Static task
static1
Behavioral task
behavioral1
Sample
0007fd27842cef63899ecf1c107fd4e0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0007fd27842cef63899ecf1c107fd4e0N.exe
Resource
win10v2004-20240802-en
General
-
Target
0007fd27842cef63899ecf1c107fd4e0N.exe
-
Size
1.7MB
-
MD5
0007fd27842cef63899ecf1c107fd4e0
-
SHA1
0cb8a2014720e2f329981c91b722fb4a0d609619
-
SHA256
46b4c8e23f02a6be19abe6302f7528f76d544e8763ee4d7ecc7246061c50c4d5
-
SHA512
7178fa24cb0831ad8100ab5af1ebc7fd9ecb3aa5ceb30a38bf02c85d52df86401c3ebb73d6189678b257066accdfe3584249f5852deb27178db6e527877c02c7
-
SSDEEP
24576:A39VT39Vdr39Vm39VgT39Vx39V7K39V9z739VhIpqzdd2LUv0ke0+iZg0SOcDQ07:W3pLIY9/IZthuTHNCKwj7K7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0007fd27842cef63899ecf1c107fd4e0N.exe
Files
-
0007fd27842cef63899ecf1c107fd4e0N.exe.exe windows:4 windows x86 arch:x86
fd840b33535761c2c64027425f55ae2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
comctl32
_TrackMouseEvent
InitCommonControlsEx
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
kernel32
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetPrivateProfileSectionW
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetThreadLocale
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExA
GetVolumeInformationW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsValidCodePage
IsValidLocale
GetFileTime
LCMapStringW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
lstrcmpA
lstrcmpW
lstrlenA
lstrlenW
MulDiv
OutputDebugStringW
RaiseException
ReadFile
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
WriteProcessMemory
lstrcpyA
GetEnvironmentVariableA
GetVersion
RtlUnwind
GetFileSize
GetFileAttributesW
GetExitCodeThread
GetEnvironmentVariableW
GetEnvironmentStringsW
GetEnvironmentStrings
GetDateFormatA
GetCPInfo
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineW
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushFileBuffers
FindResourceW
FindResourceExW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitProcess
EnumSystemLocalesA
EnumResourceLanguagesW
DuplicateHandle
DeleteCriticalSection
CreateProcessW
CreateFileW
CreateFileA
CreateDirectoryW
ConvertDefaultLocale
CompareStringW
CompareStringA
CloseHandle
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetVersionExW
GetCurrentProcess
LCMapStringA
user32
LoadBitmapW
LoadCursorFromFileW
LoadCursorW
LoadIconW
LoadImageW
LoadMenuW
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
MoveWindow
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
RemovePropW
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetCursor
SetFocus
SetForegroundWindow
SetMenuItemBitmaps
SetPropW
SetRect
SetRectEmpty
SetScrollInfo
SetTimer
SetWindowContextHelpId
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
TabbedTextOutW
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WindowFromPoint
WinHelpW
VkKeyScanA
KillTimer
GetWindowTextLengthW
GetWindowRgn
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetSubMenu
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDesktopWindow
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetActiveWindow
FindWindowW
FillRect
EqualRect
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DefWindowProcW
CreateWindowExW
CreatePopupMenu
CreateDialogIndirectParamW
CopyRect
CopyAcceleratorTableW
ClientToScreen
CheckMenuItem
CharUpperW
CharNextW
CallWindowProcW
IsWindowVisible
IsWindowEnabled
IsRectEmpty
IsIconic
LoadStringW
ReleaseDC
GetDC
IsDialogMessageW
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
InflateRect
GrayStringW
GetWindowThreadProcessId
GetWindowTextW
GetDlgCtrlID
gdi32
DeleteDC
DeleteObject
DPtoLP
Escape
ExtCreateRegion
ExtSelectClipRgn
ExtTextOutW
FrameRgn
GetBkColor
GetClipBox
GetMapMode
GetObjectW
GetRegionData
GetRgnBox
CreateCompatibleDC
GetTextColor
GetTextExtentPoint32W
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
OffsetViewportOrgEx
PtVisible
RectVisible
RestoreDC
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetDIBColorTable
SetMapMode
SetTextColor
CreateCompatibleBitmap
CreateBitmap
CombineRgn
GetDeviceCaps
CreateRectRgnIndirect
OffsetRgn
CreateDIBSection
GetStockObject
CreateFontIndirectW
advapi32
RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegOpenKeyW
shell32
CommandLineToArgvW
ShellExecuteExW
Shell_NotifyIconW
ole32
OleIsCurrentClipboard
OleInitialize
OleFlushClipboard
CreateILockBytesOnHGlobal
CoTaskMemFree
OleUninitialize
CoRevokeClassObject
CoRegisterMessageFilter
CoGetClassObject
CoFreeUnusedLibraries
CLSIDFromString
CLSIDFromProgID
StringFromIID
StgOpenStorageOnILockBytes
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
shlwapi
PathIsUNCW
PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathFileExistsW
PathRemoveFileSpecW
PathIsDirectoryW
PathAddBackslashW
PathAppendW
Sections
.text Size: 420KB - Virtual size: 416KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.adata8 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
osgm924 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE