Static task
static1
Behavioral task
behavioral1
Sample
5ac842024a50265a7fd843c8ad34a830N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5ac842024a50265a7fd843c8ad34a830N.exe
Resource
win10v2004-20240802-en
General
-
Target
5ac842024a50265a7fd843c8ad34a830N.exe
-
Size
508KB
-
MD5
5ac842024a50265a7fd843c8ad34a830
-
SHA1
5d2d4c9e093a92c6de72ffe15539422831fd9c3a
-
SHA256
003989e8e3f9274f3f34183dee21abd519469717e51abcca12726ecf1b568e9e
-
SHA512
c89d694963cdca8a4b54f27dd8e27a9d74383893f98fcb8a3cf819f694f18aa7a48062a0fc5a332542f93079408a156fef5bc91a68af6dbb1af2fff517ef2d5f
-
SSDEEP
12288:DRNnQSiEXuoqW/RK7y5HJvJeSaNdwPTq5S3prvYvJ:ISiEXuoqW/RK7GliNdkTRRIJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ac842024a50265a7fd843c8ad34a830N.exe
Files
-
5ac842024a50265a7fd843c8ad34a830N.exe.exe windows:5 windows x86 arch:x86
4bbe149a473537cabffeffb15ad5e4e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsValidLocale
LoadLibraryA
InitializeCriticalSectionAndSpinCount
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
WinExec
LockResource
GlobalFree
GlobalUnlock
CreateFileW
GetFileAttributesW
SizeofResource
GlobalAlloc
WriteFile
GlobalLock
CreateProcessW
LoadResource
FindResourceW
FindResourceExW
GetProcAddress
lstrlenW
GetModuleFileNameW
Sleep
GetCurrentProcess
GetLastError
GetLocaleInfoA
GetUserDefaultLCID
WritePrivateProfileStringW
EnumSystemLocalesA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
SetFilePointer
GetConsoleMode
GetConsoleCP
ReadFile
IsValidCodePage
GetOEMCP
GetACP
GetTickCount
QueryPerformanceCounter
GetPrivateProfileStringW
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
HeapCreate
VirtualAlloc
VirtualFree
ExitProcess
GetSystemTimeAsFileTime
GetModuleFileNameA
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
GetStartupInfoA
GetFileAttributesA
GetCurrentProcessId
RtlUnwind
GetCPInfo
LCMapStringA
LCMapStringW
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetModuleHandleA
user32
PostQuitMessage
LoadImageW
MessageBoxW
SendMessageW
shell32
ShellExecuteA
SHGetSpecialFolderLocation
ShellExecuteW
SHGetPathFromIDListW
ole32
CoInitialize
CoUninitialize
CoCreateInstance
duilib
?MessageLoop@CPaintManagerUI@DuiLib@@SAXXZ
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?ShowWindow@CWindowWnd@DuiLib@@QAEX_N0@Z
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
??0WindowImplBase@DuiLib@@QAE@XZ
??1WindowImplBase@DuiLib@@UAE@XZ
??0CDuiString@DuiLib@@QAE@PB_WH@Z
??1CDuiString@DuiLib@@QAE@XZ
??8CDuiString@DuiLib@@QBE_NPB_W@Z
?GetInstancePath@CPaintManagerUI@DuiLib@@SA?AVCDuiString@2@XZ
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
?OnFinalMessage@WindowImplBase@DuiLib@@UAEXPAUHWND__@@@Z
?GetMessageMap@WindowImplBase@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ
?OnClick@WindowImplBase@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?GetClassStyle@WindowImplBase@DuiLib@@UBEIXZ
?GetZIPFileName@WindowImplBase@DuiLib@@UBE?AVCDuiString@2@XZ
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?MessageHandler@WindowImplBase@DuiLib@@UAEJIIJAA_N@Z
?OnClose@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnDestroy@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcPaint@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcHitTest@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseWheel@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseHover@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnChar@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnCreate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKillFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSetFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
?CreateControl@WindowImplBase@DuiLib@@UAEPAVCControlUI@2@PB_W@Z
?SendMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z
?OnLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonUp@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseMove@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?HandleMessage@WindowImplBase@DuiLib@@UAEJIIJ@Z
?GetStyle@WindowImplBase@DuiLib@@UAEJXZ
?SetHomePage@CWebBrowserUI@DuiLib@@QAEXPB_W@Z
?GetHomePage@CWebBrowserUI@DuiLib@@QAEPB_WXZ
?SetWebBrowserEventHandler@CWebBrowserUI@DuiLib@@QAEXPAVCWebBrowserEventHandler@2@@Z
?Navigate2@CWebBrowserUI@DuiLib@@QAEXPB_W@Z
?Close@CWindowWnd@DuiLib@@QAEXI@Z
ws2_32
gethostbyname
inet_ntoa
inet_addr
WSAStartup
iphlpapi
IcmpCreateFile
IcmpSendEcho
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
wininet
InternetOpenUrlW
InternetReadFile
HttpQueryInfoW
InternetCloseHandle
InternetOpenW
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ