Static task
static1
Behavioral task
behavioral1
Sample
????? ????????.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
????? ????????.exe
Resource
win10v2004-20240508-en
General
-
Target
01e748c2b58adafd503d1d95571bf66f1130c3568841008e0f00318d59217a2a
-
Size
790KB
-
MD5
55ac28089a33c7ea878c40825d6149db
-
SHA1
0933bbc9e9f05d828931e24af9d6963f6c90d62b
-
SHA256
01e748c2b58adafd503d1d95571bf66f1130c3568841008e0f00318d59217a2a
-
SHA512
c0133c8e82976a7188d270f84541f89c3766f33ad0998dd56dafbec9da29646603da7934e5a14477e68026f2a0885759146f40e64a736e225af79dee381af17d
-
SSDEEP
24576:a+CMl8bUVujMfSBp+8tSmZw1t2YcmmhcKGx9:a+CMlVuofSn+90itd7Opa9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/????? ????????.exe
Files
-
01e748c2b58adafd503d1d95571bf66f1130c3568841008e0f00318d59217a2a.zip
-
????? ????????.exe.exe windows:6 windows x64 arch:x64
4570a7b4acf47a61bfd60649a52aa2a4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
MultiByteToWideChar
GlobalFlags
GetSystemInfo
GetCurrentProcessId
VirtualQuery
CreateEventW
SetEvent
ResetEvent
GetSystemTimeAsFileTime
lstrcmpiW
LoadLibraryExW
WriteConsoleW
FlushFileBuffers
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
FindClose
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
GetFileType
SetFilePointerEx
GetStdHandle
GetCommandLineA
GetModuleHandleExW
RtlUnwind
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlPcToFileHeader
RtlUnwindEx
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
OutputDebugStringW
TerminateProcess
GetCurrentProcess
FindNextFileW
GetCommandLineW
SetLastError
ReadFile
CreateDirectoryW
FreeLibrary
GetProcAddress
LoadLibraryW
GetTickCount
GetFileAttributesW
FindResourceW
LoadResource
LockResource
FreeResource
SizeofResource
MulDiv
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
WaitForSingleObject
CreateProcessW
CreateThread
SetWaitableTimer
CreateWaitableTimerW
WideCharToMultiByte
WriteFile
LeaveCriticalSection
RaiseException
GetCurrentThreadId
GetModuleHandleW
IsDebuggerPresent
GetModuleFileNameW
TryEnterCriticalSection
EnterCriticalSection
InitializeCriticalSection
ExitProcess
CloseHandle
SetEndOfFile
CreateFileW
Sleep
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionAndSpinCount
HeapFree
user32
RegisterClassExW
PostQuitMessage
GetClassInfoExW
CharNextW
SetWindowLongPtrW
DestroyAcceleratorTable
GetClassNameW
DestroyMenu
TranslateAcceleratorW
GetWindowTextW
EndPaint
GetNextDlgTabItem
BeginPaint
IsIconic
DeleteMenu
GetDlgItem
SetFocus
UnregisterClassW
MessageBoxW
DestroyWindow
IsWindow
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
GetWindowLongW
SendMessageW
IntersectRect
IsRectEmpty
WinHelpW
SetMenu
IsWindowEnabled
GetSysColor
IsChild
GetDlgCtrlID
IsDialogMessageW
DrawIcon
FillRect
SetWindowRgn
IsWindowVisible
GetFocus
CallWindowProcW
GetSystemMenu
GetLastActivePopup
GetWindowTextLengthW
SetRect
GetTopWindow
ClientToScreen
DestroyIcon
RedrawWindow
ScreenToClient
IsZoomed
SetWindowTextW
InvalidateRect
SetWindowPos
SetWindowLongW
GetKeyState
SetCursor
GetWindow
ShowWindow
EnableWindow
AdjustWindowRectEx
MsgWaitForMultipleObjects
ReleaseDC
GetClientRect
GetSystemMetrics
GetDC
GetWindowRect
LoadImageW
GetParent
GetDesktopWindow
LoadCursorW
LoadIconW
GetActiveWindow
LoadStringW
GetWindowThreadProcessId
MonitorFromWindow
SetActiveWindow
WaitForInputIdle
GetMonitorInfoW
EnumWindows
PostMessageW
CreateWindowExW
GetWindowLongPtrW
gdi32
CreateEllipticRgn
CreateSolidBrush
CreateRoundRectRgn
GetClipBox
CreateFontIndirectW
SelectObject
CreateDIBSection
SetDIBColorTable
CreateCompatibleDC
GdiAlphaBlend
GetStockObject
GetDeviceCaps
DeleteObject
SetStretchBltMode
GetObjectW
DeleteDC
advapi32
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegEnumKeyExW
RegDeleteValueW
RegCloseKey
shell32
DragFinish
DragQueryFileW
SHGetSpecialFolderPathW
Shell_NotifyIconW
ole32
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CreateStreamOnHGlobal
CoCreateInstance
CoInitializeEx
CoUninitialize
oleaut32
VarUI4FromStr
comctl32
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
InitCommonControlsEx
gdiplus
GdiplusStartup
GdiplusShutdown
GdipGetImageHeight
GdipGetImagePaletteSize
GdipCloneImage
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipAlloc
GdipDrawImageRectI
GdipDisposeImage
GdipGetImagePixelFormat
GdipFree
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipGetImagePalette
GdipSetCompositingMode
GdipGetImageWidth
GdipCreateBitmapFromFile
ws2_32
WSACleanup
Sections
.text Size: 259KB - Virtual size: 259KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 882KB - Virtual size: 881KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ