Static task
static1
Behavioral task
behavioral1
Sample
0ba2f0565a5f19579335c239daaa784b346f901bbda6ec6c863af3a5cf769c2a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ba2f0565a5f19579335c239daaa784b346f901bbda6ec6c863af3a5cf769c2a.exe
Resource
win10v2004-20241007-en
General
-
Target
0ba2f0565a5f19579335c239daaa784b346f901bbda6ec6c863af3a5cf769c2a
-
Size
416KB
-
MD5
09e02038c2cbf5773e330365fdbff979
-
SHA1
a58253be5d0894273b06282523545196811da047
-
SHA256
0ba2f0565a5f19579335c239daaa784b346f901bbda6ec6c863af3a5cf769c2a
-
SHA512
56d717ee6c6b06e62cda5e8b13eab0ff820c560e3f33823819c1f51bbd47c64240f6ceb99ba85e6b18d3cb9bb81b4630023c73370320c2a902b5fa3ae06c94c7
-
SSDEEP
6144:LjLSdhMVMMV7E0KnZOu4BCnSOzOqhgdqKkC2bm5drbXq8ItZc:gqrV7E04OuxfzPhgqCZ5RXq8I8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ba2f0565a5f19579335c239daaa784b346f901bbda6ec6c863af3a5cf769c2a
Files
-
0ba2f0565a5f19579335c239daaa784b346f901bbda6ec6c863af3a5cf769c2a.exe windows:5 windows x86 arch:x86
5d1e13c318faf3d443f48737018470d7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
LoadLibraryA
lstrcpynW
lstrcmpiW
lstrcmpW
lstrcatW
_lread
WideCharToMultiByte
WaitForMultipleObjects
VirtualFreeEx
VirtualFree
VerifyVersionInfoW
UnhandledExceptionFilter
TerminateProcess
SystemTimeToTzSpecificLocalTime
SwitchToFiber
SuspendThread
SetHandleCount
ReadConsoleW
ReadConsoleOutputW
ReadConsoleOutputCharacterA
QueryPerformanceCounter
MultiByteToWideChar
LocalFree
LoadModule
LoadLibraryW
GetTickCount
GetSystemTimeAsFileTime
GetSystemInfo
GetProcAddress
GetModuleHandleA
GetLastError
GetExitCodeThread
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetComputerNameExW
FreeUserPhysicalPages
FreeLibrary
FormatMessageW
FindNextFileW
EnumUILanguagesW
DeleteTimerQueue
CreateTimerQueue
ReadConsoleOutputCharacterW
CreateMutexA
user32
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTabbedTextExtentA
GetTabbedTextExtentW
GetTopWindow
GetUpdateRect
GetUserObjectInformationW
GetWindow
GetWindowDC
GetWindowLongA
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowRgn
GetWindowTextA
GetWindowTextLengthA
GetWindowThreadProcessId
GrayStringA
HideCaret
InSendMessage
InflateRect
InsertMenuA
InsertMenuItemA
IntersectRect
InvalidateRect
InvalidateRgn
InvertRect
IsCharAlphaA
IsCharAlphaNumericA
IsCharAlphaNumericW
IsCharAlphaW
IsCharLowerA
IsCharLowerW
IsCharUpperA
IsCharUpperW
IsChild
IsClipboardFormatAvailable
IsDialogMessageA
IsDlgButtonChecked
IsIconic
IsMenu
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
IsZoomed
KillTimer
LoadAcceleratorsA
LoadAcceleratorsW
LoadBitmapA
LoadBitmapW
LoadCursorA
LoadCursorW
LoadIconA
LoadIconW
LoadImageA
LoadImageW
LoadMenuA
LoadMenuIndirectA
LoadMenuW
LoadStringA
FillRect
LockWindowUpdate
MapDialogRect
MapVirtualKeyA
MapVirtualKeyExA
MapWindowPoints
MessageBeep
MessageBoxA
MessageBoxW
ModifyMenuA
ModifyMenuW
MonitorFromPoint
MonitorFromWindow
MoveWindow
MsgWaitForMultipleObjectsEx
NotifyWinEvent
OemToCharBuffA
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
PostThreadMessageA
PtInRect
RealChildWindowFromPoint
RedrawWindow
RegisterClassA
RegisterClassExA
RegisterClassW
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
RemovePropW
ReuseDDElParam
ScreenToClient
ScrollWindow
ScrollWindowEx
SendDlgItemMessageA
SendMessageA
SendMessageW
SendNotifyMessageA
SetActiveWindow
SetCapture
SetCaretBlinkTime
SetCaretPos
SetClassLongA
SetClipboardData
SetCursor
SetCursorPos
SetDlgItemInt
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetKeyboardState
SetLayeredWindowAttributes
SetMenu
SetMenuDefaultItem
GetSubMenu
SetMenuItemBitmaps
SetParent
SetPropA
SetPropW
SetRect
SetRectEmpty
SetScrollInfo
SetScrollPos
SetScrollRange
SetSysColors
SetTimer
SetWindowContextHelpId
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextA
SetWindowTextW
SetWindowsHookExA
ShowCaret
ShowCursor
ShowOwnedPopups
ShowScrollBar
ShowWindow
SubtractRect
SystemParametersInfoA
TabbedTextOutA
TileWindows
ToAscii
ToAsciiEx
TrackMouseEvent
TrackPopupMenu
TrackPopupMenuEx
TranslateAcceleratorA
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnpackDDElParam
UnregisterClassA
UpdateLayeredWindow
UpdateWindow
ValidateRect
WaitMessage
WinHelpA
WindowFromDC
WindowFromPoint
keybd_event
wsprintfA
EqualRect
EnumDisplaySettingsExW
EnumDisplayMonitors
EnumDesktopsA
EnumClipboardFormats
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExA
DrawTextA
DrawStateA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DestroyAcceleratorTable
DeleteMenu
DeferWindowPos
DefWindowProcW
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
DdeQueryConvInfo
CreateWindowExW
CreateWindowExA
CreatePopupMenu
CreateMenu
CreateDialogIndirectParamA
CreateCaret
CreateAcceleratorTableA
CopyRect
CopyImage
CopyIcon
CopyAcceleratorTableA
CloseClipboard
ClientToScreen
ChildWindowFromPointEx
CheckRadioButton
CheckMenuRadioItem
CheckMenuItem
CheckDlgButton
CharUpperW
CharUpperBuffA
CharUpperA
CharToOemW
CharToOemBuffA
CharNextA
CharLowerW
CharLowerBuffW
CharLowerBuffA
CharLowerA
ChangeDisplaySettingsExA
CallWindowProcW
CallWindowProcA
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
GetScrollRange
GetScrollPos
GetScrollInfo
GetQueueStatus
GetPropW
GetPropA
GetProcessWindowStation
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMonitorInfoA
GetMessageW
GetMessageTime
GetMessagePos
GetMessageA
GetMenuStringW
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenuInfo
GetMenuDefaultItem
GetMenuCheckMarkDimensions
GetMenuBarInfo
GetMenu
GetListBoxInfo
GetLastInputInfo
GetLastActivePopup
GetKeyboardState
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItemTextA
GetDlgItemInt
GetDlgItem
GetDlgCtrlID
GetDialogBaseUnits
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetComboBoxInfo
GetClipboardOwner
GetClipboardData
GetClientRect
GetClassNameW
GetClassNameA
GetClassLongA
GetClassInfoW
GetClassInfoExA
GetClassInfoA
GetCaretPos
GetCapture
GetAsyncKeyState
GetAncestor
GetActiveWindow
FrameRect
FlashWindowEx
FindWindowExA
SetMenuInfo
FindWindowA
AttachThreadInput
AppendMenuW
AppendMenuA
AdjustWindowRectEx
LoadStringW
gdi32
AddFontResourceW
AddFontResourceA
SetTextAlign
GdiFlush
CreateCompatibleDC
AbortPath
AbortDoc
SetTextColor
SelectFontLocal
GetRasterizerCaps
GetGlyphOutlineWow
GetClipRgn
BRUSHOBJ_pvGetRbrush
GetBrushOrgEx
GdiGetPageCount
GdiConvertFont
GdiConvertEnhMetaFile
EnumICMProfilesW
EngLineTo
EngGetPrinterDataFileName
ColorCorrectPalette
CLIPOBJ_bEnum
advapi32
RegQueryValueA
RegDeleteValueW
RegEnumKeyA
RegEnumKeyExA
RegEnumKeyW
RegEnumValueA
RegGetKeySecurity
RegOpenKeyExA
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExA
RegQueryValueExW
RegSetKeySecurity
RegSetValueA
RegSetValueExA
RegSetValueExW
RegisterEventSourceA
ReportEventA
SetFileSecurityA
SetSecurityDescriptorDacl
RegDeleteKeyW
RegDeleteKeyA
AddAccessAllowedAce
BuildTrusteeWithSidA
CopySid
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
DeregisterEventSource
GetAclInformation
GetEffectiveRightsFromAclA
GetFileSecurityA
GetLengthSid
GetSecurityDescriptorDacl
GetSecurityDescriptorOwner
GetSecurityInfo
GetTokenInformation
GetUserNameA
GetUserNameW
InitializeAcl
InitializeSecurityDescriptor
IsTextUnicode
LookupAccountNameA
OpenProcessToken
RegCloseKey
RegCreateKeyExA
RegCreateKeyExW
RegCreateKeyW
RegDeleteValueA
shell32
ExtractIconA
Shell_NotifyIconA
Shell_NotifyIcon
ShellExecuteW
ShellExecuteExA
ShellExecuteA
SHPathPrepareForWriteW
SHInvokePrinterCommandW
SHGetSpecialFolderLocation
SHGetSettings
SHGetPathFromIDListW
SHGetPathFromIDListA
SHGetPathFromIDList
SHGetMalloc
SHGetInstanceExplorer
SHGetFolderPathA
SHGetFileInfoW
SHGetFileInfoA
SHGetFileInfo
SHGetDesktopFolder
SHGetDataFromIDListW
SHFreeNameMappings
SHFileOperationA
CommandLineToArgvW
DoEnvironmentSubstW
DragAcceptFiles
DragFinish
DragQueryFileA
DragQueryFileW
DuplicateIcon
ExtractAssociatedIconA
ExtractAssociatedIconW
WOWShellExecute
ExtractIconEx
SHAddToRecentDocs
SHAppBarMessage
SHBindToParent
SHBrowseForFolderA
SHChangeNotify
SHCreateDirectoryExA
SHCreateDirectoryExW
SHEmptyRecycleBinA
shlwapi
ColorAdjustLuma
PathCompactPathExW
PathFindExtensionA
PathFindFileNameA
PathIsNetworkPathA
PathIsNetworkPathW
PathIsRelativeA
PathIsUNCA
PathMatchSpecA
PathRelativePathToA
PathRelativePathToW
PathRemoveExtensionA
PathRemoveFileSpecW
PathStripToRootA
SHAutoComplete
SHDeleteKeyA
SHDeleteValueA
StrChrIA
StrChrIW
StrCmpNIA
StrStrIA
StrStrIW
StrStrW
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
ImmSetCompositionWindow
Sections
.text Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ