Static task
static1
Behavioral task
behavioral1
Sample
a90adbc7ccb07d920fdb6bde8d258ee0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a90adbc7ccb07d920fdb6bde8d258ee0N.exe
Resource
win10v2004-20240709-en
General
-
Target
a90adbc7ccb07d920fdb6bde8d258ee0N.exe
-
Size
1.1MB
-
MD5
a90adbc7ccb07d920fdb6bde8d258ee0
-
SHA1
6e830461fb1a483a0a9a937183b9a0414bb186d2
-
SHA256
ed8750f9ede7379f2ce6e32f29efd1a5909893db9af2787dbfb2ace9dec86d4e
-
SHA512
64084fd60fac951ed6cd3915facf629777059059e766a2c1d54648d123e8fce44316af52429613a0a88461294e3e94b9aac309b363a8480484ec9aa128774689
-
SSDEEP
24576:/p9zqiPDz3kT8NOr3pRwXlTDfL9cWT/mS:Pqi/kT2v9ce
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a90adbc7ccb07d920fdb6bde8d258ee0N.exe
Files
-
a90adbc7ccb07d920fdb6bde8d258ee0N.exe.exe windows:4 windows x86 arch:x86
bbc3014ddf7be63cc6422b3545f87c25
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmReleaseContext
ImmNotifyIME
ImmGetContext
ImmSetConversionStatus
ImmGetConversionStatus
winmm
PlaySoundA
kernel32
GetEnvironmentStringsW
SetHandleCount
GetEnvironmentStrings
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
GetACP
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
TlsFree
HeapReAlloc
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapSize
TerminateProcess
HeapFree
HeapAlloc
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCommandLineA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetCurrentDirectoryA
WritePrivateProfileStringA
CreateDirectoryA
WriteProfileStringA
GetProfileStringA
LoadLibraryA
GetProcAddress
ReadFile
WriteFile
FreeLibrary
Beep
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FindResourceA
LoadResource
LockResource
GetModuleFileNameA
GetPrivateProfileStringA
GetTickCount
GetPrivateProfileIntA
UnhandledExceptionFilter
ExitProcess
RaiseException
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
SizeofResource
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
GetVolumeInformationA
GetStringTypeExA
SetEndOfFile
DeleteFileA
MoveFileA
FlushFileBuffers
UnlockFile
LockFile
GetCurrentProcess
SetFilePointer
CreateFileA
FindFirstFileA
DuplicateHandle
FindNextFileA
GetLastError
FindClose
GetThreadLocale
SetFileTime
GetDiskFreeSpaceA
GetFileTime
lstrcpynA
GetFullPathNameA
GetTempFileNameA
GetCurrentThread
GetFileAttributesA
lstrcmpA
lstrlenW
FormatMessageA
CloseHandle
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
MulDiv
InterlockedIncrement
InterlockedDecrement
lstrcatA
SetLastError
GetVersion
lstrcmpiA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
_llseek
lstrcpyA
GetModuleHandleA
_hread
_lread
GlobalReAlloc
_lwrite
OpenFile
LocalFree
_lclose
LocalAlloc
GlobalHandle
SetStdHandle
VirtualAlloc
user32
CopyAcceleratorTableA
PostThreadMessageA
GetMenuStringA
DeleteMenu
InsertMenuA
MapDialogRect
SetWindowContextHelpId
GetSysColorBrush
GetClassNameA
LoadStringA
CharUpperA
CharNextA
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
DestroyMenu
GetDesktopWindow
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
WindowFromPoint
WaitMessage
ShowOwnedPopups
wvsprintfA
GetMessageA
TranslateMessage
ValidateRect
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetActiveWindow
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
IsChild
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetNextDlgGroupItem
GetMenuItemID
TrackPopupMenu
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
ShowScrollBar
DispatchMessageA
FindWindowA
IsIconic
DrawIconEx
DestroyIcon
IsZoomed
RedrawWindow
IsWindowVisible
GetCapture
SetCapture
ReleaseCapture
DrawTextExA
IsWindow
PtInRect
LoadIconA
MessageBoxA
LoadMenuA
EnableMenuItem
RegisterClipboardFormatA
SetFocus
AdjustWindowRectEx
GetMenuItemCount
CheckMenuItem
GetSubMenu
GetWindowRect
GetSystemMetrics
InflateRect
CopyRect
DrawFocusRect
ClientToScreen
EqualRect
PostMessageA
GetDC
ReleaseDC
MessageBeep
GetSysColor
DestroyCursor
LoadImageA
LoadBitmapA
GetDlgCtrlID
SetRect
PeekMessageA
PostQuitMessage
UpdateWindow
GetCursorPos
ScreenToClient
LoadCursorA
SetCursor
FillRect
GetParent
InvalidateRect
SendMessageA
SetTimer
KillTimer
GetClientRect
EnableWindow
GetTopWindow
DefDlgProcA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
IsWindowUnicode
gdi32
GetDeviceCaps
GetTextExtentPointA
GetPaletteEntries
GetClipBox
GetStockObject
SetBkColor
CreateBitmap
SetTextColor
RestoreDC
SetBkMode
SaveDC
SetROP2
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
SetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
IntersectClipRect
ExcludeClipRect
LineTo
MoveToEx
GetWindowExtEx
GetViewportExtEx
RectVisible
TextOutA
PtVisible
Escape
PatBlt
ExtTextOutA
DPtoLP
LPtoDP
GetMapMode
GetBkColor
CreatePen
SetStretchBltMode
StretchDIBits
SelectObject
ResetDCA
FrameRgn
OffsetRgn
CombineRgn
CreateDCA
DeleteDC
CreateRectRgn
StartDocA
StartPage
EndPage
EndDoc
PtInRegion
SetRectRgn
CreateRectRgnIndirect
CreateFontIndirectA
GetNearestPaletteIndex
CreatePalette
SelectPalette
CreateDIBitmap
Rectangle
GetTextColor
GetObjectA
StretchBlt
Ellipse
Polygon
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
BitBlt
RealizePalette
CreateFontA
CreateICA
DeleteObject
comdlg32
GetFileTitleA
PrintDlgA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
SetFileSecurityA
GetFileSecurityA
shell32
DragFinish
DragQueryFileA
ShellExecuteA
comctl32
ImageList_DrawEx
ord17
ImageList_Destroy
ImageList_LoadImageA
oledlg
ord8
ole32
OleUninitialize
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
OleFlushClipboard
OleInitialize
OleIsCurrentClipboard
CoRegisterMessageFilter
CoRevokeClassObject
CoFreeUnusedLibraries
olepro32
ord253
oleaut32
SysStringLen
VariantTimeToSystemTime
SafeArrayGetDim
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
SafeArrayCreate
SafeArrayUnaccessData
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SysAllocStringLen
SysFreeString
VariantClear
wsock32
inet_ntoa
WSAAsyncSelect
sendto
recvfrom
gethostbyname
socket
recv
htonl
htons
send
bind
accept
WSAGetLastError
WSASetLastError
WSAStartup
WSACleanup
shutdown
connect
ioctlsocket
closesocket
Sections
.text Size: 768KB - Virtual size: 766KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ