Static task
static1
Behavioral task
behavioral1
Sample
402b79b1b53604ec3c7a4e969d834df62c8cc7c7f2d876d8678c7c1f59eb1d7a.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
402b79b1b53604ec3c7a4e969d834df62c8cc7c7f2d876d8678c7c1f59eb1d7a.exe
Resource
win10v2004-20220414-en
General
-
Target
402b79b1b53604ec3c7a4e969d834df62c8cc7c7f2d876d8678c7c1f59eb1d7a
-
Size
408KB
-
MD5
81eb1ba1a5b0289bab6fb45e54719df1
-
SHA1
e2c20fcf01e745ea6847f1a043e56f65343c72a7
-
SHA256
402b79b1b53604ec3c7a4e969d834df62c8cc7c7f2d876d8678c7c1f59eb1d7a
-
SHA512
3580308cc941245877fc09899d81d937bd7e5baa46460b07cb3a4a41271c8b85ae3d0aa6821863a2cf25a6b373cce6a8b89977322dfed3aa89398e1bc0decf08
-
SSDEEP
6144:D9gqsrUfuAKc6iAOhfrQOaMUX0k+iKPIdCsdjj1d/MKfd:DCqswSc5fTqEiKPIdrZjd
Malware Config
Signatures
Files
-
402b79b1b53604ec3c7a4e969d834df62c8cc7c7f2d876d8678c7c1f59eb1d7a.exe windows x86
1be980bb07e7f00a2fbd5c503508452e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadImageA
InvalidateRect
GetWindowDC
GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
CreatePopupMenu
EnableWindow
EndPaint
FillRect
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetDlgCtrlID
DialogBoxParamA
SetWindowRgn
GetKeyState
GetSysColor
GetSystemMetrics
GetWindowLongA
GetWindowPlacement
GetWindowRect
LoadBitmapA
LoadIconA
DefWindowProcA
GetDlgItem
PostMessageA
PostQuitMessage
RegisterClassExA
ReleaseDC
SendDlgItemMessageA
SendMessageA
SetActiveWindow
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetMenuItemBitmaps
GetDlgItemTextA
TranslateMessage
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
TrackPopupMenu
UpdateWindow
CreateWindowExA
CreateDialogParamA
CloseWindow
ChangeDisplaySettingsA
BeginPaint
AppendMenuA
wsprintfA
SetRect
UnregisterClassA
GetWindowThreadProcessId
SetCursor
GetMessageA
GetTopWindow
ValidateRect
WindowFromPoint
MoveWindow
IsDialogMessageA
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetActiveWindow
CreateDialogIndirectParamA
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
IsWindowVisible
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
PtInRect
CallWindowProcA
SystemParametersInfoA
GetWindow
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadCursorA
GetSysColorBrush
GetClassNameA
DestroyMenu
UnhookWindowsHookEx
ExitWindowsEx
IsIconic
DrawIcon
GetParent
OffsetRect
CopyRect
comdlg32
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
shell32
ShellExecuteA
SHChangeNotify
advapi32
DeleteService
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegDeleteValueA
OpenProcessToken
StartServiceA
RegSetValueExA
AdjustTokenPrivileges
CloseServiceHandle
ControlService
CreateServiceA
GetTokenInformation
LookupPrivilegeValueA
OpenSCManagerA
OpenServiceA
RegCloseKey
RegCreateKeyA
RegFlushKey
RegOpenKeyExA
RegQueryValueA
RegQueryValueExA
RegSetValueA
RegCreateKeyExA
wininet
InternetOpenW
InternetOpenUrlW
InternetReadFile
InternetCloseHandle
gdi32
SaveDC
GetDeviceCaps
GetStockObject
CreateFontIndirectA
RestoreDC
CreateRectRgn
GetClipBox
GetDIBits
GetObjectA
PtVisible
RectVisible
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
CreateBitmap
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
TextOutA
SwapBuffers
SetTextColor
SetPixelFormat
SetBkMode
SetBkColor
SelectObject
Polygon
MoveToEx
LineTo
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateFontA
CreateCompatibleDC
CreateCompatibleBitmap
ChoosePixelFormat
BitBlt
CombineRgn
StretchBlt
SetMapMode
GetBkColor
comctl32
ord17
ImageList_LoadImageA
netapi32
NetUserAdd
kernel32
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
HeapFree
SetUnhandledExceptionFilter
HeapReAlloc
GetLastError
GetWindowsDirectoryA
GetVersion
GetUserDefaultLangID
CreateDirectoryA
CloseHandle
IsDebuggerPresent
Sleep
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
WideCharToMultiByte
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
LoadLibraryA
RaiseException
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
HeapSize
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileA
HeapAlloc
Sections
.hex Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.recode Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 218KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ