Static task
static1
Behavioral task
behavioral1
Sample
69a74a9dc60eb848e98aede67652e5c7071eb0f7468c2155a0aaf9c4e1394155.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
69a74a9dc60eb848e98aede67652e5c7071eb0f7468c2155a0aaf9c4e1394155.exe
Resource
win10v2004-20240802-en
General
-
Target
69a74a9dc60eb848e98aede67652e5c7071eb0f7468c2155a0aaf9c4e1394155
-
Size
3.3MB
-
MD5
4609f256d7b59516f3aa804b993a5bd6
-
SHA1
a6372f6904a302710f2adde75f701732aae7c68c
-
SHA256
69a74a9dc60eb848e98aede67652e5c7071eb0f7468c2155a0aaf9c4e1394155
-
SHA512
607e9cbcc2b6b500d71935a8aca53f8fe15dae260cf266122c97d330026bea21cf9b2f55a8333359f23f819828d3edce114b050b2c7f114a3c1143f060d60592
-
SSDEEP
49152:L6QwXkTj8yhlHnBBd5yPKpB/nu1DXETUum:LkXkXlhVdUc/0lum
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69a74a9dc60eb848e98aede67652e5c7071eb0f7468c2155a0aaf9c4e1394155
Files
-
69a74a9dc60eb848e98aede67652e5c7071eb0f7468c2155a0aaf9c4e1394155.exe windows:4 windows x86 arch:x86
434d6b4c02fa2b0d9a3f37c230f7d5c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FindWindowExA
GetDesktopWindow
GetWindow
IsWindowVisible
GetWindowTextA
GetClassNameA
GetWindowThreadProcessId
GetWindowTextLengthA
PostMessageA
CallWindowProcA
GetCursorPos
OpenClipboard
GetForegroundWindow
ClientToScreen
GetWindowLongA
SetWindowLongA
SetLayeredWindowAttributes
SetCursorPos
EnumDisplaySettingsA
UnhookWindowsHookEx
keybd_event
GetWindowRect
CharUpperA
FindWindowA
GetDlgItem
SetCapture
MapVirtualKeyA
AttachThreadInput
SetActiveWindow
GetGUIThreadInfo
ExitWindowsEx
mouse_event
GetParent
IsWindow
GetPropA
RemovePropA
DestroyWindow
SetPropA
CreateWindowExA
ShowWindow
IsZoomed
IsIconic
MoveWindow
GetDC
UpdateLayeredWindow
ReleaseDC
DefWindowProcA
ReleaseCapture
SetWindowsHookExA
CallNextHookEx
FlashWindowEx
EnableWindow
GetClientRect
GetWindowInfo
EnumWindows
SendInput
MsgWaitForMultipleObjects
ShowCursor
SendMessageTimeoutA
CreateWindowStationA
SetParent
UpdateWindow
SetTimer
GetFocus
GetKeyState
SetForegroundWindow
GetAncestor
SetWindowTextA
GetNextDlgTabItem
SetFocus
InvalidateRect
KillTimer
GetActiveWindow
GetDoubleClickTime
CharLowerA
wvsprintfA
SwapMouseButton
ChangeDisplaySettingsA
OpenIcon
EnumThreadWindows
ClipCursor
GetAsyncKeyState
GetKeyboardState
LoadCursorFromFileA
SetClassLongA
WindowFromPoint
ShowWindowAsync
SetWindowPos
GetDlgCtrlID
GetCaretPos
FlashWindow
PrintWindow
RegisterWindowMessageA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
PostThreadMessageA
UnloadKeyboardLayout
GetKeyboardLayoutList
SystemParametersInfoA
GetKeyboardLayout
ActivateKeyboardLayout
GetKeyboardLayoutNameA
LoadKeyboardLayoutA
MessageBoxA
wsprintfA
CloseClipboard
GetClipboardData
PostQuitMessage
SetClipboardData
EmptyClipboard
GetSystemMetrics
SetCursor
EndDialog
CreateDialogIndirectParamA
DestroyMenu
LoadStringA
GetSysColorBrush
LoadCursorA
LoadIconA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
CopyRect
GetTopWindow
GetCapture
WinHelpA
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
RegisterClipboardFormatA
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
GetClassLongA
GetMessageTime
GetMessagePos
GetWindowPlacement
UnregisterClassA
ValidateRect
PtInRect
GetMenuItemCount
TabbedTextOutA
DrawTextA
GrayStringA
GetLastActivePopup
EnumChildWindows
SendDlgItemMessageA
IsDialogMessageA
SendMessageA
IsWindowEnabled
ClientToScreen
EnumDisplaySettingsA
LoadImageA
SystemParametersInfoA
ShowWindow
IsWindowEnabled
TranslateAcceleratorA
GetKeyState
CopyAcceleratorTableA
PostQuitMessage
IsZoomed
GetClassInfoA
DefWindowProcA
GetSystemMenu
DeleteMenu
GetMenu
SetMenu
PeekMessageA
IsIconic
SetFocus
GetActiveWindow
GetWindow
DestroyAcceleratorTable
SetWindowRgn
GetMessagePos
ScreenToClient
ChildWindowFromPointEx
CopyRect
LoadBitmapA
WinHelpA
KillTimer
SetTimer
ReleaseCapture
GetCapture
SetCapture
GetScrollRange
SetScrollRange
SetScrollPos
SetRect
InflateRect
IntersectRect
DestroyIcon
PtInRect
OffsetRect
IsWindowVisible
EnableWindow
RedrawWindow
GetWindowLongA
SetWindowLongA
GetSysColor
SetActiveWindow
SetCursorPos
LoadCursorA
SetCursor
GetDC
FillRect
IsRectEmpty
ReleaseDC
IsChild
DispatchMessageA
SetForegroundWindow
GetWindowRect
EqualRect
UpdateWindow
ValidateRect
InvalidateRect
GetClientRect
GetFocus
GetParent
EnableMenuItem
GetSubMenu
GetDlgCtrlID
CreateAcceleratorTableA
CreateMenu
ModifyMenuA
GetMessageA
WindowFromPoint
DrawFocusRect
AppendMenuA
DrawFrameControl
TranslateMessage
LoadIconA
DrawTextA
SetWindowsHookExA
UnhookWindowsHookEx
EnumThreadWindows
GetWindowTextLengthA
GetClassNameA
EnumChildWindows
CallNextHookEx
CharUpperA
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
GetDlgItem
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetWindowPlacement
RegisterWindowMessageA
GetForegroundWindow
GetLastActivePopup
GetMessageTime
RemovePropA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
RegisterClassA
GetScrollPos
AdjustWindowRectEx
MapWindowPoints
SendDlgItemMessageA
ScrollWindowEx
IsDialogMessageA
MoveWindow
CheckMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetDesktopWindow
CreatePopupMenu
DrawIconEx
CreateIconFromResource
CreateIconFromResourceEx
CallWindowProcA
GetWindowDC
GetSysColorBrush
FrameRect
GetWindowTextA
GetMenuState
GetMenuItemID
GetMenuItemCount
SetWindowTextA
LoadStringA
CopyIcon
GetIconInfo
CreateIconIndirect
RegisterClipboardFormatA
DrawEdge
SetRectEmpty
DestroyMenu
GetTopWindow
wsprintfA
CloseClipboard
GetClipboardData
OpenClipboard
SetClipboardData
EmptyClipboard
GetSystemMetrics
GetCursorPos
MessageBoxA
SetWindowPos
SendMessageA
DestroyCursor
SetParent
IsWindow
PostMessageA
UnregisterClassA
kernel32
GetCPInfo
IsBadCodePtr
SetStdHandle
FlushFileBuffers
GetProcessVersion
FindResourceA
LoadResource
LockResource
GlobalGetAtomNameA
GetOEMCP
GlobalFindAtomA
SetLastError
GlobalFlags
MulDiv
GetStdHandle
GetFileType
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCommandLineA
RtlUnwind
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
IsBadWritePtr
LCMapStringW
RaiseException
HeapSize
GetACP
GlobalAddAtomA
GlobalReAlloc
GetEnvironmentVariableA
HeapDestroy
HeapCreate
GetVersion
lstrcpyA
lstrcatA
Process32Next
Process32First
HeapAlloc
GetProcessHeap
MultiByteToWideChar
GetCurrentProcess
VirtualQueryEx
WriteProcessMemory
DeleteFileA
lstrcmpiA
SetErrorMode
TlsGetValue
LocalReAlloc
FreeLibrary
WritePrivateProfileStringA
GetCurrentDirectoryA
SetLocalTime
SetFileAttributesA
RemoveDirectoryA
GetFileAttributesA
CreateDirectoryA
IsDebuggerPresent
CreateEventA
GetShortPathNameA
Module32Next
GetCurrentThreadId
VirtualAllocEx
FindClose
FindFirstFileA
FindNextFileA
GetStartupInfoA
GetTickCount
GetFileSize
GetUserDefaultLCID
IsBadReadPtr
HeapReAlloc
ExitProcess
VirtualFree
VirtualAlloc
lstrcpynA
IsDBCSLeadByteEx
InterlockedIncrement
InterlockedDecrement
GetLongPathNameA
WriteFile
DebugActiveProcess
HeapFree
GlobalFree
GlobalSize
GlobalUnlock
GlobalLock
GlobalAlloc
GetExitCodeProcess
ReadFile
PeekNamedPipe
CreateProcessA
CreatePipe
GetComputerNameA
GetVersionExA
DeviceIoControl
CreateFileA
Sleep
VirtualProtectEx
SetProcessWorkingSetSize
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
Thread32Next
Thread32First
TerminateThread
VirtualFreeEx
GetModuleFileNameA
OpenThread
CreateWaitableTimerA
SetWaitableTimer
GetCurrentProcessId
ResumeThread
WaitForSingleObject
CopyFileA
InitializeCriticalSection
GetProcessTimes
OpenEventA
GetDateFormatA
GetTimeFormatA
CreateThread
GetLastError
SetFilePointer
SetEndOfFile
FormatMessageA
MoveFileA
GetTempPathA
GetSystemDirectoryA
GetWindowsDirectoryA
ReadProcessMemory
OpenProcess
FileTimeToSystemTime
GetLocalTime
LCMapStringA
lstrlenA
GetCurrentThread
GetModuleHandleA
GetExitCodeThread
CreateRemoteThread
lstrcpyn
GetProcAddress
LoadLibraryA
LocalFree
WideCharToMultiByte
RtlMoveMemory
LocalAlloc
CloseHandle
Module32First
CreateToolhelp32Snapshot
TlsSetValue
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
RtlFillMemory
lstrcmpA
SuspendThread
SetThreadContext
TerminateProcess
GlobalDeleteAtom
TlsAlloc
GlobalHandle
TlsFree
SetHandleCount
GetVolumeInformationA
GetThreadTimes
VirtualAlloc
LCMapStringW
LCMapStringA
SetEnvironmentVariableA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetFileType
SetStdHandle
GetACP
HeapSize
IsBadWritePtr
TerminateProcess
GetLocalTime
GetSystemTime
RaiseException
RtlUnwind
GetStartupInfoA
GetOEMCP
GetCPInfo
GetProcessVersion
SetErrorMode
GlobalFlags
GetCurrentThread
GetFileTime
GetFileSize
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
lstrcmpA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
lstrcpynA
FileTimeToLocalFileTime
LocalFree
InterlockedDecrement
InterlockedIncrement
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
IsBadReadPtr
IsBadCodePtr
InterlockedExchange
DeleteFileA
GetFileAttributesA
CreateDirectoryA
SetCurrentDirectoryA
GetVolumeInformationA
GetModuleHandleA
GetProcAddress
MulDiv
GetCommandLineA
GetTickCount
WaitForSingleObject
CloseHandle
FindClose
FindFirstFileA
GetTempPathA
GlobalUnlock
GlobalLock
GlobalAlloc
Sleep
CreateEventA
CreateThread
WritePrivateProfileStringA
GetVersionExA
GetLastError
LoadLibraryA
FreeLibrary
GetFullPathNameA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
GlobalReAlloc
FindNextFileA
lstrcpyA
WinExec
lstrlenA
lstrcatA
InitializeCriticalSection
DeleteCriticalSection
GlobalFree
GlobalSize
ExitProcess
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameA
ReadFile
LockResource
LoadResource
FindResourceA
SetEvent
CreateFileA
WaitForMultipleObjects
WriteFile
GetProfileStringA
LeaveCriticalSection
EnterCriticalSection
ReleaseSemaphore
ResumeThread
CreateSemaphoreA
lstrcmpiA
GetVersion
LoadLibraryExA
GetWindowsDirectoryA
Beep
GetTimeZoneInformation
SetLastError
FileTimeToSystemTime
ole32
CoInitialize
CoCreateInstance
CoUninitialize
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
OleRun
CLSIDFromString
OleUninitialize
OleInitialize
shell32
ShellExecuteA
SHGetFileInfoA
SHChangeNotify
SHFileOperationA
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetSpecialFolderPathA
ShellExecuteA
Shell_NotifyIconA
shlwapi
PathFindExtensionA
PathIsDirectoryA
PathIsDirectoryEmptyA
PathIsSystemFolderA
PathRenameExtensionA
PathRemoveBlanksA
PathMakeSystemFolderA
PathUnmakeSystemFolderA
PathFileExistsA
PathFindFileNameA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
gdi32
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
CreateBitmap
PtVisible
GetClipBox
ExtTextOutA
Escape
GetObjectA
CreateCompatibleBitmap
GetPixel
TextOutA
SetTextColor
SetBkMode
RectVisible
CreateCompatibleDC
CreateFontIndirectA
GetTextExtentPointA
CreateRectRgn
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
SetMapMode
GetDeviceCaps
SetBkColor
GetStockObject
RestoreDC
SaveDC
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetViewportExtEx
ExtSelectClipRgn
ExcludeClipRect
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
GetStretchBltMode
GetBkColor
GetBkMode
GetTextColor
CreateRoundRectRgn
CreateEllipticRgn
PathToRegion
EndPath
BeginPath
GetWindowOrgEx
GetViewportOrgEx
GetWindowExtEx
GetDIBits
RealizePalette
SelectPalette
StretchBlt
CreatePalette
GetSystemPaletteEntries
CreateDIBitmap
DeleteObject
SelectClipRgn
CreatePolygonRgn
GetClipRgn
SetStretchBltMode
SetPixel
CreateDIBSection
CreateRectRgnIndirect
SetBkColor
LineTo
MoveToEx
SetTextColor
CreateEllipticRgnIndirect
GetTextMetricsA
FrameRgn
OffsetRgn
Ellipse
GetPolyFillMode
CreateCompatibleBitmap
CreateDCA
CreateBitmap
Rectangle
LPtoDP
DPtoLP
GetCurrentObject
RoundRect
Arc
GetTextExtentPoint32A
GetDeviceCaps
SelectObject
GetObjectA
CreatePen
PatBlt
CombineRgn
CreateRectRgn
FillRgn
CreateSolidBrush
GetStockObject
CreateFontIndirectA
EndPage
EndDoc
DeleteDC
StartDocA
StartPage
BitBlt
GetPixel
GetROP2
SetBkMode
CreateCompatibleDC
gdiplus
GdiplusStartup
GdipDeleteGraphics
GdipSetSmoothingMode
GdipDrawPath
GdipResetClip
GdipDeletePen
GdipDeletePath
GdipSetClipHrgn
GdipDrawRectangle
GdipCreatePen1
GdipCreateFromHDC
wininet
HttpSendRequestA
InternetCloseHandle
InternetTimeToSystemTime
InternetSetCookieA
HttpQueryInfoA
InternetReadFile
InternetTimeFromSystemTime
HttpOpenRequestA
InternetOpenA
InternetConnectA
InternetCloseHandle
oleaut32
RegisterTypeLi
LHashValOfNameSys
LoadTypeLi
VarR8FromBool
VarR8FromCy
SysFreeString
SafeArrayGetElemsize
SafeArrayCreate
SysAllocString
VariantClear
SafeArrayDestroy
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
VariantTimeToSystemTime
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
VariantInit
VariantChangeType
SystemTimeToVariantTime
SafeArrayGetDim
SafeArrayUnaccessData
LoadTypeLi
RegisterTypeLi
UnRegisterTypeLi
dbghelp
MakeSureDirectoryPathExists
advapi32
RegCreateKeyA
RegCloseKey
RegOpenKeyA
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptReleaseContext
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegEnumValueA
RegFlushKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
LookupAccountSidA
GetUserNameA
CryptAcquireContextA
CryptCreateHash
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryValueA
comdlg32
ChooseFontA
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
GetFileTitleA
ChooseColorA
psapi
GetModuleFileNameExA
winhttp
WinHttpTimeFromSystemTime
WinHttpTimeToSystemTime
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
DocumentPropertiesA
OpenPrinterA
ClosePrinter
comctl32
ord17
ImageList_GetImageCount
ImageList_SetBkColor
ImageList_GetIcon
_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_Read
ImageList_GetImageInfo
ImageList_Duplicate
oledlg
ord8
rasapi32
RasHangUpA
RasGetConnectStatusA
winmm
midiOutUnprepareHeader
midiStreamClose
midiOutReset
midiStreamStop
midiStreamOut
midiOutPrepareHeader
midiStreamProperty
midiStreamOpen
midiStreamRestart
waveOutOpen
waveOutGetNumDevs
waveOutClose
waveOutReset
waveOutPause
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
msimg32
GradientFill
ws2_32
inet_ntoa
WSAStartup
WSACleanup
select
send
closesocket
WSAAsyncSelect
recvfrom
ioctlsocket
recv
getpeername
accept
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 351KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 432KB - Virtual size: 651KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ