Static task
static1
Behavioral task
behavioral1
Sample
13865eb38ab54fd36a8b649a35671dd98428424ead66fa5b35246567e79a20a5.exe
Resource
win7-20240708-en
General
-
Target
13865eb38ab54fd36a8b649a35671dd98428424ead66fa5b35246567e79a20a5.bin
-
Size
766KB
-
MD5
4a11de9321553f4cae5edf002b9352df
-
SHA1
18db73e6d8cf084817555daaeeb6e4dba16457ef
-
SHA256
13865eb38ab54fd36a8b649a35671dd98428424ead66fa5b35246567e79a20a5
-
SHA512
54c19ca564dcd4935e2f1e4eb8564e6fa9ceefd15df9f0b8935e0e42de46e1b147fc078df8969f4a0700f0aa215193d71f3a513713dbbb85f18ddc90355d2523
-
SSDEEP
12288:ULlEGwAWQPHNEqI8eT6JgNVJleEKcwnpU3qVfsE3U/ivNb/1oLff9pGHNu4B2Uo9:ClEGwHQPKqIhTRJleEcnpUSpE/iNb1oM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13865eb38ab54fd36a8b649a35671dd98428424ead66fa5b35246567e79a20a5.bin
Files
-
13865eb38ab54fd36a8b649a35671dd98428424ead66fa5b35246567e79a20a5.bin.exe windows:6 windows x86 arch:x86
ee45de7ee456a50cde1fbb3bd99e1ab9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetOEMCP
GetCPInfo
SetErrorMode
GetFileAttributesExA
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetVolumeInformationA
WriteConsoleW
CreateFileW
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
GetFileAttributesExW
LCMapStringW
CompareStringW
GetFileType
GetStdHandle
HeapQueryInformation
GetModuleHandleExW
GetCommandLineW
GetCommandLineA
RtlUnwind
OutputDebugStringW
GetFullPathNameA
FlushFileBuffers
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
SystemTimeToTzSpecificLocalTime
FileTimeToLocalFileTime
FormatMessageA
LocalFree
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetSystemDirectoryW
EncodePointer
MulDiv
GetCurrentProcessId
GlobalAddAtomA
FindResourceA
GlobalFree
GlobalUnlock
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
CompareStringA
lstrcmpA
GlobalDeleteAtom
GlobalLock
GlobalAlloc
LoadLibraryExW
GetModuleFileNameA
FreeLibrary
GetVersionExA
GetCurrentThreadId
GetCurrentThread
LoadLibraryW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
SetLastError
OutputDebugStringA
GetACP
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
FindClose
FindFirstFileA
FileTimeToSystemTime
DeleteFileA
Sleep
ExitProcess
LoadLibraryA
GetProcAddress
CloseHandle
WriteFile
CreateFileA
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
user32
DestroyMenu
CharUpperA
GetSysColorBrush
InvalidateRect
SetTimer
RealChildWindowFromPoint
LoadCursorA
IsDialogMessageA
SetWindowTextA
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
LoadIconA
GetWindow
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
PtInRect
UnregisterClassA
LoadIconW
IsIconic
SendMessageA
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowRect
GetWindowTextA
RemovePropA
GetPropA
SetPropA
GetScrollPos
RedrawWindow
KillTimer
GetSystemMetrics
GetClientRect
DrawIcon
EnableWindow
GetDesktopWindow
SendDlgItemMessageA
SetRectEmpty
OffsetRect
GetParent
PostMessageA
SetWindowsHookExA
PostQuitMessage
IsWindow
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetWindowLongA
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
LoadBitmapW
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
IsWindowVisible
SetForegroundWindow
GetForegroundWindow
UpdateWindow
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPos
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
GetSysColor
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetDC
TabbedTextOutA
GrayStringA
DrawTextExA
GetKeyState
ValidateRect
DrawTextA
UnhookWindowsHookEx
GetLastActivePopup
GetWindowThreadProcessId
MessageBoxA
SetCursor
CallNextHookEx
GetCursorPos
gdi32
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SetViewportExtEx
ExtTextOutA
TextOutA
GetObjectA
GetStockObject
SetTextColor
SetMapMode
SetBkColor
SelectObject
SaveDC
RestoreDC
RectVisible
PtVisible
DeleteDC
CreateBitmap
DeleteObject
Escape
GetClipBox
GetDeviceCaps
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
SHChangeNotify
shlwapi
PathIsUNCA
PathFindFileNameA
PathFindExtensionA
PathStripToRootA
ole32
CoTaskMemFree
CoInitialize
CoCreateGuid
CoUninitialize
CoCreateInstance
oleaut32
VariantClear
SysAllocStringLen
VariantChangeType
VariantInit
SysFreeString
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 202KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 401KB - Virtual size: 411KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ