Static task
static1
Behavioral task
behavioral1
Sample
1b325b369be929ed0f3b670eaa86202c4bbfe0b7c2526f53bc860b539a9c45c6.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1b325b369be929ed0f3b670eaa86202c4bbfe0b7c2526f53bc860b539a9c45c6.exe
Resource
win10v2004-20240802-en
General
-
Target
1b325b369be929ed0f3b670eaa86202c4bbfe0b7c2526f53bc860b539a9c45c6
-
Size
1.0MB
-
MD5
6c4e71cf1bdfd988537443285c670e4c
-
SHA1
c1f1f84c9251e532dc2f135b67e7370c9fcb1f22
-
SHA256
1b325b369be929ed0f3b670eaa86202c4bbfe0b7c2526f53bc860b539a9c45c6
-
SHA512
6b92d3ba1619d15de9b23277edb0f63827bd0f470e8069d35cbb1a2807357324db5eaefaa507f6d43a96a00c18506e515080eeaaa43dfd3a925d9894f9aae6dd
-
SSDEEP
24576:nDOXiyQ3RtxFn/1NmLIvilFc82onKvVvD/cRKL2xazPuJRboWFAOHAN/1+2FJNJY:ntAsL2gavpGOHApAMJN4X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b325b369be929ed0f3b670eaa86202c4bbfe0b7c2526f53bc860b539a9c45c6
Files
-
1b325b369be929ed0f3b670eaa86202c4bbfe0b7c2526f53bc860b539a9c45c6.exe windows:4 windows x86 arch:x86
a99f644808a974f70e2d467f801bf3c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalSize
HeapAlloc
RtlMoveMemory
GlobalUnlock
GlobalLock
InterlockedIncrement
GlobalAlloc
InterlockedDecrement
HeapFree
WaitForSingleObject
Sleep
CloseHandle
CreateThread
SetEvent
CreateEventW
ResetEvent
lstrcmpW
LocalSize
lstrlenA
RtlZeroMemory
lstrlenW
lstrcmpiA
lstrcmpA
HeapDestroy
HeapCreate
lstrcmpiW
lstrcatW
MultiByteToWideChar
GetModuleHandleW
GetCommandLineW
WideCharToMultiByte
GetModuleFileNameW
GetProcessHeap
GetAtomNameW
LCMapStringEx
GetModuleHandleA
GetStartupInfoA
GetTickCount
user32
IsZoomed
IsIconic
GetMenuItemCount
EnumPropsExW
RemovePropA
RemovePropW
GetPropA
GetPropW
SetPropA
SetPropW
SetTimer
GetSystemMetrics
MessageBoxW
SetWindowTextW
SetParent
MoveWindow
UpdateWindow
ValidateRect
ScreenToClient
PostMessageW
ShowWindow
CallWindowProcW
CreateMDIWindowW
DialogBoxParamW
CreateDialogParamW
EndDialog
DialogBoxIndirectParamW
DestroyWindow
SetClassLongW
DestroyMenu
GetClassLongW
GetMenuStringW
GetMenu
CreateDialogIndirectParamW
TrackPopupMenu
RegisterClassExW
GetClassInfoExW
GetMenuItemInfoW
CreateWindowExW
SetForegroundWindow
PostQuitMessage
DispatchMessageW
TranslateMessage
IsDialogMessageW
TranslateAcceleratorW
CharLowerW
CheckMenuRadioItem
GetMenuInfo
GetFocus
CharUpperW
LoadStringW
LoadMenuW
GetSystemMenu
SetMenuDefaultItem
CreatePopupMenu
CreateMenu
SetRect
DrawIconEx
CopyIcon
LoadIconW
LoadImageW
CreateIconFromResourceEx
GetMenuItemID
KillTimer
ClientToScreen
FillRect
GetWindowDC
DefWindowProcW
OffsetRect
ReleaseDC
DrawTextA
GetDC
SetFocus
GetNextDlgTabItem
InvalidateRect
GetWindowRect
SetWindowPos
EnableWindow
IsWindowEnabled
IsWindowVisible
GetSysColor
DestroyAcceleratorTable
LoadCursorW
SetMenuItemInfoW
ReleaseCapture
SetCapture
GetClientRect
SetCursor
SendMessageW
GetWindowLongW
GetParent
CheckMenuItem
GetWindowTextW
GetWindowTextLengthW
GetClassNameW
FindWindowExW
IsWindow
DrawMenuBar
RegisterWindowMessageW
GetAsyncKeyState
SetWindowLongW
SystemParametersInfoW
RemoveMenu
MenuItemFromPoint
GetMenuDefaultItem
GetAncestor
GetDlgItem
GetMenuState
TranslateMDISysAccel
TrackMouseEvent
EndPaint
BeginPaint
SetWindowRgn
GetMenuItemRect
GetSubMenu
SetMenu
DestroyIcon
DestroyCursor
GetIconInfo
SetMenuInfo
InsertMenuW
IsChild
UpdateLayeredWindow
AppendMenuW
GetMessageW
gdi32
CreateFontIndirectW
CreatePatternBrush
CreateDIBSection
CreateCompatibleDC
GetObjectW
CreateSolidBrush
GetStockObject
SetBkColor
SetBkMode
SetTextColor
GetDIBits
CreateEllipticRgn
StretchBlt
DeleteObject
SetStretchBltMode
GetStretchBltMode
BitBlt
DeleteDC
CreateRoundRectRgn
SelectObject
mpr
WNetCancelConnection2A
WNetAddConnection2A
shell32
DragQueryFileW
DragFinish
StrStrW
StrStrA
StrStrIW
Shell_NotifyIconW
CommandLineToArgvW
StrRStrW
DragAcceptFiles
StrRStrIW
gdiplus
GdiplusStartup
GdipGetLineSpacing
GdipGetCellDescent
GdipGetCellAscent
GdipGetEmHeight
GdipIsStyleAvailable
GdipGetFamilyName
GdipGetGenericFontFamilyMonospace
GdipGetGenericFontFamilySerif
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipCloneFontFamily
GdipGetFontCollectionFamilyList
GdipGetFontCollectionFamilyCount
GdipPrivateAddMemoryFont
GdipPrivateAddFontFile
GdipNewPrivateFontCollection
GdipNewInstalledFontCollection
GdipDeleteFont
GdipIsMatrixEqual
GdipIsMatrixIdentity
GdipIsMatrixInvertible
GdipVectorTransformMatrixPoints
GdipTransformMatrixPoints
GdipShearMatrix
GdipScaleMatrix
GdipInvertMatrix
GdipMultiplyMatrix
GdipGetMatrixElements
GdipDeletePath
GdipDeleteRegion
GdipBitmapUnlockBits
GdipSetMatrixElements
GdipCloneMatrix
GdipCreateMatrix3
GdipCreateMatrix2
GdipBitmapLockBits
GdipGetRegionScans
GdipGetRegionScansCount
GdipIsVisibleRegionRect
GdipIsVisibleRegionPoint
GdipIsEqualRegion
GdipIsInfiniteRegion
GdipIsEmptyRegion
GdipGetRegionHRgn
GdipGetRegionData
GdipGetRegionDataSize
GdipCreateBitmapFromScan0
GdipTransformRegion
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipTranslateRegion
GdipCombineRegionPath
GdipCombineRegionRegion
GdipCombineRegionRect
GdipSetEmpty
GdipSetInfinite
GdipCloneRegion
GdipCreateImageAttributes
GdipCloneImageAttributes
GdipSetImageAttributesToIdentity
GdipResetImageAttributes
GdipSetImageAttributesThreshold
GdipSetImageAttributesNoOp
GdipSetImageAttributesGamma
GdipSetImageAttributesColorKeys
GdipSetImageAttributesOutputChannel
GdipSetImageAttributesOutputChannelColorProfile
GdipSetImageAttributesRemapTable
GdipSetImageAttributesWrapMode
GdipGetImageAttributesAdjustedPalette
GdipSetImageAttributesColorMatrix
GdipDisposeImage
GdipCreateHBITMAPFromBitmap
GdipCreateFromHDC
GdipFlush
GdipGetDC
GdipReleaseDC
GdipSetTextRenderingHint
GdipGetTextRenderingHint
GdipSetInterpolationMode
GdipGetInterpolationMode
GdipSetSmoothingMode
GdipGetSmoothingMode
GdipSetPixelOffsetMode
GdipGetPixelOffsetMode
GdipSetWorldTransform
GdipGetWorldTransform
GdipDeleteMatrix
GdipResetWorldTransform
GdipTranslateWorldTransform
GdipScaleWorldTransform
GdipRotateWorldTransform
GdipSetPageUnit
GdipGetPageUnit
GdipSetPageScale
GdipGetPageScale
GdipGetDpiX
GdipGetDpiY
GdipTransformPoints
GdipTransformPointsI
GdipGetNearestColor
GdipDrawLine
GdipDrawArc
GdipDrawBezier
GdipDrawRectangle
GdipDrawEllipse
GdipDrawPie
GdipDrawPolygon
GdipDrawPath
GdipDrawCurve
GdipDrawCurve2
GdipDrawClosedCurve
GdipDrawClosedCurve2
GdipGraphicsClear
GdipFillPolygon
GdipFillEllipse
GdipFillPie
GdipFillPath
GdipFillClosedCurve
GdipFillClosedCurve2
GdipFillRegion
GdipDrawString
GdipMeasureString
GdipCreateRegion
GdipMeasureCharacterRanges
GdipDrawDriverString
GdipDrawImage
GdipDrawImageRectRect
GdipDrawImageRect
GdipDrawImagePoints
GdipDrawImagePointRect
GdipDrawImagePointsRect
GdipSetClipGraphics
GdipSetClipPath
GdipSetClipRect
GdipSetClipRegion
GdipSetClipHrgn
GdipResetClip
GdipTranslateClip
GdipGetClip
GdipGetClipBounds
GdipGetVisibleClipBounds
GdipIsClipEmpty
GdipIsVisibleClipEmpty
GdipIsVisiblePoint
GdipIsVisibleRect
GdipSaveGraphics
GdipRestoreGraphics
GdipBeginContainer
GdipBeginContainer2
GdipEndContainer
GdipDeleteGraphics
GdipDisposeImageAttributes
GdipDeleteBrush
GdipFillRectangle
GdipCreateRegionRgnData
GdipLoadImageFromFile
GdipLoadImageFromStream
GdipCreateRegionHrgn
GdipCreateRegionPath
GdipCreateRegionRect
GdipIsOutlineVisiblePathPoint
GdipCloneImage
GdipGetImageRawFormat
GdipIsVisiblePathPoint
GdipGetImagePixelFormat
GdipSaveImageToStream
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipWarpPath
GdipWindingModeOutline
GdipGetImageDimension
GdipGetImageBounds
GdipGetImageWidth
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdipGetImageThumbnail
GdipCreateHICONFromBitmap
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromHBITMAP
GdipCreateTexture
GdipCreateBitmapFromHICON
GdipCreateBitmapFromResource
GdipCloneBitmapArea
GdipBitmapSetResolution
GdipGetImageGraphicsContext
GdipCreateSolidFill
GdipCreateMatrix
GdipTranslateMatrix
GdipRotateMatrix
GdipCreateFromHWND
GdipCreateFont
GdipCreateFontFromLogfontW
GdipDeletePrivateFontCollection
GdipDeleteFontFamily
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCloneFont
GdipGetLogFontW
GdipGetRegionBounds
GdipGetLogFontA
GdipGetFamily
GdipGetFontStyle
GdipGetFontSize
GdipGetFontUnit
GdipGetFontHeight
GdipGetFontHeightGivenDPI
GdipCreatePath
GdipCreatePath2
GdipClonePath
GdipResetPath
GdipGetPathFillMode
GdipSetPathFillMode
GdipGetPointCount
GdipGetPathData
GdipStartPathFigure
GdipClosePathFigure
GdipClosePathFigures
GdipSetPathMarker
GdipClearPathMarkers
GdipReversePath
GdipGetPathLastPoint
GdipAddPathLine
GdipAddPathArc
GdipAddPathBezier
GdipAddPathCurve
GdipAddPathCurve2
GdipAddPathClosedCurve
GdipAddPathClosedCurve2
GdipAddPathRectangle
GdipAddPathEllipse
GdipAddPathPie
GdipAddPathPolygon
GdipAddPathPath
GdipAddPathString
GdipTransformPath
GdipGetPathWorldBounds
GdipFlattenPath
GdipWidenPath
ole32
CreateStreamOnHGlobal
StringFromGUID2
CLSIDFromString
GetHGlobalFromStream
atl
AtlAxWinInit
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameW
PathRemoveFileSpecW
StrToIntExW
StrTrimW
wvnsprintfW
StrToIntW
crypt32
CryptStringToBinaryW
msimg32
AlphaBlend
mfc42
ord4673
ord1576
ord4486
ord6375
ord4274
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord1168
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord1134
ord4424
ord3738
ord561
ord2621
ord825
ord815
msvcrt
_onexit
_setmbcp
_XcptFilter
_exit
_acmdln
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__dllonexit
__getmainargs
_initterm
exit
wmvert
wm_RpSubText
wm_SpaceBin
wm_BAnd
wm_Mod
wm_pbin
wm_ToInt
wm_ToShort
wm_SHR
wm_Len
wm_CnvToBin
wm_MAKELONG
wm_SHL
wm_WriteMem
wm_BinLen
wm_ObjClear
wm_ObjCopy
wm_Space
wm_pstr
wm_BNot
wm_StrComp
wm_ToFloat
wm_Val
wm_GetBinData
wm_Sin
wm_Cos
wm_Abs
wm_NotifySys
wm_CreateWindowFromTemplate
wm_Chr
wm_Str
wm_Run
wm_MsgBox
wm_BOr
wm_Right
Sections
.text Size: 360KB - Virtual size: 359KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 660KB - Virtual size: 669KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ