Static task
static1
Behavioral task
behavioral1
Sample
083ce0587c8584b706850ecdf4aa1f22e036047f17709d12f455e6cb75ab0740.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
083ce0587c8584b706850ecdf4aa1f22e036047f17709d12f455e6cb75ab0740.exe
Resource
win10v2004-20220414-en
General
-
Target
083ce0587c8584b706850ecdf4aa1f22e036047f17709d12f455e6cb75ab0740
-
Size
175KB
-
MD5
267609fa21ed79672194a01e213e1f31
-
SHA1
82116fb2a50213a4d10a417cc87ca3777c500340
-
SHA256
083ce0587c8584b706850ecdf4aa1f22e036047f17709d12f455e6cb75ab0740
-
SHA512
ad92c6653a1558db7c99e1ed7d5c852358bc740e82ba8be4d6fd362c49bc511d7f4909f5d28fba7a311f57ae68b4ba97f8d35f122e62966f940fcbe83af71b4e
-
SSDEEP
3072:fOy/lAFFZ8n7UvY2lW2y1MkySXbf72j9J7qTG1FBw:my/qFFZ+z22Mky672jT2TG1
Malware Config
Signatures
Files
-
083ce0587c8584b706850ecdf4aa1f22e036047f17709d12f455e6cb75ab0740.exe windows x86
011fbeb18362cf8847171baaa13d5a4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateFileMappingA
GetTempFileNameA
ReplaceFileA
EnumResourceNamesA
lstrlenW
SizeofResource
lstrcpyA
CloseHandle
SetFilePointer
GlobalAlloc
HeapQueryInformation
WaitForSingleObject
GetFileAttributesA
GlobalHandle
DuplicateHandle
GetModuleHandleW
GetFullPathNameA
CompareStringA
QueryPerformanceFrequency
GetPrivateProfileStringA
EnumResourceLanguagesA
LocalFileTimeToFileTime
CreateProcessA
RaiseException
SetErrorMode
DosDateTimeToFileTime
GlobalReAlloc
GetConsoleMode
HeapAlloc
GetDriveTypeA
lstrlenA
GetDriveTypeW
FindResourceW
TlsFree
GetTimeZoneInformation
FormatMessageA
MultiByteToWideChar
UnlockFile
SetEvent
FileTimeToSystemTime
GetUserDefaultLangID
LockFile
TerminateProcess
FileTimeToLocalFileTime
CopyFileA
WritePrivateProfileStringA
LockResource
lstrcatA
GetCurrentDirectoryA
CreateFileW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
GetFileInformationByHandle
LoadLibraryA
FindFirstChangeNotificationA
IsDebuggerPresent
HeapFree
FlushFileBuffers
FreeEnvironmentStringsW
SetPriorityClass
LoadLibraryExA
LoadLibraryW
SetHandleCount
TlsSetValue
lstrcmpA
GetStdHandle
GetCommandLineA
GetOEMCP
GetFileSizeEx
GetConsoleCP
InterlockedIncrement
GetModuleFileNameW
DeleteFileA
SuspendThread
GetStartupInfoW
SearchPathA
FreeLibrary
GetLocalTime
LocalLock
GetVersionExA
RemoveDirectoryA
FileTimeToDosDateTime
SetEndOfFile
LocalAlloc
WaitForMultipleObjects
GetLastError
LCMapStringW
CompareFileTime
InterlockedDecrement
FreeResource
lstrcpynA
HeapCreate
WriteFile
IsProcessorFeaturePresent
lstrcmpW
GetProcessHeap
FindNextChangeNotification
GetVolumeInformationA
CreateDirectoryA
GetCurrentThread
GetCurrentDirectoryW
SetUnhandledExceptionFilter
ExpandEnvironmentStringsA
CreateEventA
GlobalFlags
GlobalLock
HeapSize
GlobalFree
GetUserDefaultUILanguage
TlsAlloc
GetCPInfo
GetCurrentThreadId
GlobalDeleteAtom
LocalFree
GlobalGetAtomNameA
GetTempPathA
LoadResource
GlobalUnlock
InitializeCriticalSection
GetStringTypeW
FindResourceExW
MoveFileA
GetModuleFileNameA
GetProcAddress
MapViewOfFile
ResumeThread
GetEnvironmentStringsW
LocalReAlloc
CreateThread
GetProfileIntA
GetWindowsDirectoryA
FindCloseChangeNotification
TlsGetValue
CompareStringW
MulDiv
HeapSetInformation
EnterCriticalSection
GetNumberFormatA
GetSystemInfo
GetShortPathNameA
GetPrivateProfileIntA
QueryPerformanceCounter
GetSystemDefaultUILanguage
WinExec
GetDiskFreeSpaceA
GetCurrentProcessId
GetStringTypeExA
GetFileTime
SetFileAttributesA
lstrcmpiA
LocalUnlock
IsValidCodePage
FindResourceExA
GetSystemTimeAsFileTime
RtlUnwind
GetSystemDirectoryW
EnumResourceTypesA
LeaveCriticalSection
WriteConsoleW
SetEnvironmentVariableA
Sleep
ConvertDefaultLocale
GetFileAttributesExA
SetThreadPriority
GetFileSize
SetFileTime
SystemTimeToFileTime
ResetEvent
SetStdHandle
FindResourceA
GetThreadLocale
GlobalFindAtomA
GlobalSize
InterlockedExchange
SetCurrentDirectoryA
CreateFileA
DeleteCriticalSection
GetFileType
GetLocaleInfoA
WideCharToMultiByte
OpenFile
GetVersion
VirtualProtect
CancelIo
GetModuleHandleA
AddAtomA
GetACP
GetTickCount
CancelWaitableTimer
GetCurrentProcess
SetLastError
GlobalAddAtomA
user32
DrawTextW
SetTimer
GetFocus
DestroyMenu
MessageBeep
LoadImageW
RemoveMenu
MonitorFromPoint
PostQuitMessage
LoadMenuW
DefWindowProcW
CallWindowProcW
PeekMessageW
MapWindowPoints
EnumChildWindows
EnumWindows
TrackMouseEvent
DispatchMessageW
GetMenuItemCount
SetWindowLongW
GetWindowRect
GetClassNameW
ScreenToClient
GetMessageW
InvalidateRect
CharNextW
GetCursorPos
UpdateLayeredWindow
LoadCursorW
LoadStringW
GetMenuItemInfoW
SetCursor
DestroyCursor
SetFocus
MonitorFromWindow
AppendMenuW
GetWindow
SetWindowTextW
GetParent
TranslateAcceleratorW
GetWindowThreadProcessId
PtInRect
DestroyWindow
SetForegroundWindow
LoadStringA
LoadIconA
GetForegroundWindow
GetKeyboardLayout
CharLowerA
GetDesktopWindow
IsWindowVisible
EnableWindow
SetWindowPos
ShowWindow
PostMessageW
SendMessageW
UnregisterClassA
TranslateMessage
GetWindowTextW
KillTimer
GetWindowDC
CreatePopupMenu
GetMonitorInfoW
IsWindow
ReleaseDC
GetWindowLongW
TrackPopupMenuEx
GetClientRect
gdi32
CloseFigure
BeginPath
AbortPath
AngleArc
advapi32
SetNamedSecurityInfoW
EnumDependentServicesW
BuildExplicitAccessWithNameW
SetServiceStatus
CloseServiceHandle
SetEntriesInAclW
RegOpenKeyExW
OpenSCManagerW
RegOpenKeyW
StartServiceW
RegCreateKeyExW
RegCloseKey
RegCreateKeyW
QueryServiceStatusEx
RegSetValueExW
SetTokenInformation
OpenServiceW
ReportEventW
RegisterServiceCtrlHandlerExW
RevertToSelf
CreateServiceW
GetNamedSecurityInfoW
RegQueryValueExW
CreateProcessAsUserW
ControlService
DuplicateTokenEx
GetTokenInformation
StartServiceCtrlDispatcherW
DeregisterEventSource
ChangeServiceConfigW
OpenProcessToken
RegEnumKeyW
DeleteService
RegisterEventSourceW
shell32
SHGetMalloc
SHEmptyRecycleBinW
SHGetSpecialFolderPathW
ole32
CoInitialize
shlwapi
PathCombineW
PathRemoveFileSpecW
StrStrIW
PathFindFileNameW
PathQuoteSpacesW
PathAppendW
PathFileExistsW
version
VerQueryValueW
oledlg
ord8
OleUIBusyW
wtsapi32
WTSEnumerateSessionsW
WTSFreeMemory
psapi
GetModuleBaseNameA
GetModuleInformation
GetModuleFileNameExW
msvcrt
_except_handler3
_CIsin
_CIcos
exit
__set_app_type
_exit
Sections
.text Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ