Static task
static1
Behavioral task
behavioral1
Sample
529196d72869de8b9dde0bc0f01ccdd0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
529196d72869de8b9dde0bc0f01ccdd0N.exe
Resource
win10v2004-20240802-en
General
-
Target
529196d72869de8b9dde0bc0f01ccdd0N
-
Size
1.6MB
-
MD5
529196d72869de8b9dde0bc0f01ccdd0
-
SHA1
487bb2222a1b19158a4a0c2c08377fabc1109698
-
SHA256
7201a384c7c2a11fe09269e42354b6f2bb56b8e188e8c328b14bccdd7e63a282
-
SHA512
620154c26d674a16df020cfd390d54d35a5045b0f823e76f321e8a569f021ef467142b35bd08835a927e6934e7dea5bbf9704f34f331c7089251df63a4bbb223
-
SSDEEP
12288:25cqQQdZ0U02cPh+bszyzBc17NFuruQ+rNxicoeYrvZCHVnyVggrSDT5kC8IHDtq:25cAN02cPhBjdZjHhQ6giafmvJW5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 529196d72869de8b9dde0bc0f01ccdd0N
Files
-
529196d72869de8b9dde0bc0f01ccdd0N.exe windows:4 windows x64 arch:x64
5182639840b90766febd41b571ee3c01
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
setupapi
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiSetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupOpenInfFileA
SetupGetLineTextA
SetupCloseInfFile
shlwapi
PathRemoveExtensionA
SHDeleteKeyA
PathAppendA
PathCombineA
PathFindExtensionA
PathFindFileNameA
PathAddExtensionA
netapi32
NetUserGetInfo
NetApiBufferFree
newdev
UpdateDriverForPlugAndPlayDevicesA
kernel32
FlushFileBuffers
GetCPInfo
GetOEMCP
SetErrorMode
HeapFree
HeapAlloc
HeapReAlloc
RtlLookupFunctionEntry
RtlUnwindEx
GetCommandLineA
GetProcessHeap
SetFilePointer
RaiseException
RtlPcToFileHeader
ExitProcess
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetACP
IsValidCodePage
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
LCMapStringA
LCMapStringW
HeapSetInformation
HeapCreate
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
ReadFile
GetThreadLocale
GlobalFlags
WritePrivateProfileStringA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetModuleFileNameW
FreeResource
GetCurrentProcessId
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
FindResourceA
LoadResource
LockResource
SizeofResource
MulDiv
RemoveDirectoryA
GetCurrentDirectoryA
ExpandEnvironmentStringsA
GetModuleFileNameA
LocalAlloc
LocalFree
CreateThread
CreateFileA
WriteFile
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
ResumeThread
lstrcmpA
GetVersionExA
GetFileAttributesA
SetFileAttributesA
GetWindowsDirectoryA
FindFirstFileA
GetModuleHandleA
DeleteFileA
FindNextFileA
FindClose
GetSystemDirectoryA
GetTickCount
Sleep
TerminateProcess
OpenProcess
WaitForSingleObject
GetCurrentProcess
CloseHandle
LoadLibraryA
GetProcAddress
FreeLibrary
CreateMutexA
GetLastError
ReleaseMutex
lstrlenA
lstrcmpiA
WideCharToMultiByte
CompareStringA
MultiByteToWideChar
GetVersion
GetStartupInfoA
user32
DestroyMenu
UnregisterClassA
LoadCursorA
GetSysColorBrush
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassLongPtrA
SetPropA
GetPropA
RemovePropA
GetWindowTextA
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
PtInRect
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
GetWindowPlacement
GetWindowRect
GetWindow
GetDlgCtrlID
SendMessageA
ReleaseDC
GetDC
CopyRect
UnhookWindowsHookEx
GetDesktopWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetNextDlgTabItem
EndDialog
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostMessageA
PostQuitMessage
GetWindowThreadProcessId
FindWindowA
GetClassNameA
EnumWindows
MessageBoxA
EnableWindow
LoadIconA
SetDlgItemTextA
LoadStringA
ShowWindow
GetDlgItem
GetSystemMetrics
DrawIcon
IsIconic
GetClientRect
SetFocus
SendDlgItemMessageA
SetWindowTextA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
ExitWindowsEx
GetForegroundWindow
AttachThreadInput
SystemParametersInfoA
SetActiveWindow
SetForegroundWindow
GetWindowLongPtrA
SetWindowLongPtrA
gdi32
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
DeleteObject
SetMapMode
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegEnumValueA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
GetUserNameA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatusEx
DeleteService
ControlService
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteKeyA
shell32
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 226KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.2MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE