Static task
static1
Behavioral task
behavioral1
Sample
5f17e88fd313b8b748af293b1478d5cd3934e3a74c297432a4a74d9331125609.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
5f17e88fd313b8b748af293b1478d5cd3934e3a74c297432a4a74d9331125609.exe
Resource
win10v2004-20240802-en
General
-
Target
5f17e88fd313b8b748af293b1478d5cd3934e3a74c297432a4a74d9331125609
-
Size
7.4MB
-
MD5
ae015dac17151031f452991a12f1bec9
-
SHA1
0d0532423854635f680ebbd17415acde3b07d241
-
SHA256
5f17e88fd313b8b748af293b1478d5cd3934e3a74c297432a4a74d9331125609
-
SHA512
7536a9fb65e398e8ebe626047c082fb57282df725504536eb0aaeff375ce9ddcee89a033a2daf6d07d4132ae673a22d9402f511a2c5fe76f0b286f074c65d831
-
SSDEEP
196608:AxOnCDQ1Pd8EtTQDQpBt/6sJ0//89nxOYv2QSD:lnugdtMKB6svOYOQSD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f17e88fd313b8b748af293b1478d5cd3934e3a74c297432a4a74d9331125609
Files
-
5f17e88fd313b8b748af293b1478d5cd3934e3a74c297432a4a74d9331125609.exe windows:6 windows x86 arch:x86
faa61cf47143b850223e173e3e6d68c9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesExW
GetFileSizeEx
GetFileTime
CreateEventW
SuspendThread
GetCurrentThread
GetVersionExW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
GlobalGetAtomNameW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetCurrentDirectoryW
FindResourceExW
GetWindowsDirectoryW
GetProfileIntW
SearchPathW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
lstrcmpA
LockFile
SetUnhandledExceptionFilter
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
GetStringTypeW
LCMapStringW
GetTimeFormatW
GetDateFormatW
VirtualAlloc
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
GetFileType
SetStdHandle
HeapQueryInformation
RtlUnwind
OutputDebugStringW
SystemTimeToTzSpecificLocalTime
GetStringTypeExW
GetThreadLocale
lstrcmpiW
UnlockFile
IsProcessorFeaturePresent
GetFullPathNameW
GlobalFlags
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
GetSystemDirectoryW
EncodePointer
GlobalSize
VirtualQuery
VirtualProtect
RaiseException
CreateSemaphoreA
DeleteFiber
GetComputerNameExW
TlsGetValue
FindNextFileA
GetTimeZoneInformation
RemoveDirectoryW
QueryPerformanceFrequency
GetVersionExA
SetFilePointerEx
CreateProcessW
CreateMutexA
OpenSemaphoreA
SetFilePointer
InitializeCriticalSection
GetFileInformationByHandle
GetEnvironmentVariableW
SearchPathA
GetCurrentProcessId
GetModuleFileNameA
CreateFileA
GetFileSize
MoveFileExW
SystemTimeToFileTime
OutputDebugStringA
SetEndOfFile
ReleaseSemaphore
ReleaseMutex
OpenProcess
CreateEventA
CreateFileMappingA
InterlockedCompareExchange
MapViewOfFile
GetSystemDirectoryA
SwitchToThread
GetVolumeInformationA
CreateThread
GetModuleHandleA
GetLogicalDrives
GetCurrentThreadId
SetErrorMode
OpenMutexA
InterlockedExchangeAdd
GetDriveTypeA
FindNextFileW
InterlockedIncrement
QueryDosDeviceA
TlsSetValue
DefineDosDeviceA
QueryPerformanceCounter
GetEnvironmentVariableA
GetSystemInfo
GetVersion
ResumeThread
SwitchToFiber
ConvertThreadToFiber
GetProcessTimes
DuplicateHandle
LoadLibraryExA
UnmapViewOfFile
InterlockedDecrement
TlsAlloc
FindFirstFileA
SetThreadPriority
SetEvent
FindFirstFileW
FindClose
DisconnectNamedPipe
FlushFileBuffers
GetLocalTime
VerifyVersionInfoW
GetNativeSystemInfo
GetSystemTime
GetCurrentProcess
DeviceIoControl
GetVolumeInformationW
VerSetConditionMask
GetCommModemStatus
EscapeCommFunction
MulDiv
TerminateThread
CancelIoEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
PeekNamedPipe
LocalAlloc
CreateNamedPipeW
ConnectNamedPipe
CloseHandle
WriteFile
ReadFile
GetExitCodeThread
GetExitCodeProcess
TerminateProcess
SleepEx
WaitForSingleObject
lstrcpyW
WriteConsoleW
AllocConsole
GetComputerNameW
MoveFileW
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
GetModuleHandleW
GetTickCount64
QueueUserAPC
Sleep
CreateFileW
CreateDirectoryW
GetCommandLineW
GetStdHandle
LocalFree
ExitProcess
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
lstrcpynW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
WideCharToMultiByte
MultiByteToWideChar
FileTimeToSystemTime
CopyFileW
FormatMessageW
LoadLibraryW
LoadLibraryExW
GetProcAddress
GetModuleFileNameW
FreeLibrary
GetTickCount
GetSystemTimeAsFileTime
SetLastError
GetLastError
GetTempPathW
LocalFileTimeToFileTime
GetTempFileNameW
LoadResource
FileTimeToLocalFileTime
FindResourceW
SizeofResource
LockResource
UnhandledExceptionFilter
user32
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
IntersectRect
InflateRect
FillRect
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
ReleaseDC
MapVirtualKeyW
GetKeyNameTextW
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatW
SetCursor
ShowOwnedPopups
PostQuitMessage
TranslateMessage
GetMessageW
WindowFromPoint
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
CharUpperW
RealChildWindowFromPoint
GetDesktopWindow
ClientToScreen
IsDialogMessageW
CheckDlgButton
SetDlgItemTextW
GetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetParent
GetClassLongW
SetWindowLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
SendDlgItemMessageA
MessageBoxW
AdjustWindowRectEx
GetWindowRect
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
InsertMenuItemW
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
UnpackDDElParam
ReuseDDElParam
IsChild
IsMenu
SendMessageW
GetDlgItem
IsWindowEnabled
SetWindowTextW
GetWindowTextW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
GetWindow
GetWindowTextLengthW
GetScrollPos
SetScrollPos
RemoveMenu
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
GetSysColor
GetWindowThreadProcessId
SetRectEmpty
OffsetRect
InvalidateRect
GetSysColorBrush
LoadCursorW
CopyImage
GetAsyncKeyState
LoadMenuW
DeleteMenu
SetTimer
KillTimer
WaitMessage
PostThreadMessageW
CharNextW
CopyAcceleratorTableW
GetDC
InvalidateRgn
SetRect
IsRectEmpty
GetNextDlgGroupItem
MessageBeep
TrackMouseEvent
LoadImageW
BringWindowToTop
LoadAcceleratorsW
ScreenToClient
GetWindowLongW
IsWindowVisible
SetFocus
SetCapture
ReleaseCapture
EnableWindow
SetActiveWindow
DestroyIcon
GetDlgCtrlID
IsWindow
OpenClipboard
CloseClipboard
SetClipboardData
IsZoomed
EmptyClipboard
UpdateWindow
PostMessageW
IsIconic
GetSystemMetrics
GetSystemMenu
CreatePopupMenu
EnableMenuItem
AppendMenuW
DrawIcon
TabbedTextOutW
SetForegroundWindow
GetClientRect
GetCursorPos
GetMenuDefaultItem
DrawFocusRect
DrawIconEx
GetIconInfo
EnableScrollBar
HideCaret
LoadBitmapW
LoadIconW
UnregisterClassW
InvertRect
NotifyWinEvent
SetLayeredWindowAttributes
EnumDisplayMonitors
TranslateAcceleratorW
DrawStateW
SetClassLongW
SetWindowRgn
SetParent
DrawEdge
DrawFrameControl
DestroyCursor
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffW
ModifyMenuW
GetDoubleClickTime
SetMenuDefaultItem
LockWindowUpdate
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
UnionRect
FrameRect
CopyIcon
SetCursorPos
BeginPaint
gdi32
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
Escape
GetMapMode
SetRectRgn
DPtoLP
GetTextExtentPoint32W
StretchDIBits
GetBkColor
GetTextColor
GetRgnBox
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
CreateRectRgn
CreateSolidBrush
CreatePatternBrush
CreatePen
CreateHatchBrush
PatBlt
CreateRectRgnIndirect
CreateBitmap
DeleteObject
SetTextColor
SetBkColor
CreateDCW
CopyMetaFileW
SetPixelV
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetObjectW
EndPage
StartPage
StartDocW
GetTextMetricsW
GetDeviceCaps
DeleteDC
CombineRgn
EndDoc
CreateFontIndirectW
msimg32
AlphaBlend
TransparentBlt
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
GetUserNameW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
shell32
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteExW
SHGetSpecialFolderLocation
SHGetFileInfoW
DragQueryFileW
SHAppBarMessage
ShellExecuteW
SHGetDesktopFolder
DragFinish
Shell_NotifyIconW
comctl32
ImageList_AddMasked
shlwapi
PathIsUNCW
PathStripToRootW
UrlUnescapeW
PathFindFileNameW
PathRemoveFileSpecW
StrFormatKBSizeW
PathFindExtensionW
uxtheme
GetWindowTheme
DrawThemeText
GetThemeSysColor
GetThemePartSize
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeParentBackground
GetCurrentThemeName
ole32
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoInitializeEx
CreateStreamOnHGlobal
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateInstance
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
oleaut32
SafeArrayDestroy
SysStringLen
VariantClear
VariantCopy
VarDateFromStr
LoadTypeLi
OleCreateFontIndirect
SysAllocString
VariantChangeType
VarUdateFromDate
VarBstrFromDate
VariantTimeToSystemTime
VariantInit
SysAllocStringLen
SystemTimeToVariantTime
SysFreeString
oledlg
OleUIBusyW
ws2_32
getaddrinfo
inet_pton
WSACleanup
WSAStartup
closesocket
connect
htonl
htons
ntohl
recv
select
send
socket
gdiplus
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipDeleteGraphics
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipSetInterpolationMode
GdipGetImagePixelFormat
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
wininet
InternetWriteFile
InternetConnectW
InternetCloseHandle
InternetSetFilePointer
InternetReadFile
InternetOpenUrlW
HttpSendRequestW
HttpOpenRequestW
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetQueryOptionW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetOpenW
InternetQueryDataAvailable
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundW
mpr
WNetGetUniversalNameW
WNetGetConnectionW
netapi32
NetWkstaGetInfo
NetApiBufferFree
iphlpapi
GetAdaptersAddresses
Sections
.text Size: 5.4MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 278KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 260KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ