Static task
static1
Behavioral task
behavioral1
Sample
b1d856afe8ffd2649843d64affe9d4c3.exe
Resource
win7-20220310-en
General
-
Target
b1d856afe8ffd2649843d64affe9d4c3
-
Size
3.9MB
-
MD5
b1d856afe8ffd2649843d64affe9d4c3
-
SHA1
6015d16a00f0c4ad3d68c8c83ae20305a1127a99
-
SHA256
37f06f87355592007d3f0a6acc3e0535b0a5d5d2e224280e5a5f8792cf88c9e4
-
SHA512
6c707636d934cfeefc42271d3bc4ca82cb243ed42b5bf2f999f7529cb4a761365bb94382d38ed4c0e9549ff9580d627414d3461ace467a8986faeaaf08707cab
-
SSDEEP
98304:674vNtSUxnNnnVktiVmNeTFPxzwHVL/4SGFNkWzMo4OiZrq1DfPHNADtV6v+:674vNtSoGqDFNkWYo4O7NADtV6v+
Malware Config
Signatures
Files
-
b1d856afe8ffd2649843d64affe9d4c3.exe windows x86
c988d4a19030b964537c705063fc6a15
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLCID
GetCommandLineW
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
ExitProcess
GetModuleHandleExW
ExitThread
GetTimeZoneInformation
RtlUnwind
HeapQueryInformation
VirtualAlloc
SetStdHandle
GetFileType
GetStdHandle
GetStartupInfoW
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateSemaphoreW
IsValidCodePage
GetACP
GetOEMCP
SetFilePointerEx
GetConsoleCP
GetConsoleMode
GetStringTypeW
ReadConsoleW
GetTempFileNameW
EnumSystemLocalesW
SetEnvironmentVariableW
WriteConsoleW
SetEnvironmentVariableA
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualFree
FreeLibraryAndExitThread
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
GetProfileIntW
SearchPathW
LoadLibraryExA
GetThreadTimes
lstrlenA
FindResourceExW
GetWindowsDirectoryW
IsValidLocale
VirtualProtect
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
VerifyVersionInfoW
VerSetConditionMask
lstrcmpiW
DuplicateHandle
FindClose
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentDirectoryW
GlobalFlags
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetThreadLocale
FileTimeToSystemTime
GlobalGetAtomNameW
GlobalFindAtomW
EncodePointer
lstrcpyW
ResumeThread
SetThreadPriority
CreateEventW
SetEvent
FreeResource
GetModuleHandleA
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcmpW
lstrcmpA
GlobalDeleteAtom
GetCurrentThread
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
InterlockedDecrement
DeleteFileA
AreFileApisANSI
GetSystemTime
LocalFree
GetTempPathA
GetVersionExA
GetCurrentThreadId
GetFileAttributesExW
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingW
CreateFileMappingA
GetDiskFreeSpaceW
LockFileEx
GetTempPathW
FlushFileBuffers
GetFileAttributesW
HeapValidate
HeapCreate
GetFileAttributesA
GetVersionExW
FormatMessageW
InitializeCriticalSection
FormatMessageA
GetSystemTimeAsFileTime
UnlockFileEx
WaitForSingleObjectEx
LockFile
FlushViewOfFile
UnlockFile
InterlockedCompareExchange
QueryPerformanceCounter
SystemTimeToFileTime
UnmapViewOfFile
MapViewOfFile
TryEnterCriticalSection
HeapCompact
GetFullPathNameA
GetFullPathNameW
GetTickCount
SetEndOfFile
GetExitCodeThread
Sleep
FindNextFileW
LoadLibraryExW
FindFirstFileW
CreateFileA
GetVolumeInformationW
GetCurrentProcessId
DeleteFileW
GetModuleFileNameA
GetModuleFileNameW
CopyFileW
WideCharToMultiByte
GetSystemDirectoryW
GetModuleHandleW
WaitForSingleObject
CreateDirectoryW
GetCurrentProcess
VirtualQuery
CreateMutexW
GetFileSize
OutputDebugStringA
TerminateProcess
TerminateThread
LoadLibraryW
FreeLibrary
CreateThread
CloseHandle
CreateFileW
ReadFile
WriteFile
OutputDebugStringW
SetFilePointer
LockResource
LoadLibraryA
GetProcAddress
MultiByteToWideChar
SizeofResource
GetPrivateProfileStringW
LoadResource
FindResourceW
DeleteCriticalSection
DecodePointer
EnterCriticalSection
HeapSize
GetLastError
RaiseException
LeaveCriticalSection
HeapDestroy
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapFree
HeapAlloc
LCMapStringW
HeapReAlloc
user32
GetComboBoxInfo
DestroyCursor
CreateMenu
GetWindowRgn
HideCaret
InvertRect
CopyIcon
GetIconInfo
GetDoubleClickTime
LockWindowUpdate
BringWindowToTop
SetRect
SetCursorPos
LoadImageW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetParent
EnumDisplayMonitors
SetLayeredWindowAttributes
MonitorFromPoint
UnionRect
EnableScrollBar
UpdateLayeredWindow
IsMenu
SetMenuDefaultItem
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
IntersectRect
SetRectEmpty
MessageBeep
GetAsyncKeyState
IsZoomed
TrackMouseEvent
CharUpperW
DestroyIcon
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
KillTimer
SetTimer
DeleteMenu
CopyImage
RealChildWindowFromPoint
LoadCursorW
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetTopWindow
GetClassLongW
SetWindowLongW
EqualRect
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
TranslateMDISysAccel
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
SystemParametersInfoW
CopyRect
GetMenuItemInfoW
DestroyMenu
GetClassNameW
InvalidateRect
UpdateWindow
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
SetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
ValidateRect
GetKeyState
GetActiveWindow
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
MapDialogRect
GetWindow
SetWindowContextHelpId
SetWindowPos
DrawIconEx
IsRectEmpty
OffsetRect
InflateRect
FillRect
DrawFocusRect
GetSysColorBrush
GetSysColor
MapWindowPoints
SendDlgItemMessageA
GetNextDlgGroupItem
InvalidateRgn
MessageBoxW
GetDesktopWindow
EnableWindow
RedrawWindow
SetWindowRgn
DrawStateW
IsWindowVisible
DrawFrameControl
DrawEdge
RegisterWindowMessageW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
PtInRect
ScreenToClient
ClientToScreen
GetCursorPos
GetWindowRect
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
IsCharLowerW
IsClipboardFormatAvailable
SubtractRect
GetKeyNameTextW
PostThreadMessageW
FrameRect
CreateAcceleratorTableW
MapVirtualKeyW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CharUpperBuffW
IsWindow
GetLastActivePopup
RegisterClipboardFormatW
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
SetForegroundWindow
GetUpdateRect
SendMessageW
GetSystemMetrics
AppendMenuW
LoadIconW
GetClientRect
DrawIcon
IsIconic
GetSystemMenu
wsprintfA
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
RemoveMenu
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
GetParent
LoadBitmapW
PostMessageW
PostQuitMessage
ShowOwnedPopups
SetCursor
IsWindowEnabled
GetWindowLongW
GetWindowThreadProcessId
CopyAcceleratorTableW
CharNextW
SetClassLongW
DestroyAcceleratorTable
IsChild
ModifyMenuW
LoadMenuW
gdi32
BitBlt
CreateCompatibleDC
CreatePen
CreatePatternBrush
DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
GetObjectW
MoveToEx
TextOutW
SetViewportExtEx
Polygon
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetTextMetricsW
CreateCompatibleBitmap
CreateDIBSection
GetMapMode
SetRectRgn
DPtoLP
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
Rectangle
GetRgnBox
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
ExtFloodFill
SetPaletteEntries
EnumFontFamiliesExW
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
SetPixelV
GetTextFaceW
CreatePolygonRgn
ExtTextOutW
PatBlt
GetTextExtentPoint32W
GetTextColor
GetBkColor
Ellipse
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreateHatchBrush
CreateEllipticRgn
CombineRgn
CreateBitmap
GetDeviceCaps
CreateRoundRectRgn
Polyline
CreateDCW
SetViewportOrgEx
DeleteDC
CopyMetaFileW
msimg32
TransparentBlt
AlphaBlend
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
shell32
SHGetFileInfoW
SHGetSpecialFolderPathW
SHGetFolderPathA
ShellExecuteW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
DragFinish
DragQueryFileW
SHAppBarMessage
ShellExecuteExW
SHGetDesktopFolder
comctl32
InitCommonControlsEx
shlwapi
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
PathFileExistsW
StrFormatKBSizeW
uxtheme
GetWindowTheme
GetThemeSysColor
OpenThemeData
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeParentBackground
DrawThemeText
IsAppThemed
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
oledlg
OleUIBusyW
gdiplus
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
wininet
InternetCloseHandle
InternetReadFile
InternetOpenUrlW
InternetQueryOptionW
InternetOpenW
winhttp
WinHttpSetOption
WinHttpSendRequest
WinHttpWriteData
WinHttpConnect
WinHttpQueryHeaders
WinHttpSetStatusCallback
WinHttpReceiveResponse
WinHttpReadData
WinHttpSetCredentials
WinHttpAddRequestHeaders
WinHttpQueryAuthSchemes
WinHttpOpen
WinHttpCloseHandle
WinHttpCrackUrl
WinHttpOpenRequest
quartz
AMGetErrorTextW
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
winmm
PlaySoundW
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 468KB - Virtual size: 467KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ