Static task
static1
Behavioral task
behavioral1
Sample
profgifmaker32_64.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
profgifmaker32_64.exe
Resource
win7-20240903-en
Behavioral task
behavioral3
Sample
profgifmaker32_64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
profgifmaker32_64.exe
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
profgifmaker32_64.exe
Resource
macos-20240711.1-en
General
-
Target
profgifmaker32_64.exe
-
Size
4.8MB
-
MD5
ecb42deba065ac36fb877411f2e31f4b
-
SHA1
10be0e42e87da5081c8a0ce3efc8b32f39fa968e
-
SHA256
386f4d15da1ac5a78fa6e9cb877000103bfbd9f768b2e176b1172740084017b7
-
SHA512
b6cf583a41acd279f10d3b2c9a38dd6a040327a95650bb7cc73f85ce68071fe584c64e464448ef7e79c1136af1e216e7538c3d92c2678c82ce2f5a86d74b4f19
-
SSDEEP
98304:f1iYJdMUIsqQECEsq8epCvSJoXW3EtIMy8+MwTahPcoZC8jt0xez86vXAH:fJccl1eg66pLNkd6XAH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource profgifmaker32_64.exe
Files
-
profgifmaker32_64.exe.exe windows:5 windows x86 arch:x86
28123fa2ba22fa3c720c6f7d88a6b834
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToSystemTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileW
FindNextChangeNotification
FindNextFileW
FindResourceExW
FindResourceW
FlushFileBuffers
FlushViewOfFile
FormatMessageW
FreeEnvironmentStringsW
FreeLibraryAndExitThread
FreeResource
GetACP
GetComputerNameW
GetConsoleCP
GetConsoleScreenBufferInfo
GetCPInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDriveTypeW
GetEnvironmentStringsW
GetFileAttributesExW
GetFileAttributesW
GetFileTime
GetFullPathNameW
GetLastError
GetLocaleInfoW
GetLongPathNameW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNumberFormatW
GetOEMCP
GetPriorityClass
GetPrivateProfileIntW
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
GetProcessAffinityMask
GetProcessHeap
GetProfileIntW
GetShortPathNameW
GetStartupInfoW
GetStdHandle
GetStringTypeExW
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameW
GetTempPathW
GetThreadLocale
GetThreadPriority
GetThreadTimes
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
GetVolumeInformationW
GetWindowsDirectoryW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalFree
GlobalGetAtomNameW
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapDestroy
HeapFree
HeapLock
HeapReAlloc
HeapSize
HeapUnlock
HeapWalk
InterlockedCompareExchange
InterlockedExchange
IsDBCSLeadByteEx
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LoadLibraryExA
LoadLibraryExW
FileTimeToLocalFileTime
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LocalReAlloc
LockFile
LockResource
lstrcmpA
lstrcmpiW
lstrcmpW
lstrcpynW
lstrcpyW
lstrlenW
MapViewOfFile
MoveFileExA
MoveFileExW
MoveFileW
MulDiv
MultiByteToWideChar
OpenEventW
OpenFileMappingW
OpenProcess
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryW
ResetEvent
ResumeThread
SearchPathW
SetConsoleCtrlHandler
SetConsoleTextAttribute
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesW
SetFileTime
SetLastError
SetPriorityClass
SetStdHandle
SetThreadAffinityMask
SetThreadPriority
SetUnhandledExceptionFilter
SetVolumeLabelW
SizeofResource
Sleep
SuspendThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnlockFile
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObjectEx
WaitNamedPipeW
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileStringW
LCMapStringA
GetStringTypeA
InterlockedIncrement
InterlockedDecrement
HeapCreate
GetVersionExA
GetEnvironmentVariableA
SetHandleCount
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetVersion
GetStartupInfoA
RtlUnwind
ExitProcess
EnumSystemLocalesW
DuplicateHandle
DeleteFileW
DeleteCriticalSection
CreateThread
CreateSemaphoreW
CreateSemaphoreA
CreateProcessW
CreateMutexW
CreateFileW
CreateFileMappingW
CreateEventW
CreateEventA
CreateDirectoryW
CopyFileW
CreateProcessA
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
GetCommandLineW
LoadLibraryA
GetFileType
GetConsoleMode
GetProcAddress
LoadLibraryW
FreeLibrary
user32
WaitMessage
ValidateRect
UpdateWindow
UnregisterClassW
UnionRect
UnhookWindowsHookEx
WindowFromPoint
TranslateMDISysAccel
TranslateAcceleratorW
TrackPopupMenuEx
ToUnicodeEx
TabbedTextOutW
SystemParametersInfoW
SubtractRect
WinHelpW
TranslateMessage
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCursor
SetWindowTextW
SetWindowsHookExW
SetWindowRgn
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowContextHelpId
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRectEmpty
SetRect
MessageBoxA
GetDialogBaseUnits
GetDlgCtrlID
advapi32
OpenProcessToken
LookupAccountNameW
InitializeSecurityDescriptor
InitializeAcl
GetTokenInformation
GetLengthSid
GetFileSecurityW
ControlService
CloseServiceHandle
AdjustTokenPrivileges
AddAccessAllowedAce
OpenSCManagerW
OpenServiceW
QueryServiceStatus
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumKeyW
RegEnumValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegQueryValueW
RegSetValueExW
RegSetValueW
LookupPrivilegeValueW
shell32
CommandLineToArgvW
Sections
.text Size: 2.4MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_hss_9 Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 276KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_iss_9 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE