Static task
static1
Behavioral task
behavioral1
Sample
b78d9d5c48f70abdc2fabf4b9ffbe6d83795beb88a06f3468e851b340b32f06c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b78d9d5c48f70abdc2fabf4b9ffbe6d83795beb88a06f3468e851b340b32f06c.exe
Resource
win10v2004-20240802-en
General
-
Target
b78d9d5c48f70abdc2fabf4b9ffbe6d83795beb88a06f3468e851b340b32f06c
-
Size
417KB
-
MD5
f8e346ccae9ad3fe10cd5891529ec5fc
-
SHA1
67f8ebef805dfbb290f73bcd3f1a4bbd357eac47
-
SHA256
b78d9d5c48f70abdc2fabf4b9ffbe6d83795beb88a06f3468e851b340b32f06c
-
SHA512
0d08222c0c91e65a7716e467f146e9ae6107ddec2b5036e1f2c7108914eb2b5ad8eb59597be0a8d7cdd8207232722339b9be0c1618748e71355f4e5a8d666c47
-
SSDEEP
12288:LAyvjg+rkSsW5IMwWvrWkTU04qOLQXA4GV:fvjg+rkJMw2rWkTUAw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b78d9d5c48f70abdc2fabf4b9ffbe6d83795beb88a06f3468e851b340b32f06c
Files
-
b78d9d5c48f70abdc2fabf4b9ffbe6d83795beb88a06f3468e851b340b32f06c.exe windows:4 windows x86 arch:x86
0949b96320f05c390f60491a969d638d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendIMEMessageExW
EnumDisplaySettingsExA
GetComboBoxInfo
CloseWindow
SetScrollInfo
ReplyMessage
DdeInitializeW
EndTask
EnumPropsW
DdeQueryStringA
SendMessageA
CopyImage
DdeImpersonateClient
CharPrevA
advapi32
RegDeleteKeyA
DuplicateToken
RegCreateKeyExW
RegQueryValueExA
RegQueryMultipleValuesA
CryptSetProviderExW
RegSetValueA
LookupPrivilegeNameA
RegQueryInfoKeyW
RegCreateKeyExA
RegFlushKey
RegSetValueW
LookupSecurityDescriptorPartsA
CryptEnumProviderTypesA
CryptGetDefaultProviderA
LookupAccountNameW
RegReplaceKeyA
CryptSetProviderExA
CryptVerifySignatureW
CryptEnumProviderTypesW
CryptImportKey
shell32
FreeIconList
SHGetNewLinkInfo
SHGetDiskFreeSpaceA
SHChangeNotify
ShellAboutW
SHGetSpecialFolderLocation
DuplicateIcon
FindExecutableW
SHFileOperationW
SHGetPathFromIDListW
SHInvokePrinterCommandW
DragAcceptFiles
gdi32
CreateMetaFileW
EnumFontFamiliesExW
StrokeAndFillPath
PolylineTo
AddFontResourceA
SetGraphicsMode
SetMapMode
PlayEnhMetaFile
SetLayout
SetPaletteEntries
ExtCreateRegion
EnumObjects
BeginPath
GetTextAlign
GetDeviceCaps
FloodFill
kernel32
GetModuleHandleA
GetFileType
GetCommandLineA
TlsFree
TlsGetValue
RtlUnwind
GetStringTypeA
EnterCriticalSection
SetConsoleCtrlHandler
GetCurrentThreadId
GetProcAddress
HeapCreate
SetWaitableTimer
GetTimeZoneInformation
GetVersionExA
GetModuleHandleW
GetPrivateProfileSectionNamesW
GetDateFormatA
GetCurrentProcess
InterlockedExchange
GetStartupInfoA
InitializeCriticalSectionAndSpinCount
SystemTimeToFileTime
UnhandledExceptionFilter
ReadConsoleInputA
IsValidLocale
TlsAlloc
SetConsoleOutputCP
VirtualFree
SetUnhandledExceptionFilter
CompareStringA
ExitProcess
HeapAlloc
SetLocaleInfoA
EnumSystemLocalesA
HeapSize
GetCurrentProcessId
GetCPInfo
SetConsoleScreenBufferSize
QueryPerformanceCounter
SetHandleCount
GetLastError
LCMapStringA
GetACP
GetStdHandle
LeaveCriticalSection
CompareStringW
IsValidCodePage
TerminateProcess
HeapDestroy
GetCurrentThread
GetTimeFormatA
Sleep
GetEnvironmentStringsW
GetOEMCP
VirtualQuery
WideCharToMultiByte
GetDriveTypeA
GetLocaleInfoA
GetLocaleInfoW
InterlockedDecrement
GetUserDefaultLCID
HeapReAlloc
DeleteCriticalSection
TransmitCommChar
LCMapStringW
TlsSetValue
EnumResourceTypesW
WriteFile
GetSystemTimeAsFileTime
HeapFree
SetEnvironmentVariableA
lstrlen
GetTickCount
GetModuleFileNameA
GetStringTypeW
IsDebuggerPresent
GetVolumeInformationW
FreeEnvironmentStringsW
SetLastError
GlobalAddAtomA
InterlockedIncrement
FreeLibrary
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
LoadLibraryA
MultiByteToWideChar
comdlg32
PageSetupDlgW
ChooseFontA
LoadAlterBitmap
ChooseColorA
ReplaceTextW
GetSaveFileNameA
GetOpenFileNameA
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 272KB - Virtual size: 281KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ