Static task
static1
Behavioral task
behavioral1
Sample
6decaf5898d6f0279253fe7188af94299a73be46a47114e4d222005f4af3e232N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6decaf5898d6f0279253fe7188af94299a73be46a47114e4d222005f4af3e232N.exe
Resource
win10v2004-20240802-en
General
-
Target
6decaf5898d6f0279253fe7188af94299a73be46a47114e4d222005f4af3e232N
-
Size
2.7MB
-
MD5
19e4adc53df15d668df5f6f74569f960
-
SHA1
50dcd8408398d4074035a2531a09da46eba56453
-
SHA256
6decaf5898d6f0279253fe7188af94299a73be46a47114e4d222005f4af3e232
-
SHA512
3b0fa2c1212487a41445cf9892a345eeac2043b0608333ef656a41df314a672a0c4db171280b425fce00e026021ba52e20c546e4a0122d424d96ad4b54b67c9d
-
SSDEEP
49152:TqDMNAXVg607pBLM+ObvQP7t0Fd3f8nP5puj:OoNAvsphM+Ojg76X8nP5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6decaf5898d6f0279253fe7188af94299a73be46a47114e4d222005f4af3e232N
Files
-
6decaf5898d6f0279253fe7188af94299a73be46a47114e4d222005f4af3e232N.exe windows:4 windows x86 arch:x86
2f95b775dc828a43f461a0290265cd84
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msacm32
acmStreamUnprepareHeader
acmFormatSuggest
acmStreamPrepareHeader
acmStreamConvert
acmStreamSize
acmStreamClose
acmStreamOpen
winmm
waveInStart
waveInReset
waveInPrepareHeader
waveInOpen
waveInGetNumDevs
waveInGetDevCapsA
waveInClose
waveInAddBuffer
timeSetEvent
timeKillEvent
timeGetTime
timeGetDevCaps
timeEndPeriod
waveInUnprepareHeader
sndPlaySoundA
mixerSetControlDetails
mixerOpen
mixerGetNumDevs
mixerGetLineInfoA
mixerGetLineControlsA
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
mciGetErrorStringA
mciSendCommandA
mixerClose
mixerGetControlDetailsA
waveOutClose
waveOutGetDevCapsA
waveOutGetNumDevs
timeBeginPeriod
waveOutWrite
waveOutGetPosition
imm32
ImmGetContext
comctl32
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
ImageList_Draw
ImageList_GetIcon
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetImageInfo
ord17
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
kernel32
GetModuleHandleA
GetOEMCP
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetProcessHeap
GetProcessVersion
GetProfileIntA
GetProfileStringA
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeExA
GetStringTypeW
GetSystemDefaultLangID
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetThreadLocale
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFlags
GetLocalTime
GlobalGetAtomNameA
GlobalHandle
GlobalLock
GlobalMemoryStatus
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadCodePtr
IsBadReadPtr
IsBadStringPtrA
IsBadWritePtr
IsDBCSLeadByte
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LoadLibraryExA
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LocalLock
LocalReAlloc
LocalUnlock
LockFile
LockResource
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
lstrlenW
MoveFileA
MoveFileExA
MulDiv
MultiByteToWideChar
OpenFile
OpenProcess
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
RemoveDirectoryA
ResetEvent
SetCurrentDirectoryA
SetEndOfFile
SetEnvironmentVariableA
GetModuleFileNameA
SetEvent
SetFileAttributesA
SetFilePointer
SetFileTime
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SetVolumeLabelA
SizeofResource
Sleep
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnlockFile
VirtualAlloc
VirtualFree
VirtualLock
VirtualProtect
VirtualUnlock
WaitForSingleObject
WideCharToMultiByte
WriteFile
WritePrivateProfileStringA
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameA
GetFileType
GetFileTime
GetFileSize
GetFileAttributesA
GetExitCodeThread
GetExitCodeProcess
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
GetDriveTypeA
GetDiskFreeSpaceA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryA
GetCPInfo
GetComputerNameA
GetACP
FreeResource
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageA
FlushFileBuffers
FindResourceA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsA
ExitProcess
EnumSystemLocalesA
DuplicateHandle
DosDateTimeToFileTime
DeviceIoControl
DeleteFileA
DeleteCriticalSection
CreateThread
CreateProcessA
CreateFileA
CreateEventA
CreateDirectoryA
CopyFileA
CompareStringW
CompareStringA
CloseHandle
GetStartupInfoW
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
FreeLibrary
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
SetErrorMode
GetLogicalDriveStringsA
RtlUnwind
UnhandledExceptionFilter
SetHandleCount
GlobalFree
user32
GetWindowDC
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowRgn
GetWindowTextA
GetWindowTextLengthA
GetWindowThreadProcessId
GrayStringA
HideCaret
InflateRect
InsertMenuA
IntersectRect
InvalidateRect
InvalidateRgn
InvertRect
IsChild
IsClipboardFormatAvailable
IsDialogMessageA
IsIconic
IsMenu
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
KillTimer
LoadAcceleratorsA
LoadBitmapA
LoadCursorA
LoadIconA
LoadImageA
LoadMenuA
LoadStringA
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxA
ModifyMenuA
MoveWindow
MsgWaitForMultipleObjects
OemToCharA
OemToCharBuffA
OffsetRect
PeekMessageA
PostMessageA
PostQuitMessage
PostThreadMessageA
PtInRect
RedrawWindow
RegisterClassA
RegisterClipboardFormatA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ScreenToClient
SendDlgItemMessageA
SendMessageA
SetActiveWindow
SetCapture
SetCursor
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetMenu
SetMenuDefaultItem
SetMenuItemBitmaps
SetParent
SetPropA
SetRect
SetRectEmpty
SetScrollInfo
SetTimer
SetWindowContextHelpId
SetWindowLongA
SetWindowPos
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
ShowCaret
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoA
TabbedTextOutA
TrackPopupMenu
GetWindow
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassA
UpdateWindow
ValidateRect
WaitForInputIdle
WindowFromPoint
WinHelpA
wsprintfA
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetIconInfo
GetFocus
GetDoubleClickTime
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameA
GetClassLongA
GetClassInfoA
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowA
FillRect
ExitWindowsEx
ExcludeUpdateRgn
EqualRect
EnumWindows
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableMenuItem
DrawTextExA
DrawTextA
DrawStateA
DrawMenuBar
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DrawAnimatedRects
DispatchMessageA
DialogBoxParamA
DestroyWindow
DestroyMenu
DestroyCursor
DeleteMenu
DefWindowProcA
DefDlgProcA
CreateWindowExA
CreatePopupMenu
CreateMenu
CreateDialogIndirectParamA
CopyRect
CopyAcceleratorTableA
CloseWindow
ClipCursor
ClientToScreen
CheckRadioButton
CheckMenuItem
CharUpperBuffA
CharUpperA
CharToOemA
CharPrevA
CharNextA
CharLowerBuffA
CharLowerA
CallWindowProcA
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
AppendMenuA
AdjustWindowRectEx
ReuseDDElParam
UnpackDDElParam
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageTime
GetMessagePos
GetMessageA
GetMenuStringA
GetMenuState
GetMenuItemInfoA
TranslateAcceleratorA
GetMenuItemID
GetForegroundWindow
gdi32
CreateSolidBrush
CreateScalableFontResourceA
StretchDIBits
DeleteDC
DeleteEnhMetaFile
CreateRoundRectRgn
CreateRectRgnIndirect
CreatePen
CreatePatternBrush
CreatePalette
CreateHalftonePalette
CreateFontIndirectA
CreateFontA
CreateDIBSection
AbortDoc
StartPage
StartDocA
SetWinMetaFileBits
SetWindowOrgEx
DeleteMetaFile
DeleteObject
DPtoLP
EndDoc
EndPage
EnumFontFamiliesExA
Escape
ExtCreateRegion
ExtSelectClipRgn
ExtTextOutA
GdiFlush
GetBkColor
GetBkMode
GetClipBox
GetCurrentObject
GetDeviceCaps
GetDIBits
GetEnhMetaFileA
GetEnhMetaFileHeader
GetMapMode
GetMetaFileA
GetMetaFileBitsEx
GetObjectA
GetPaletteEntries
GetStockObject
GetStretchBltMode
GetSystemPaletteEntries
GetTextColor
GetTextExtentPoint32A
GetTextExtentPointA
GetTextMetricsA
GetViewportExtEx
GetWindowExtEx
GetWindowOrgEx
IntersectClipRect
LineTo
LPtoDP
MoveToEx
OffsetViewportOrgEx
OffsetWindowOrgEx
PatBlt
PlayEnhMetaFile
PtInRegion
PtVisible
RealizePalette
Rectangle
RectVisible
RemoveFontResourceA
RestoreDC
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetStretchBltMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
CreateRectRgn
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
comdlg32
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError
PrintDlgA
advapi32
RegCreateKeyA
FreeSid
GetFileSecurityA
GetTokenInformation
GetUserNameA
LookupAccountSidA
LookupPrivilegeValueA
OpenProcessToken
OpenThreadToken
RegCloseKey
AdjustTokenPrivileges
AllocateAndInitializeSid
SetFileSecurityA
RegSetValueExA
RegSetValueA
RegQueryValueExA
RegQueryValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegConnectRegistryA
EqualSid
shell32
ShellExecuteExA
ShellExecuteA
Shell_NotifyIconA
ExtractIconA
DragFinish
DragQueryFileA
ole32
StgOpenStorageOnILockBytes
CoLockObjectExternal
CoInitialize
CoGetClassObject
CoFreeUnusedLibraries
CoCreateInstance
CLSIDFromString
StgCreateDocfileOnILockBytes
RevokeDragDrop
ReleaseStgMedium
RegisterDragDrop
OleUninitialize
OleSetClipboard
OleIsCurrentClipboard
OleInitialize
OleGetClipboard
OleFlushClipboard
OleDuplicateData
CoRegisterMessageFilter
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
CoUninitialize
CLSIDFromProgID
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
DoDragDrop
oleaut32
SysAllocStringByteLen
VariantTimeToSystemTime
VariantInit
VariantCopy
VariantClear
VariantChangeType
LoadTypeLi
RegisterTypeLi
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
ws2_32
WSACancelAsyncRequest
WSAAsyncGetHostByName
WSAGetLastError
WSACleanup
WSAStartup
send
select
recv
inet_addr
htons
ioctlsocket
connect
closesocket
inet_ntoa
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 492KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ