Static task
static1
Behavioral task
behavioral1
Sample
f4dda6c425ed1a5eb3ee320b6c575a4b6cab6b3158aa5a8259abe591f77e0d90.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
f4dda6c425ed1a5eb3ee320b6c575a4b6cab6b3158aa5a8259abe591f77e0d90.exe
Resource
win11-20240611-en
General
-
Target
f4dda6c425ed1a5eb3ee320b6c575a4b6cab6b3158aa5a8259abe591f77e0d90
-
Size
2.7MB
-
MD5
ce5398798e7e744530169cbd52c8afed
-
SHA1
c069341448cf1029fbb9d870f0d12f1678e6401b
-
SHA256
f4dda6c425ed1a5eb3ee320b6c575a4b6cab6b3158aa5a8259abe591f77e0d90
-
SHA512
b53623ee47230316cc9eeaf515e6116846dd4bae6c8e1ef841afcd95875cc7c848ba8d9e07b7622bf7616781dde9c74f83aa6fbb6fa5813e15cae51565d1dc70
-
SSDEEP
49152:7vGJioZImZM/xsC+tBam9TzSD8UqdgqtGgSOoJW0xLfo7gkvKM/f9+bWINZCVpn1:7GJiMMJj+tRy8U/C7qYdFU43
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4dda6c425ed1a5eb3ee320b6c575a4b6cab6b3158aa5a8259abe591f77e0d90
Files
-
f4dda6c425ed1a5eb3ee320b6c575a4b6cab6b3158aa5a8259abe591f77e0d90.exe windows:5 windows x86 arch:x86
8d56ce3fbd03fb4212d6dcc93d536645
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
SystemTimeToTzSpecificLocalTime
GlobalLock
GlobalAlloc
TerminateThread
FileTimeToSystemTime
GetTimeZoneInformation
WritePrivateProfileStringW
GlobalUnlock
GetFileSizeEx
GetFileTime
GetExitCodeProcess
LoadLibraryA
GetVersion
SetEndOfFile
CompareStringW
GetDateFormatA
GetTimeFormatA
InitializeCriticalSection
InterlockedPopEntrySList
VirtualAlloc
VirtualFree
InterlockedPushEntrySList
InterlockedCompareExchange
GetProcessHeap
WriteConsoleW
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
RtlUnwind
GetLocaleInfoW
InterlockedExchange
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
InterlockedDecrement
LeaveCriticalSection
GetCurrentThreadId
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
SetFilePointer
ReadFile
GetFileType
SetHandleCount
HeapReAlloc
HeapSize
GetStdHandle
HeapDestroy
HeapCreate
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsProcessorFeaturePresent
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineW
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
HeapAlloc
HeapFree
CreateThread
ExitThread
Sleep
InitializeCriticalSectionAndSpinCount
InterlockedIncrement
LoadLibraryExW
FreeLibrary
DeleteCriticalSection
lstrcmpiW
EnterCriticalSection
GetPrivateProfileIntW
RaiseException
FlushInstructionCache
lstrlenW
MultiByteToWideChar
LCMapStringW
GetModuleFileNameW
GetModuleHandleW
GetStringTypeW
GetCurrentProcess
FindResourceExW
GetTempFileNameW
CreateMutexW
ExitProcess
GetProcAddress
SetLastError
GetLastError
LoadLibraryW
CreateEventW
LockResource
LocalAlloc
GetTempPathW
CreateFileW
SizeofResource
WriteFile
WaitForSingleObject
LoadResource
FindResourceW
FreeEnvironmentStringsW
SetEnvironmentVariableA
user32
BeginPaint
GetDC
SetForegroundWindow
SetWindowTextW
UnregisterClassA
GetParent
PostMessageW
EndPaint
GetWindowLongW
GetWindowTextW
GetCapture
PtInRect
GetFocus
DrawTextW
GetWindowRect
GetWindowTextLengthW
EnumChildWindows
GetClassNameW
ShowCaret
GetClientRect
HideCaret
InvalidateRgn
GetSysColor
IsWindow
SetWindowLongW
SetPropW
IsIconic
RegisterWindowMessageW
RemovePropW
SendMessageW
GetPropW
CallWindowProcW
GetCursorPos
MessageBoxW
CloseClipboard
GetSystemMenu
SetTimer
LoadImageW
KillTimer
SetFocus
InvalidateRect
AppendMenuW
GetClipboardData
EnableMenuItem
EmptyClipboard
MonitorFromWindow
GetDlgItem
EndDialog
SetWindowPos
IsDlgButtonChecked
CheckRadioButton
OpenClipboard
GetSystemMetrics
SetDlgItemTextW
MapWindowPoints
EnableWindow
SetClipboardData
GetDlgItemTextA
SetDlgItemTextA
GetMonitorInfoW
GetWindow
CheckDlgButton
DestroyWindow
CharNextW
GetLastActivePopup
DialogBoxParamW
FindWindowW
ShowWindow
GetActiveWindow
SwitchToThisWindow
DefWindowProcW
gdi32
SetBkMode
PatBlt
GetStockObject
SetPixel
GetObjectW
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
SetTextColor
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
CreateWellKnownSid
CheckTokenMembership
GetTokenInformation
OpenProcessToken
RegSetValueExW
RegCreateKeyExW
shell32
DragAcceptFiles
DragFinish
ShellExecuteExW
ord680
DragQueryFileW
ole32
PropVariantClear
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoTaskMemRealloc
CoUninitialize
CoCreateInstance
oleaut32
VarUI4FromStr
avifil32
AVIFileInit
AVIStreamStart
AVIStreamSampleToTime
AVIStreamGetFrameOpen
AVIFileExit
AVIStreamGetFrame
AVIStreamLength
AVIStreamOpenFromFileW
msvfw32
DrawDibOpen
gdiplus
GdipSetPenDashStyle
GdipDrawLineI
GdipFillRectangleI
GdipCreateSolidFill
GdipCloneBrush
GdipDeleteBrush
GdipCreateBitmapFromHICON
GdipDrawRectangleI
GdipCreatePen1
GdipDeletePen
GdipGetImageWidth
GdipCloneImage
GdipCreateCachedBitmap
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipAlloc
GdipDeleteGraphics
GdipGetImageHeight
GdipCloneBitmapAreaI
GdipFree
GdipDeleteCachedBitmap
shlwapi
PathRemoveFileSpecW
PathAppendW
SHStrDupW
comctl32
InitCommonControlsEx
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 823KB - Virtual size: 823KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ