Static task
static1
Behavioral task
behavioral1
Sample
7f7a2d4d1f96668bd1a4532cfd925ec62a11c14615d455471976516c7263f3ac.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7f7a2d4d1f96668bd1a4532cfd925ec62a11c14615d455471976516c7263f3ac.exe
Resource
win10v2004-20240802-en
General
-
Target
7f7a2d4d1f96668bd1a4532cfd925ec62a11c14615d455471976516c7263f3ac
-
Size
2.8MB
-
MD5
e5402e0d8dfa46654d6961a9d389a6d5
-
SHA1
3fba79c93d59bda085a1240f496f321c47fb17c1
-
SHA256
7f7a2d4d1f96668bd1a4532cfd925ec62a11c14615d455471976516c7263f3ac
-
SHA512
c6ce7a6ad09617db1ef13ec6982dbbe5805455228766dcd9c1643e31b078deede0407356b615a6363051e19f6ca32d50dc13ae7613ab5551875c1f650ee1db1b
-
SSDEEP
49152:tc0+k0fU7FnDmoUYY7Dg6GsIx9E6wQIzei83xdxY+L4rzCtkJjZbGDFFEgb07vb:jxszer32+cbAzID
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f7a2d4d1f96668bd1a4532cfd925ec62a11c14615d455471976516c7263f3ac
Files
-
7f7a2d4d1f96668bd1a4532cfd925ec62a11c14615d455471976516c7263f3ac.exe windows:5 windows x86 arch:x86
d80fdba1a3b35e5a38657330b5dd73d3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
soundlib
CreateSoundLib
winmm
timeGetTime
ss3dgfunc
_SetRotationXMatrix@8
_Normalize@8
_SetRotationYMatrix@8
_CalcDistance@8
_RotatePositionWithPivot@24
_TransformV3TOV4@16
_VECTOR3_MULEQU_FLOAT@8
_TransformVector3_VPTR2@16
_WriteTGA@24
_COLORtoDWORD@16
_VECTOR3Length@4
_CrossProduct@12
_MatrixMultiply2@12
_SetInverseMatrix@8
_VECTOR3_ADD_VECTOR3@12
wsock32
connect
gethostbyname
inet_addr
WSAStartup
send
WSACleanup
closesocket
htons
socket
ioctlsocket
recv
dinput8
DirectInput8Create
wininet
InternetConnectA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetReadFile
InternetOpenA
kernel32
LocalFree
HeapAlloc
HeapFree
EncodePointer
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
LoadLibraryExW
OutputDebugStringW
GetModuleFileNameW
VirtualQuery
GetLocalTime
OpenFile
CloseHandle
GetFileSize
IsDBCSLeadByte
GetModuleFileNameA
DeleteFileA
GetTickCount
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
WideCharToMultiByte
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
DecodePointer
WaitForSingleObject
ReadFile
GetCurrentDirectoryA
CreatePipe
GetStartupInfoA
CreateProcessA
lstrlenA
SetCurrentDirectoryA
CreateToolhelp32Snapshot
Process32First
Module32First
Module32Next
Process32Next
lstrcmpA
lstrcpyA
OutputDebugStringA
FreeLibrary
LoadLibraryA
GetProcAddress
CreateFileA
CreateEventA
CreateThread
SetEvent
ResumeThread
GetThreadContext
OpenProcess
GetPriorityClass
GetLogicalDriveStringsA
lstrcmpiA
QueryDosDeviceA
lstrcatA
WaitForMultipleObjects
GetModuleHandleA
GetCurrentProcess
VerSetConditionMask
VerifyVersionInfoA
ExitProcess
GetProcessId
GetCurrentProcessId
GetProcessHeap
GetCurrentThreadId
IsDebuggerPresent
InterlockedCompareExchange
MulDiv
WriteFile
CreateDirectoryA
FindFirstFileA
RemoveDirectoryA
FindNextFileA
FindClose
MultiByteToWideChar
InterlockedExchange
WritePrivateProfileStringA
GetPrivateProfileStringA
GetTempPathA
CopyFileA
SetFileAttributesA
GetVersionExA
GetSystemTime
DuplicateHandle
user32
PeekMessageA
RegisterHotKey
ReleaseDC
GetDC
ReleaseCapture
SetCapture
ScreenToClient
GetCursorPos
GetClipboardData
IsClipboardFormatAvailable
OffsetRect
FindWindowExA
EnumWindows
GetWindowTextA
GetWindowThreadProcessId
FindWindowA
CopyRect
CloseClipboard
SetClipboardData
TranslateMessage
OpenClipboard
PostMessageA
CharPrevA
CharNextA
MessageBoxA
SetRect
wsprintfA
GetClientRect
SetCursor
LoadCursorFromFileA
DefWindowProcA
ShowCursor
UpdateWindow
ShowWindow
EmptyClipboard
CreateWindowExA
GetSystemMetrics
DispatchMessageA
RegisterClassExA
LoadIconA
gdi32
CreateFontIndirectA
SelectObject
GetTextExtentPoint32A
GetDeviceCaps
GetStockObject
DeleteObject
advapi32
RegOpenKeyExA
LookupAccountSidA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegQueryInfoKeyA
GetUserNameA
GetTokenInformation
shell32
ShellExecuteA
ole32
CoInitialize
CoFreeUnusedLibraries
CoUninitialize
CoCreateInstance
oleaut32
VariantClear
freeimage
_FreeImage_Unload@4
_FreeImage_SaveJPEG@12
_FreeImage_GetInfo@4
_FreeImage_ConvertTo16Bits565@4
_FreeImage_Load@12
_FreeImage_GetBits@4
msvcp120
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_BADOFF@std@@3_JB
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Syserror_map@std@@YAPBDH@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_Swap_all@_Container_base12@std@@QAEXAAU12@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Winerror_map@std@@YAPBDH@Z
msvcr120
_vsnprintf
_beginthreadex
realloc
_mbsnbicmp
toupper
atof
strtok
strncat
?terminate@@YAXXZ
_findclose
_findnext64i32
_findfirst64i32
strcpy_s
free
malloc
_except1
_localtime64
_atoi64
_i64toa
fputs
srand
_itoa_s
ftell
_pgmptr
ungetc
fgets
??0exception@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
_lock_file
_unlock_file
memcpy_s
_fseeki64
fgetpos
fsetpos
setvbuf
fflush
isalpha
exit
_access
_mkdir
_strnicmp
sprintf_s
strcpy
_wassert
??1type_info@@UAE@XZ
_lock
_unlock
_calloc_crt
_onexit
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__getmainargs
__set_app_type
_exit
_cexit
_ismbblead
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_acmdln
_fmode
_commode
_except_handler4_common
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
_itoa
memset
__CxxFrameHandler3
_CxxThrowException
_CIatan2
_libm_sse2_cos_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
_libm_sse2_tan_precise
memcpy
__dllonexit
??3@YAXPAX@Z
??2@YAPAXI@Z
??_V@YAXPAX@Z
strncpy
fopen
fprintf
fclose
_purecall
rand
sprintf
fwrite
sscanf
fseek
fread
atoi
memmove
vsprintf
fscanf
_strupr
printf
atol
strstr
fgetc
feof
fputc
_time64
strrchr
fopen_s
strncmp
memchr
psapi
GetProcessImageFileNameA
iphlpapi
GetAdaptersInfo
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 660KB - Virtual size: 987KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ