Static task
static1
Behavioral task
behavioral1
Sample
0b96754a84bc2c01e4e8d64a534c03b5636fb6e958f7c381f9c27e646466cd32.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0b96754a84bc2c01e4e8d64a534c03b5636fb6e958f7c381f9c27e646466cd32.exe
Resource
win10v2004-en-20220113
General
-
Target
0b96754a84bc2c01e4e8d64a534c03b5636fb6e958f7c381f9c27e646466cd32
-
Size
348KB
-
MD5
272220cefcb1b929e0fe0bb6da3557ca
-
SHA1
d302ddbad294b31e3d92bd1ea1eb7bd64d142a1f
-
SHA256
0b96754a84bc2c01e4e8d64a534c03b5636fb6e958f7c381f9c27e646466cd32
-
SHA512
5574e8a7dc7dfb07650c613aab678cfd93ef48b3674779f22bed321ab266f0c4b0b6b31f8eb907a6836f7c7677e1c4739ccefa1214c9e7d6cfe52fbb213f7288
-
SSDEEP
6144:zbVO1cG/3mdn5NPUeYtjCJ2GnXGOr709nzLgQM4M:nn5NPUjtjAGOrQa3
Malware Config
Signatures
Files
-
0b96754a84bc2c01e4e8d64a534c03b5636fb6e958f7c381f9c27e646466cd32.exe windows x86
c2682ff10185614b2a5692ebc459857d
Code Sign
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptStringToBinaryA
kernel32
GetFileTime
GetTickCount
RtlUnwind
HeapAlloc
RaiseException
HeapFree
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetACP
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetFileAttributesA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
Sleep
GetCurrentProcess
LockResource
SizeofResource
LoadResource
FindResourceA
GetProcAddress
LoadLibraryW
GetVersionExA
GetModuleHandleA
InterlockedExchange
MultiByteToWideChar
WideCharToMultiByte
GetLastError
GetVersion
CompareStringA
CompareStringW
lstrlenA
SetLastError
MulDiv
GlobalUnlock
GlobalLock
GlobalDeleteAtom
FreeLibrary
GlobalAlloc
lstrcmpA
LoadLibraryA
GetLocaleInfoA
EnumResourceLanguagesA
GetModuleFileNameA
ConvertDefaultLocale
GetCurrentThreadId
GetCurrentThread
FileTimeToLocalFileTime
SetErrorMode
FileTimeToSystemTime
GetOEMCP
GetCPInfo
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
InterlockedIncrement
WritePrivateProfileStringA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
InterlockedDecrement
GetModuleFileNameW
FormatMessageA
LocalFree
GlobalFree
FreeResource
GetCurrentProcessId
GlobalAddAtomA
CloseHandle
user32
RegisterClipboardFormatA
PostThreadMessageA
GetSysColorBrush
ReleaseCapture
LoadCursorA
SetCapture
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
CopyRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
UnhookWindowsHookEx
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
SetRect
InvalidateRect
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
DestroyMenu
UnregisterClassA
MessageBeep
GetNextDlgGroupItem
GetMenuCheckMarkDimensions
LoadBitmapA
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableA
CharNextA
ReleaseDC
GetDC
DrawIcon
SendMessageA
IsIconic
GetWindowRect
GetClientRect
LoadIconA
EnableWindow
GetSystemMetrics
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
PtInRect
CharUpperA
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
GetSysColor
PostQuitMessage
PostMessageA
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
GetParent
GetFocus
MapWindowPoints
gdi32
SetTextColor
SetMapMode
DeleteObject
GetObjectA
GetViewportExtEx
GetWindowExtEx
SelectObject
OffsetViewportOrgEx
ScaleViewportExtEx
SetWindowExtEx
SetBkColor
ExtSelectClipRgn
CreateBitmap
GetStockObject
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
RestoreDC
SaveDC
GetDeviceCaps
DeleteDC
CreateDCA
SetViewportOrgEx
SetViewportExtEx
GetClipBox
GetDCOrgEx
Rectangle
Escape
ExtTextOutA
TextOutA
RectVisible
ScaleWindowExtEx
PtVisible
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
comctl32
ord17
shlwapi
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoRevokeClassObject
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemAlloc
oleaut32
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy
SysFreeString
Sections
.text Size: 208KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ