Static task
static1
Behavioral task
behavioral1
Sample
598df63257a876308d7e1835980251a35670fc672dafa4ebc4f221ddee325833.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
598df63257a876308d7e1835980251a35670fc672dafa4ebc4f221ddee325833.exe
Resource
win10v2004-20240802-en
General
-
Target
598df63257a876308d7e1835980251a35670fc672dafa4ebc4f221ddee325833
-
Size
359KB
-
MD5
f82680729a25c54e5d57f2ce7a4555ef
-
SHA1
2ad9b0e2aa6230e0d672bfc7eec61281c0254448
-
SHA256
598df63257a876308d7e1835980251a35670fc672dafa4ebc4f221ddee325833
-
SHA512
fefa1bb216d39db47c04566f54ab09f399effeba50753f81886595ab97274b296b7a1026e4e11b7971c088a689038cab20d724af6778e71352fd85a651f2cfa2
-
SSDEEP
6144:5QqbcilxKQWwsctuEDBHlC8w9WuKc9mfhTNSBLJeQAifrs+A:5/bXlwvwVdNdeuphkBNRvrs+A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 598df63257a876308d7e1835980251a35670fc672dafa4ebc4f221ddee325833
Files
-
598df63257a876308d7e1835980251a35670fc672dafa4ebc4f221ddee325833.exe windows:4 windows x86 arch:x86
6a7b35a3103412e3d3aebb6448bd1f91
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAllocEx
GetWindowsDirectoryA
lstrcatA
CreateFileA
FileTimeToDosDateTime
user32
InternalGetWindowText
ReplyMessage
SetScrollRange
MapVirtualKeyW
CreateDesktopW
FindWindowW
CopyAcceleratorTableW
SendNotifyMessageA
GetMenuState
GetMenuContextHelpId
GetWindowTextLengthW
SendMessageCallbackA
ModifyMenuA
OemToCharBuffA
DdeGetData
SetDlgItemTextA
GetDlgCtrlID
GetTabbedTextExtentA
TrackPopupMenuEx
DefDlgProcA
MsgWaitForMultipleObjectsEx
ValidateRect
GetWindowContextHelpId
DestroyCaret
DdeQueryStringA
EnableMenuItem
BeginPaint
DefMDIChildProcW
GetWindowTextA
UnregisterClassW
LoadStringW
GetWindowLongW
CharPrevA
GetClipboardFormatNameA
wsprintfW
CascadeWindows
WinHelpW
WaitMessage
RegisterClipboardFormatW
SetScrollInfo
RealGetWindowClassW
IsDialogMessageW
LoadBitmapW
SetWindowsHookA
ChangeDisplaySettingsExW
EndPaint
ExcludeUpdateRgn
CharPrevW
WINNLSGetEnableStatus
DdeFreeStringHandle
CountClipboardFormats
GetKeyState
GetMenuItemID
IMPQueryIMEW
EnumThreadWindows
SetSystemCursor
ToUnicode
GetMenuItemInfoW
IsWindowEnabled
keybd_event
LookupIconIdFromDirectoryEx
GetUserObjectInformationA
ClipCursor
EditWndProc
GetScrollPos
ImpersonateDdeClientWindow
MapDialogRect
GetKeyNameTextW
GetMenuStringW
GetWindowPlacement
SetUserObjectInformationW
DefDlgProcW
GetProcessDefaultLayout
GetUpdateRect
GetMessagePos
UpdateLayeredWindow
GetKBCodePage
DdeImpersonateClient
ChangeDisplaySettingsExA
RegisterDeviceNotificationW
RemovePropW
UnregisterClassA
ChangeMenuA
EnumDisplayDevicesA
AllowSetForegroundWindow
SwitchDesktop
PostThreadMessageA
EnumClipboardFormats
OpenWindowStationW
SetClipboardData
SendMessageW
EnumPropsA
CharUpperW
EnumDesktopsW
DlgDirListComboBoxA
IsHungAppWindow
BroadcastSystemMessageA
GetOpenClipboardWindow
LoadIconA
SetDebugErrorLevel
DeferWindowPos
SetDoubleClickTime
GetDCEx
CreateIconIndirect
ScrollWindow
DrawEdge
AdjustWindowRect
MapVirtualKeyExA
GetMenuItemRect
WINNLSGetIMEHotkey
EnumWindowStationsW
GetWindowRect
DdeCreateStringHandleA
DdeEnableCallback
LookupIconIdFromDirectory
PaintDesktop
CloseWindow
DdeConnectList
EnumWindowStationsA
OemToCharW
InsertMenuW
CheckMenuItem
HiliteMenuItem
CopyImage
DestroyWindow
CallWindowProcW
DdeAccessData
GetWindowModuleFileNameA
IsZoomed
WaitForInputIdle
InSendMessageEx
LoadKeyboardLayoutW
OemToCharBuffW
GetClassLongW
DestroyIcon
InvalidateRect
SystemParametersInfoA
GetSystemMenu
DdeAbandonTransaction
GetCaretBlinkTime
InvertRect
DdeNameService
GetShellWindow
SetCursorPos
RegisterShellHookWindow
GetWindow
DdeAddData
WINNLSEnableIME
InvalidateRgn
CreateIconFromResource
GetIconInfo
IsCharLowerW
OpenWindowStationA
DdeCreateStringHandleW
GetUserObjectInformationW
GetUserObjectSecurity
SetParent
GetMenuItemCount
IsCharAlphaNumericW
AppendMenuA
SetMenuItemInfoA
InsertMenuItemA
IMPGetIMEW
CharNextW
SetClassWord
FrameRect
DestroyMenu
GetClassInfoExA
IsCharLowerA
GetMenuBarInfo
IsCharUpperA
OpenInputDesktop
IsCharAlphaA
CloseWindowStation
DrawTextExA
SetClipboardViewer
SetDlgItemInt
DdeQueryConvInfo
ChildWindowFromPointEx
PostThreadMessageW
TabbedTextOutA
ClientToScreen
SetWindowLongW
RemovePropA
IMPSetIMEA
DefMDIChildProcA
MapVirtualKeyA
GetCursorInfo
DdeDisconnect
GetLastActivePopup
SetCapture
GetAltTabInfoW
TileChildWindows
GetKeyNameTextA
CheckRadioButton
GetDlgItem
CascadeChildWindows
VkKeyScanExW
FreeDDElParam
UnpackDDElParam
CharLowerA
GetClassNameA
EnumPropsExA
SetDlgItemTextW
RegisterClassA
GetSubMenu
GetSystemMetrics
SetThreadDesktop
GetWindowTextW
FlashWindow
LoadAcceleratorsA
DdeSetUserHandle
DlgDirSelectComboBoxExA
OffsetRect
InSendMessage
ChangeDisplaySettingsW
CharLowerBuffA
EnumDisplaySettingsA
GetDlgItemTextA
GetGuiResources
EnumDisplaySettingsExA
GetNextDlgTabItem
SetFocus
GetInputDesktop
GetTabbedTextExtentW
SetDeskWallpaper
CreateAcceleratorTableW
GetClipCursor
MenuItemFromPoint
GetForegroundWindow
PeekMessageW
UpdateWindow
EnumPropsExW
LoadKeyboardLayoutA
SetClassLongW
SendMessageCallbackW
CallMsgFilter
GetClassInfoA
GetWindowModuleFileName
SendIMEMessageExA
GetAsyncKeyState
WindowFromDC
OemToCharA
CallMsgFilterA
GetDlgItemTextW
GetTitleBarInfo
msvcrt
memcpy
advapi32
RegOpenKeyExW
shlwapi
StrRetToBufW
StrCSpnA
SHSetValueA
SHAutoComplete
PathRenameExtensionW
StrStrA
StrRChrIA
StrFormatKBSizeW
UrlUnescapeW
StrCpyNW
StrRChrA
ord16
SHRegDuplicateHKey
SHRegDeleteEmptyUSKeyA
PathSetDlgItemPathW
StrToIntW
PathBuildRootW
PathStripToRootW
PathSearchAndQualifyA
SHRegEnumUSKeyW
UrlIsNoHistoryW
StrStrIA
PathFileExistsA
PathCanonicalizeW
PathMakeSystemFolderA
SHRegEnumUSValueW
SHRegDeleteUSValueW
PathRenameExtensionA
PathIsUNCServerW
SHOpenRegStreamW
StrCmpNIW
PathFindOnPathA
SHRegQueryInfoUSKeyW
PathFindNextComponentA
UrlCreateFromPathW
PathBuildRootA
AssocQueryStringA
PathStripPathW
UrlGetPartA
SHSetValueW
PathUnExpandEnvStringsA
PathCompactPathA
SHEnumKeyExA
StrRChrIW
PathRemoveExtensionA
StrChrA
StrCatBuffW
PathCompactPathExW
SHStrDupA
PathIsRelativeW
PathAddBackslashW
SHRegEnumUSKeyA
PathSkipRootW
SHCopyKeyW
PathCompactPathExA
PathRemoveBackslashW
StrRChrW
PathUndecorateW
StrRStrIW
StrFormatKBSizeA
SHEnumValueA
PathGetArgsA
PathUnquoteSpacesA
PathCommonPrefixW
StrTrimA
StrToIntExA
SHGetThreadRef
UrlHashW
UrlUnescapeA
SHRegQueryUSValueA
SHGetInverseCMAP
StrCatW
StrFromTimeIntervalA
SHRegEnumUSValueA
StrPBrkW
PathFindOnPathW
StrRetToBufA
ChrCmpIW
IntlStrEqWorkerA
UrlCompareA
StrPBrkA
SHRegCloseUSKey
PathMakePrettyA
StrCmpW
SHRegDeleteUSValueA
PathIsContentTypeA
UrlIsOpaqueW
SHDeleteKeyW
PathIsDirectoryA
HashData
SHRegGetBoolUSValueA
StrCmpNIA
PathIsUNCA
PathSetDlgItemPathA
StrRetToStrA
PathIsFileSpecW
SHQueryValueExA
PathUnmakeSystemFolderW
PathIsPrefixW
SHRegQueryUSValueW
PathRemoveBlanksA
PathCommonPrefixA
SHRegQueryInfoUSKeyA
ColorHLSToRGB
SHGetValueA
PathRemoveFileSpecW
PathIsPrefixA
PathAppendA
PathAddExtensionA
PathFindSuffixArrayW
PathUndecorateA
wnsprintfA
SHRegGetUSValueA
PathFindExtensionA
SHRegDeleteEmptyUSKeyW
PathCombineW
SHRegWriteUSValueA
PathRemoveBlanksW
PathParseIconLocationA
AssocQueryStringByKeyW
PathRemoveArgsW
PathIsSameRootW
StrSpnW
GetMenuPosFromID
PathIsSameRootA
SHRegSetUSValueA
SHRegOpenUSKeyA
UrlApplySchemeW
StrCSpnW
AssocQueryKeyA
PathRelativePathToA
AssocCreate
SHSkipJunction
StrStrIW
StrToIntExW
SHRegCreateUSKeyW
AssocQueryStringByKeyA
StrFormatByteSize64A
SHOpenRegStream2W
PathUnExpandEnvStringsW
PathAddExtensionW
SHEnumKeyExW
PathIsRootW
PathStripPathA
PathIsUNCServerShareW
PathIsNetworkPathA
PathUnmakeSystemFolderA
PathIsFileSpecA
PathIsContentTypeW
PathSkipRootA
StrFormatByteSizeW
PathMatchSpecA
PathQuoteSpacesA
PathMatchSpecW
SHCreateShellPalette
UrlCombineW
StrCSpnIW
SHDeleteEmptyKeyW
StrDupA
PathFindSuffixArrayA
PathFindFileNameA
Sections
.text Size: 338KB - Virtual size: 338KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text5 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text6 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ