Static task
static1
Behavioral task
behavioral1
Sample
d04081e1ceee57c97ec4d2907a2705c0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d04081e1ceee57c97ec4d2907a2705c0N.exe
Resource
win10v2004-20240802-en
General
-
Target
d04081e1ceee57c97ec4d2907a2705c0N.exe
-
Size
6.1MB
-
MD5
d04081e1ceee57c97ec4d2907a2705c0
-
SHA1
57e9e2939738a00c21634bfb29106365826a47bc
-
SHA256
de169aca87ea49de0b63d49da370f6f38c293e49789c85c52e0c052e7a8c66f8
-
SHA512
ff72616962116a2fb31315984cf0291d0ac6038d74af8196792ca1cc62277f52c8386ba6cdd9e3b87df4d1bafc81642a7bde210baa830b73368bf59617cdc265
-
SSDEEP
98304:MlchYIcaKSs6RlMdF4VbOuUR0OUFCAmLfIHpo4/eo1nqSysRw+omN:Mlch1cjyl+MO10OIqIJao1qc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d04081e1ceee57c97ec4d2907a2705c0N.exe
Files
-
d04081e1ceee57c97ec4d2907a2705c0N.exe.exe windows:5 windows x86 arch:x86
c5db15bfe979ddefcf4ceb412bff4d34
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCloseHandle
InternetOpenA
InternetReadFile
InternetQueryDataAvailable
HttpQueryInfoA
InternetOpenUrlA
InternetQueryOptionA
InternetGetLastResponseInfoA
kernel32
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetCurrentProcess
GetFullPathNameA
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
RaiseException
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoA
HeapAlloc
HeapFree
VirtualAlloc
HeapReAlloc
ExitThread
HeapSize
ReadFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStdHandle
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetTimeZoneInformation
GetDriveTypeA
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GlobalFlags
WritePrivateProfileStringA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
GetModuleHandleW
FreeResource
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
GetCurrentProcessId
GlobalAddAtomA
CreateEventA
SuspendThread
SetEvent
ResumeThread
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
LoadLibraryA
CompareStringA
InterlockedExchange
lstrcmpA
FreeLibrary
InterlockedDecrement
GetModuleFileNameW
GetProcAddress
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
MultiByteToWideChar
MulDiv
lstrlenA
CreateThread
CreateFileA
WriteFile
Sleep
GetTempFileNameA
DeleteFileA
RemoveDirectoryA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetThreadPriority
SetThreadPriority
GetCommandLineA
GetCurrentDirectoryA
FindFirstFileA
FindClose
CloseHandle
WaitForSingleObject
CreateProcessA
GetTempPathA
WideCharToMultiByte
GetModuleHandleA
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
FormatMessageA
LocalFree
TerminateProcess
user32
BeginPaint
EndPaint
InflateRect
GetMenuItemInfoA
LoadMenuA
DestroyMenu
ReleaseCapture
LoadAcceleratorsA
InvalidateRect
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
TranslateAcceleratorA
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
ReleaseDC
GetDC
RegisterWindowMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetMenu
SetForegroundWindow
UpdateWindow
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
CopyRect
GetWindowDC
DefWindowProcA
CallWindowProcA
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindowTextA
SetWindowPos
SetFocus
ShowWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
ClientToScreen
GrayStringA
GetDlgItem
GetWindow
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
ShowOwnedPopups
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
IsWindow
EnableWindow
KillTimer
SetTimer
PostMessageA
BringWindowToTop
FindWindowA
WaitForInputIdle
SendMessageA
LoadIconA
LoadCursorA
UnregisterClassA
GetSysColorBrush
UnpackDDElParam
PtInRect
ReuseDDElParam
GetSystemMetrics
gdi32
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreatePatternBrush
OffsetViewportOrgEx
CreateSolidBrush
CreateFontIndirectA
GetTextExtentPoint32A
GetPixel
BitBlt
SelectObject
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
GetStockObject
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
PtVisible
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
DragQueryFileA
DragFinish
oleaut32
VariantClear
VariantChangeType
VariantInit
shlwapi
PathFindFileNameA
PathFindExtensionA
oleacc
CreateStdAccessibleObject
LresultFromObject
Sections
.text Size: 188KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ