Static task
static1
Behavioral task
behavioral1
Sample
ca4f4520ba35300dfcce541fc4d6c2f0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ca4f4520ba35300dfcce541fc4d6c2f0N.exe
Resource
win10v2004-20240802-en
General
-
Target
ca4f4520ba35300dfcce541fc4d6c2f0N.exe
-
Size
426KB
-
MD5
ca4f4520ba35300dfcce541fc4d6c2f0
-
SHA1
24ce940989723d5ef4833050ca0c2ba2b545ffa0
-
SHA256
1ac99e86eea1cc4f380072d1fbf240c6e023737cb3216c70f993ed557a8e051b
-
SHA512
e68aa748ed53bd1d588e2b7eeda7877be528c26a5a1e61535f082a12d18a035c5dc63bb920f6dfe83e5a60a4f55a9029a04eb0f47b9b1c141f4c70bbe1895ee2
-
SSDEEP
12288:DRNnQSiEXuoqW/RK7y5HJvJeSaNdwPTq5C:ISiEXuoqW/RK7GliNdkTj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca4f4520ba35300dfcce541fc4d6c2f0N.exe
Files
-
ca4f4520ba35300dfcce541fc4d6c2f0N.exe.exe windows:5 windows x86 arch:x86
4bbe149a473537cabffeffb15ad5e4e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsValidLocale
LoadLibraryA
InitializeCriticalSectionAndSpinCount
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
WinExec
LockResource
GlobalFree
GlobalUnlock
CreateFileW
GetFileAttributesW
SizeofResource
GlobalAlloc
WriteFile
GlobalLock
CreateProcessW
LoadResource
FindResourceW
FindResourceExW
GetProcAddress
lstrlenW
GetModuleFileNameW
Sleep
GetCurrentProcess
GetLastError
GetLocaleInfoA
GetUserDefaultLCID
WritePrivateProfileStringW
EnumSystemLocalesA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
SetFilePointer
GetConsoleMode
GetConsoleCP
ReadFile
IsValidCodePage
GetOEMCP
GetACP
GetTickCount
QueryPerformanceCounter
GetPrivateProfileStringW
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
HeapCreate
VirtualAlloc
VirtualFree
ExitProcess
GetSystemTimeAsFileTime
GetModuleFileNameA
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
GetStartupInfoA
GetFileAttributesA
GetCurrentProcessId
RtlUnwind
GetCPInfo
LCMapStringA
LCMapStringW
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetModuleHandleA
user32
PostQuitMessage
LoadImageW
MessageBoxW
SendMessageW
shell32
ShellExecuteA
SHGetSpecialFolderLocation
ShellExecuteW
SHGetPathFromIDListW
ole32
CoInitialize
CoUninitialize
CoCreateInstance
duilib
?MessageLoop@CPaintManagerUI@DuiLib@@SAXXZ
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?ShowWindow@CWindowWnd@DuiLib@@QAEX_N0@Z
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
??0WindowImplBase@DuiLib@@QAE@XZ
??1WindowImplBase@DuiLib@@UAE@XZ
??0CDuiString@DuiLib@@QAE@PB_WH@Z
??1CDuiString@DuiLib@@QAE@XZ
??8CDuiString@DuiLib@@QBE_NPB_W@Z
?GetInstancePath@CPaintManagerUI@DuiLib@@SA?AVCDuiString@2@XZ
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
?OnFinalMessage@WindowImplBase@DuiLib@@UAEXPAUHWND__@@@Z
?GetMessageMap@WindowImplBase@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ
?OnClick@WindowImplBase@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?GetClassStyle@WindowImplBase@DuiLib@@UBEIXZ
?GetZIPFileName@WindowImplBase@DuiLib@@UBE?AVCDuiString@2@XZ
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?MessageHandler@WindowImplBase@DuiLib@@UAEJIIJAA_N@Z
?OnClose@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnDestroy@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcPaint@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcHitTest@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseWheel@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseHover@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnChar@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnCreate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKillFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSetFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
?CreateControl@WindowImplBase@DuiLib@@UAEPAVCControlUI@2@PB_W@Z
?SendMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z
?OnLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonUp@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseMove@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?HandleMessage@WindowImplBase@DuiLib@@UAEJIIJ@Z
?GetStyle@WindowImplBase@DuiLib@@UAEJXZ
?SetHomePage@CWebBrowserUI@DuiLib@@QAEXPB_W@Z
?GetHomePage@CWebBrowserUI@DuiLib@@QAEPB_WXZ
?SetWebBrowserEventHandler@CWebBrowserUI@DuiLib@@QAEXPAVCWebBrowserEventHandler@2@@Z
?Navigate2@CWebBrowserUI@DuiLib@@QAEXPB_W@Z
?Close@CWindowWnd@DuiLib@@QAEXI@Z
ws2_32
gethostbyname
inet_ntoa
inet_addr
WSAStartup
iphlpapi
IcmpCreateFile
IcmpSendEcho
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
wininet
InternetOpenUrlW
InternetReadFile
HttpQueryInfoW
InternetCloseHandle
InternetOpenW
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ