Static task
static1
Behavioral task
behavioral1
Sample
214c0232e8543c80c7c6010319524231beab9d8689b8295f7e13296de886c15c.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
214c0232e8543c80c7c6010319524231beab9d8689b8295f7e13296de886c15c.exe
Resource
win10v2004-20220414-en
General
-
Target
214c0232e8543c80c7c6010319524231beab9d8689b8295f7e13296de886c15c
-
Size
162KB
-
MD5
7ee73d1cff292308227edfb2e4447062
-
SHA1
1fcb2bd04a937ecf027d75c97bca34f4258a20fd
-
SHA256
214c0232e8543c80c7c6010319524231beab9d8689b8295f7e13296de886c15c
-
SHA512
8d0289cbcc4c8891daec8df5318ffde4d23e75e6c903b3d20a565328666f1db3c22331f23067dbb70ef10f3fbe3eaf1009280d67121420025b1ad669ace97b51
-
SSDEEP
3072:J7kWck9GOuiJc+gRz39ajwhZQg3azBlHAPYQhzK/BQT3zeBzd3An1YgCQSPH96P/:J7kVKy/ajHTBOds/Bc3zeBzJAn3ClH9d
Malware Config
Signatures
Files
-
214c0232e8543c80c7c6010319524231beab9d8689b8295f7e13296de886c15c.exe windows x86
95b8b3934aab86b9c0e592cc54168b4a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
GetFullPathNameA
lstrcpyA
GetProcAddress
AreFileApisANSI
GetLastError
LoadLibraryA
GetModuleFileNameA
GlobalAlloc
CreateMutexA
lstrlenW
GetFileAttributesA
InterlockedDecrement
GetStartupInfoA
CreateProcessA
SetLastError
GlobalFree
GetCurrentProcess
ActivateActCtx
GetACP
GetOEMCP
LocalFree
VirtualProtect
OutputDebugStringA
lstrlenA
lstrcpynA
user32
IsWindowVisible
GetDlgCtrlID
SetWindowTextA
SetForegroundWindow
DrawTextA
GetSystemMetrics
IsWindow
UpdateWindow
SendMessageA
FillRect
IsWindowUnicode
SetCapture
GetWindowRect
GetWindowTextA
TabbedTextOutA
PtInRect
GrayStringA
DefWindowProcA
EnumChildWindows
GetParent
EnableWindow
GetSystemMenu
GetKeyboardLayout
GetForegroundWindow
GetDoubleClickTime
IsWindowEnabled
IsZoomed
OffsetRect
ReleaseCapture
SetRect
gdi32
AbortPath
AngleArc
AbortDoc
RectVisible
LPtoDP
SetRectRgn
BitBlt
TextOutA
CreateFontIndirectA
DPtoLP
CreatePolygonRgn
GetTextColor
CombineRgn
Polyline
CreatePalette
CreateRectRgn
PtInRegion
GetObjectA
SetPixel
PtVisible
advapi32
LsaFreeMemory
CryptDestroyHash
LsaClose
RegCloseKey
RegOpenKeyExW
CryptDeriveKey
RegOpenKeyExA
RegDeleteValueA
RegDeleteValueW
CryptEncrypt
RegEnumValueA
CryptAcquireContextA
LsaOpenPolicy
EqualSid
CryptReleaseContext
RegEnumValueW
RegCreateKeyExA
FreeSid
RegCreateKeyExW
CryptCreateHash
CryptDestroyKey
CryptDecrypt
RegSetValueExW
RegQueryValueExW
IsTextUnicode
RegQueryValueExA
RegDeleteKeyW
RegOpenCurrentUser
RegEnumKeyW
CryptHashData
RegSetValueExA
RegOpenKeyW
shell32
ShellExecuteA
SHGetPathFromIDListA
SHGetMalloc
SHGetDesktopFolder
ole32
CoInitialize
CLSIDFromProgID
StringFromCLSID
CoCreateInstance
CoTaskMemFree
CoUninitialize
comctl32
InitCommonControlsEx
_TrackMouseEvent
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
oledlg
OleUIBusyW
psapi
GetModuleBaseNameA
msvcrt
calloc
_mbscmp
__set_app_type
_CIcos
_XcptFilter
_initterm
_vsnprintf
_onexit
??1type_info@@UAE@XZ
_controlfp
__CxxFrameHandler
?terminate@@YAXXZ
__setusermatherr
free
__p__commode
_mbsicmp
__getmainargs
_strdup
__p__fmode
_setmbcp
_except_handler3
_splitpath
_adjust_fdiv
_CxxThrowException
exit
_exit
_acmdln
__dllonexit
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ