Static task
static1
Behavioral task
behavioral1
Sample
75a1b99f3a210394b8d320ef0acdb3e0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
75a1b99f3a210394b8d320ef0acdb3e0N.exe
Resource
win10v2004-20240802-en
General
-
Target
75a1b99f3a210394b8d320ef0acdb3e0N.exe
-
Size
976KB
-
MD5
75a1b99f3a210394b8d320ef0acdb3e0
-
SHA1
2426d855c188301aa4b7c69e9d39399c1bec53d2
-
SHA256
394181b1e3e061b3889ff375adf23ccca5738516b3ac20ea6d477c3de0adee03
-
SHA512
2bb6e862cafc980b8296ee077c19d163fcbbc4b6bb8954fcf8554fa3ea96602dff755534ec5ceb9f6288d33f495081ea0156fe19cc75db38d90e5ea16ffead0e
-
SSDEEP
12288:uayQzZCql5eobGD8myIS1yukHFWx1Jw/9kTbZ71wJZ/ekpKe9r/Pr3d:uaFeomFWx1Jw/9kTN7CHRb3d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75a1b99f3a210394b8d320ef0acdb3e0N.exe
Files
-
75a1b99f3a210394b8d320ef0acdb3e0N.exe.exe windows:4 windows x86 arch:x86
d4380ebb80cfe25f78e16f972a32f010
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsSetValue
LocalReAlloc
TlsGetValue
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentDirectoryA
GetProcessVersion
SizeofResource
GetCPInfo
GetOEMCP
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapAlloc
HeapFree
RaiseException
GetTimeZoneInformation
GetSystemTime
TerminateProcess
ExitThread
HeapReAlloc
HeapSize
GetACP
FatalAppExitA
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GlobalReAlloc
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
ResetEvent
PulseEvent
InterlockedExchange
SleepEx
QueryPerformanceCounter
GlobalFlags
GlobalSize
SetErrorMode
WaitForMultipleObjects
ReleaseMutex
CreateMutexA
ReleaseSemaphore
DefineDosDeviceA
GetDiskFreeSpaceExA
SetVolumeLabelA
QueryDosDeviceW
QueryDosDeviceA
GetLogicalDrives
GetDriveTypeW
GetDriveTypeA
LoadLibraryW
GetProfileStringA
CopyFileW
CreateDirectoryW
MoveFileW
GetFileAttributesW
GetEnvironmentVariableW
GetTempPathW
GetTempPathA
GetCurrentDirectoryW
GetSystemDirectoryW
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
FormatMessageW
FindResourceExA
CreateSemaphoreA
MulDiv
SetLastError
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
FindResourceA
LoadResource
LockResource
GlobalFree
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
GlobalAlloc
GlobalDeleteAtom
GetCurrentThread
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
GlobalLock
GlobalUnlock
GetModuleFileNameA
GetShortPathNameA
lstrcmpiA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
lstrcpyA
SetEndOfFile
UnlockFile
LockFile
DuplicateHandle
FormatMessageA
lstrlenA
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
AllocConsole
GetStdHandle
WriteConsoleA
FreeConsole
OutputDebugStringW
SetFilePointer
WriteFile
CreateFileW
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetComputerNameA
GetComputerNameW
FlushFileBuffers
CreateDirectoryA
GetFileAttributesExA
GetFileAttributesExW
DeviceIoControl
ReadFile
Sleep
MoveFileA
SetFileAttributesW
RemoveDirectoryW
MoveFileExW
DeleteFileW
GetFileAttributesA
SetFileAttributesA
lstrcmpA
RemoveDirectoryA
MoveFileExA
DeleteFileA
GetSystemInfo
FindFirstFileA
FindNextFileA
CopyFileA
GetLastError
LoadLibraryA
LocalFree
OpenProcess
GetCurrentProcess
CreateThread
GetSystemDirectoryA
GetModuleHandleW
GetFileInformationByHandle
GetModuleHandleA
GetProcAddress
GetCurrentThreadId
GetTickCount
GetModuleFileNameW
GetLocalTime
GetCurrentProcessId
FindFirstFileW
lstrcmpW
FindNextFileW
FindClose
CreateFileA
CloseHandle
GetStringTypeW
user32
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckDlgButton
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
LoadStringA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
CloseDesktop
EndPaint
GetThreadDesktop
OpenDesktopA
GetUserObjectInformationW
OpenInputDesktop
GetUserObjectInformationA
GetProcessWindowStation
GetDlgItem
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
DestroyMenu
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
RemovePropA
BeginPaint
SetCursor
ShowOwnedPopups
CloseWindowStation
SetProcessWindowStation
OpenWindowStationA
MessageBoxA
MessageBoxW
SendMessageTimeoutA
EnumDesktopWindows
IsWindowVisible
GetWindowThreadProcessId
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetWindowLongA
GetParent
EnumWindows
EnumChildWindows
GetDesktopWindow
GetWindowTextA
GetWindowTextW
LoadIconA
SendMessageA
AppendMenuA
GetSystemMenu
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
EnableWindow
CharToOemA
OemToCharA
wsprintfA
DrawTextA
TabbedTextOutA
GrayStringA
MsgWaitForMultipleObjects
InsertMenuA
DestroyIcon
PostThreadMessageA
RegisterClipboardFormatA
InflateRect
BringWindowToTop
InvalidateRect
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
GetDialogBaseUnits
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
DeleteMenu
WindowFromPoint
WaitMessage
ReleaseCapture
SetCapture
LoadCursorA
wvsprintfA
PtInRect
GetClassNameA
RemoveMenu
SetThreadDesktop
GetMenuStringA
CharUpperA
GetWindowTextLengthA
PostMessageA
PostQuitMessage
CheckRadioButton
gdi32
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
DeleteObject
GetClipRgn
CreateRectRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
LineTo
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CopyMetaFileA
CreateDCA
GetTextColor
GetBkColor
SetTextJustification
LPtoDP
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
GetStockObject
SelectObject
RestoreDC
SaveDC
StartDocA
DeleteDC
GetObjectA
DPtoLP
SetTextAlign
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateDIBitmap
SetBkColor
SetTextColor
GetClipBox
GetBitmapBits
CreateCompatibleBitmap
GetDCOrgEx
CreateDIBPatternBrushPt
CreateBitmap
comdlg32
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegisterEventSourceA
DeregisterEventSource
RegEnumValueA
RegQueryInfoKeyA
RegConnectRegistryA
RegEnumKeyA
RegQueryValueA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueA
SetFileSecurityA
RegSetValueExA
RegOpenKeyA
GetUserNameA
GetTokenInformation
LookupAccountSidA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyA
RegQueryValueExA
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCreateKeyW
RegOpenKeyW
RegSetValueExW
RegCloseKey
ReportEventA
shell32
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetFileInfoA
SHGetSpecialFolderPathA
ExtractIconA
comctl32
ord17
oledlg
ord8
ole32
OleUninitialize
OleInitialize
OleRun
CoDisconnectObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
ReleaseStgMedium
CoTreatAsClass
StringFromCLSID
CoFreeUnusedLibraries
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CreateBindCtx
CoTaskMemAlloc
OleDuplicateData
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoRegisterMessageFilter
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
ReadClassStg
olepro32
ord253
oleaut32
SysReAllocStringLen
SysStringLen
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromDate
VarDateFromStr
VarBstrFromCy
VarCyFromStr
SysStringByteLen
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
SafeArrayRedim
VariantClear
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadTypeLi
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 772KB - Virtual size: 769KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ