Static task
static1
Behavioral task
behavioral1
Sample
7a3758d694b752a97e7638315761045ba4a8e18b7bf84b804d9d9025acd4d19d.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7a3758d694b752a97e7638315761045ba4a8e18b7bf84b804d9d9025acd4d19d.exe
Resource
win10v2004-20240802-en
General
-
Target
7a3758d694b752a97e7638315761045ba4a8e18b7bf84b804d9d9025acd4d19d
-
Size
2.8MB
-
MD5
8ad6983ae97dc039513fd73b5cb9c847
-
SHA1
a5022f77bf164677bd2552fcde4ac28d9dcbdddd
-
SHA256
7a3758d694b752a97e7638315761045ba4a8e18b7bf84b804d9d9025acd4d19d
-
SHA512
651f93e4a771b5a76a161eb2310f8d9e66b0ce4d44cd0ca90d589451ca345ae39d55ff4923c5bdbdc5f93ccdc4ae94537fc62a44112e40144c3697e0a2156d96
-
SSDEEP
49152:u5VxdZHMeoDZbrQEOpye8ZNHvVqN00LrDiB0c:u5VeNHvVWnA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a3758d694b752a97e7638315761045ba4a8e18b7bf84b804d9d9025acd4d19d
Files
-
7a3758d694b752a97e7638315761045ba4a8e18b7bf84b804d9d9025acd4d19d.exe windows:4 windows x86 arch:x86
969ab3d9fb4af6b0bcf254fe84b3720f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
FatalAppExitA
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
HeapAlloc
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
RtlUnwind
ExitProcess
QueryPerformanceCounter
GetExitCodeThread
GetStartupInfoW
GlobalGetAtomNameW
SetErrorMode
SizeofResource
GetProcessVersion
WritePrivateProfileStringW
GetPrivateProfileIntW
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GlobalFlags
GlobalSize
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetFullPathNameA
SetEnvironmentVariableW
GetDiskFreeSpaceW
DefineDosDeviceW
GetDiskFreeSpaceExW
SetVolumeLabelW
QueryDosDeviceA
GetDriveTypeA
PulseEvent
ReleaseSemaphore
SleepEx
OpenFileMappingW
CreateFileMappingW
MoveFileExA
CreateDirectoryW
RemoveDirectoryA
CopyFileA
CreateDirectoryA
DeleteFileA
SetFileAttributesA
GetEnvironmentVariableW
GetTempPathW
GetTempPathA
MoveFileA
FindResourceA
GlobalAddAtomA
GetProfileStringA
VirtualProtect
GetFileAttributesA
GetSystemDirectoryA
GetWindowsDirectoryA
CreateFileMappingA
MapViewOfFile
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
EnumResourceTypesW
EnumResourceNamesW
VirtualQuery
WaitForMultipleObjects
CreateSemaphoreW
CreateMutexW
OpenSemaphoreW
ReleaseMutex
GetQueuedCompletionStatus
PostQueuedCompletionStatus
DisconnectNamedPipe
CreateIoCompletionPort
ResetEvent
CancelIo
GetOverlappedResult
CreateNamedPipeW
ConnectNamedPipe
WaitNamedPipeW
SetNamedPipeHandleState
VirtualQueryEx
InterlockedExchangeAdd
InterlockedExchange
InterlockedCompareExchange
CreateProcessA
GetExitCodeProcess
ReadProcessMemory
GetThreadPriority
TerminateThread
AllocConsole
WriteConsoleW
FreeConsole
SetThreadLocale
GetComputerNameW
OutputDebugStringA
LoadLibraryExW
LoadLibraryExA
EnumResourceLanguagesW
UnmapViewOfFile
GetCurrentDirectoryA
GetVersionExW
FindResourceExW
OutputDebugStringW
FormatMessageA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetShortPathNameW
lstrcmpiW
GetThreadLocale
GetStringTypeExW
GetFullPathNameW
lstrcpynW
GetVolumeInformationW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
DuplicateHandle
MulDiv
SetLastError
LoadLibraryA
GetVersion
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
lstrcpyW
GlobalFree
LockResource
FindResourceW
LoadResource
CreateEventW
SuspendThread
SetThreadPriority
ResumeThread
WaitForSingleObject
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalLock
GlobalUnlock
FormatMessageW
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetPrivateProfileStringW
lstrlenW
TerminateProcess
SetPriorityClass
GetPriorityClass
GetDriveTypeW
ExpandEnvironmentStringsW
GetLogicalDrives
QueryDosDeviceW
ExpandEnvironmentStringsA
FreeLibrary
MoveFileW
CopyFileW
SetFileAttributesW
lstrcmpW
RemoveDirectoryW
GetSystemInfo
FindFirstFileW
FindNextFileW
FindFirstFileA
FindNextFileA
FindClose
LoadLibraryW
LocalFree
OpenProcess
GetCurrentProcess
GetLastError
CreateThread
GetModuleHandleA
CreateFileA
GetFileInformationByHandle
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleW
GetProcAddress
Sleep
OpenMutexW
GetProfileIntW
GetProfileStringW
MoveFileExW
CreateFileW
ReadFile
GetFileAttributesW
DeleteFileW
SetCurrentDirectoryW
CreateProcessW
OpenEventW
SetEvent
GetCurrentProcessId
CloseHandle
GetCommandLineW
GetWindowsDirectoryW
GetCurrentDirectoryW
GetModuleFileNameW
GetSystemDirectoryW
GetTickCount
HeapFree
user32
IsDialogMessageW
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
SetWindowTextW
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
MoveWindow
ShowWindow
wvsprintfW
ClientToScreen
CheckDlgButton
GetDC
EqualRect
DeferWindowPos
DestroyIcon
PostThreadMessageW
RegisterClipboardFormatW
LoadIconW
SetForegroundWindow
mouse_event
GetWindowRect
SendMessageW
DrawIcon
GetClientRect
MessageBoxA
GetSystemMetrics
IsIconic
EnableWindow
ExitWindowsEx
CloseDesktop
SetThreadDesktop
GetThreadDesktop
OpenDesktopW
OpenInputDesktop
GetUserObjectInformationW
GetProcessWindowStation
CloseWindowStation
SetProcessWindowStation
OpenWindowStationW
MessageBoxW
EnumDesktopWindows
GetWindowThreadProcessId
GetWindowLongW
GetParent
IsWindowVisible
EnumWindows
EnumChildWindows
GetDesktopWindow
UnregisterClassW
ReleaseDC
CharToOemBuffA
OemToCharBuffA
MsgWaitForMultipleObjects
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawTextA
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutW
DrawTextW
GrayStringW
LoadStringW
CharUpperW
InsertMenuW
AppendMenuW
GetMenuStringW
RemoveMenu
GetClassNameW
PtInRect
LoadCursorW
SetCapture
ReleaseCapture
WaitMessage
WindowFromPoint
DeleteMenu
GetSysColorBrush
GetDialogBaseUnits
CharNextW
CopyAcceleratorTableW
SetRect
GetNextDlgGroupItem
MessageBeep
DestroyMenu
SetRectEmpty
LoadAcceleratorsW
TranslateAcceleratorW
DrawFocusRect
GetClassInfoA
DefDlgProcA
DefWindowProcA
LoadMenuW
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
InflateRect
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
GetWindowTextA
GetWindowTextW
GetWindowTextLengthW
PostMessageW
PostQuitMessage
ShowOwnedPopups
SetCursor
IsWindowEnabled
GetLastActivePopup
SetWindowsHookExW
GetCursorPos
PeekMessageW
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpW
wsprintfW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetDlgCtrlID
CreateWindowExW
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetForegroundWindow
SetWindowLongW
RegisterWindowMessageW
OffsetRect
IntersectRect
SystemParametersInfoW
GetWindowPlacement
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
gdi32
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
CopyMetaFileW
CreateDCW
DeleteObject
GetTextMetricsW
CreateFontIndirectW
GetTextColor
GetBkColor
DPtoLP
LPtoDP
CreateRectRgn
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
CreateBitmap
GetDCOrgEx
GetClipBox
SetTextColor
SetBkColor
GetObjectW
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
GetMapMode
GetClipRgn
ExtTextOutA
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateDIBitmap
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
StartDocW
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetBitmapBits
GetObjectA
CreateCompatibleBitmap
CreateDCA
GetCurrentPositionEx
ArcTo
GetTextExtentPoint32W
SetArcDirection
comdlg32
GetOpenFileNameW
GetSaveFileNameW
GetFileTitleW
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
advapi32
InitializeAcl
ReportEventA
DeregisterEventSource
RegCreateKeyExA
RegCreateKeyA
OpenSCManagerW
OpenServiceW
CloseServiceHandle
QueryServiceStatus
RegOpenKeyA
InitializeSecurityDescriptor
GetLengthSid
AddAccessAllowedAce
GetAce
SetSecurityDescriptorDacl
LookupAccountNameW
RegSetKeySecurity
SetFileSecurityW
RegQueryValueW
RegSetValueW
RegEnumKeyW
RegSetValueExA
RegQueryValueExA
RegCreateKeyExW
RegConnectRegistryW
RegQueryInfoKeyW
RegEnumValueW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegOpenKeyW
GetUserNameW
GetTokenInformation
LookupAccountSidW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegisterEventSourceA
shell32
DragQueryFileW
DragFinish
SHGetFileInfoW
DragAcceptFiles
ExtractIconW
comctl32
ord17
oledlg
OleUIBusyW
ole32
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleRun
CoDisconnectObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
ReleaseStgMedium
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
CoInitialize
CoInitializeEx
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CreateBindCtx
CoTaskMemAlloc
OleDuplicateData
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CreateStreamOnHGlobal
olepro32
ord253
oleaut32
SetErrorInfo
GetErrorInfo
SafeArrayUnaccessData
SafeArrayAccessData
CreateErrorInfo
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayGetUBound
VariantInit
LoadTypeLi
SysStringLen
SysReAllocStringLen
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromDate
VarDateFromStr
VarBstrFromCy
VarCyFromStr
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
SysAllocString
VariantCopy
SafeArrayRedim
VariantClear
mpr
WNetGetConnectionW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
rpcrt4
RpcStringFreeA
UuidToStringA
UuidFromStringW
UuidCreate
UuidToStringW
RpcStringFreeW
ws2_32
ntohl
ntohs
listen
shutdown
closesocket
connect
socket
getpeername
htons
htonl
bind
accept
setsockopt
WSACleanup
WSAStartup
getsockname
getsockopt
send
recv
sendto
WSAGetLastError
WSAIoctl
recvfrom
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 280KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 148KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 132KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ