloseHandle
InterlockedDecrement
GetModuleFileNameW
GetModuleHandleA
GetLastError
SetLastError
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
lstrlenW
MultiByteToWideChar
MulDiv
lstrlenA
FreeLibrary
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
InterlockedIncrement
GetTickCount
LoadLibraryA
GetProcAddress
OpenProcess
GetStringTypeW
user32
InflateRect
UnregisterClassA
GetSysColorBrush
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
BringWindowToTop
TranslateAcceleratorA
SetRectEmpty
LoadCursorA
CopyAcceleratorTableA
SendNotifyMessageA
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
DeleteMenu
IsRectEmpty
GetDC
ReleaseDC
ReleaseCapture
CountClipboardFormats
IsClipboardFormatAvailable
SetCapture
MessageBeep
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
ShowOwnedPopups
SetCursor
PostQuitMessage
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
InvalidateRect
SetRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
CharUpperA
GetWindowThreadProcessId
IsWindowEnabled
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
SetFocus
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetMenu
SetForegroundWindow
UpdateWindow
PostMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
PostThreadMessageA
GetNextDlgGroupItem
InvalidateRgn
CharNextA
GetMenuItemInfoA
GetWindowLongA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
UnhookWindowsHookEx
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetParent
GetClientRect
CopyRect
GetSystemMetrics
EnableWindow
GetFocus
SendMessageA
ClientToScreen
gdi32
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
CreateSolidBrush
CreateRectRgnIndirect
CreateCompatibleBitmap
CreateFontIndirectA
GetMapMode
GetTextColor
GetRgnBox
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
GetTextExtentPoint32A
GetDeviceCaps
DeleteObject
IntersectClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
ScaleWindowExtEx
DPtoLP
GetBkColor
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDCA
CopyMetaFileA
PtVisible
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegSetValueA
RegCloseKey
shell32
DragAcceptFiles
DragFinish
DragQueryFileA
shlwapi
PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
oledlg
ord11
ord3
ord4
ord8
ole32
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
OleGetClipboard
CreateItemMoniker
CreateFileMoniker
CoRevokeClassObject
CoDisconnectObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoGetClassObject
CreateGenericComposite
OleGetIconOfClass
OleCreateLinkToFile
OleCreateFromFile
OleSetContainedObject
GetHGlobalFromILockBytes
StgOpenStorageOnILockBytes
OleLoad
OleCreate
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
OleSave
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleSetMenuDescriptor
OleLockRunning
oleaut32
VariantClear
SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocStringByteLen
SysFreeString
SysStringLen
VariantInit
VariantChangeType
SysAllocStringLen
Sections
.text Size: 286KB - Virtual size: 285KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 431KB - Virtual size: 431KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ