Static task
static1
Behavioral task
behavioral1
Sample
59e41ddd00ec0f9375bee65606258c6695e320af3b28344687085ab278492da1.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
59e41ddd00ec0f9375bee65606258c6695e320af3b28344687085ab278492da1.exe
Resource
win10v2004-20220721-en
General
-
Target
59e41ddd00ec0f9375bee65606258c6695e320af3b28344687085ab278492da1
-
Size
343KB
-
MD5
343a036fc9dcbacc81140314bd27fe39
-
SHA1
b69052312a15863643916ed44b037dee85017aea
-
SHA256
59e41ddd00ec0f9375bee65606258c6695e320af3b28344687085ab278492da1
-
SHA512
fb99cba1a4e8d31eef16d36204d14ca98ab8f9c3f0c6098fe4db5c33dd58b5e6e3572f4d39d1fcb0d332aff6ecd7a42f8c65a1e4f6db9b0f79a5894b6ceb9b65
-
SSDEEP
6144:9Is+Mx+J8TyYEZHCxRhu6MlYpfyY046QhmkWu1E71Y2BVvAhK:9GM0JWdEZix9pfyU6QhmkWuqpY2BVX
Malware Config
Signatures
Files
-
59e41ddd00ec0f9375bee65606258c6695e320af3b28344687085ab278492da1.exe windows x86
7f08beb1887a51d9ace49d8d5f89fb9e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MsgWaitForMultipleObjectsEx
GetDlgCtrlID
GetDlgItemTextA
IsDlgButtonChecked
PostMessageA
VkKeyScanA
DefWindowProcA
ShowCursor
LoadIconA
TrackPopupMenu
CloseClipboard
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
SetActiveWindow
GetMessageTime
GetMessagePos
MapWindowPoints
UpdateWindow
GetMenu
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CallWindowProcW
SystemParametersInfoA
IsIconic
GetWindowPlacement
MessageBeep
IsChild
GetTopWindow
GetNextDlgTabItem
GetNextDlgGroupItem
ReleaseCapture
GetDesktopWindow
SetCapture
GetClientRect
GetWindowRect
SetCursor
SetRect
IsRectEmpty
CopyAcceleratorTableW
OffsetRect
PtInRect
CharNextW
GetFocus
SetFocus
MoveWindow
IsDialogMessageW
SendDlgItemMessageW
GetDlgItem
CharUpperW
SetWindowsHookExW
CallNextHookEx
GetActiveWindow
GetKeyState
GetCursorPos
GetWindowTextW
GetSysColorBrush
UnhookWindowsHookEx
IntersectRect
CopyRect
GetSysColor
GetWindowDC
GetDC
ClientToScreen
RegisterClipboardFormatW
InvalidateRgn
MessageBoxW
LoadStringW
GetSystemMetrics
DrawStateW
PostThreadMessageW
InvalidateRect
SystemParametersInfoW
EndPaint
ReleaseDC
DrawTextW
BeginPaint
SetForegroundWindow
DestroyMenu
EndDialog
CreateDialogIndirectParamW
UnregisterClassA
EqualRect
ShowWindow
SetWindowPos
IsWindowVisible
ValidateRect
DefWindowProcW
GetWindowLongW
DestroyWindow
DispatchMessageW
TranslateMessage
GetMessageW
PostMessageW
PeekMessageW
SetWindowLongW
GrayStringW
DrawTextExW
TabbedTextOutW
PostQuitMessage
GetWindow
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
SendMessageW
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetMenuState
GetMenuItemCount
GetSubMenu
BringWindowToTop
ExitWindowsEx
LoadBitmapW
SetWindowTextW
LoadCursorW
LoadIconW
RegisterClassExW
CreateWindowExW
GetKeyboardType
MessageBoxA
MsgWaitForMultipleObjects
CharUpperBuffW
SetWindowLongA
PeekMessageA
LoadStringA
DispatchMessageA
CreateWindowExA
CallWindowProcA
CharPrevA
IsWindow
GetListBoxInfo
GetInputState
GetMenuItemID
IsMenu
RegisterHotKey
RedrawWindow
GetMessageExtraInfo
GetClipboardViewer
CopyIcon
comdlg32
GetSaveFileNameA
shell32
CommandLineToArgvW
advapi32
RegCloseKey
RegDeleteKeyW
RegSetValueExW
gdi32
GdiTransparentBlt
ResetDCW
AnimatePalette
FrameRgn
PlayMetaFile
GetFontLanguageInfo
GetOutlineTextMetricsW
CreateSolidBrush
MaskBlt
SetLayout
GetWindowExtEx
GetEnhMetaFileDescriptionW
GetCharABCWidthsFloatW
GetFontData
GetCharWidthA
ExtFloodFill
GetCharWidthFloatA
GetMapMode
GetDIBits
CreateCompatibleDC
ArcTo
GetCharWidthW
GetWindowOrgEx
GetTextColor
Escape
CreatePatternBrush
GetTextExtentPointA
MoveToEx
SetWindowExtEx
version
GetFileVersionInfoSizeA
netapi32
NetConnectionEnum
kernel32
SetStdHandle
GetFileType
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
FlushFileBuffers
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
SetEnvironmentVariableW
CreateFileA
GetCurrentDirectoryA
GetDriveTypeA
SetFilePointer
GetExitCodeProcess
CreatePipe
GetFileAttributesA
CreateProcessA
MoveFileA
DeleteFileA
GetLogicalDriveStringsW
ResetEvent
FormatMessageA
GetThreadLocale
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
HeapReAlloc
LeaveCriticalSection
LocalAlloc
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
CompareStringA
lstrcmpW
GlobalDeleteAtom
SetErrorMode
GetModuleHandleW
FreeResource
lstrlenA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
MulDiv
SetLastError
GetExitCodeThread
GetDriveTypeW
WideCharToMultiByte
CreateEventW
SetEvent
GetModuleHandleA
GetCurrentProcess
GetVersionExW
GetProcAddress
LoadLibraryExW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetLocaleInfoW
GetSystemDefaultLCID
GetEnvironmentVariableW
GetCommandLineW
CreateDirectoryW
RemoveDirectoryW
GetSystemDirectoryW
GetWindowsDirectoryW
GetTempPathW
GetCurrentDirectoryW
GetDiskFreeSpaceExW
GetFullPathNameW
CopyFileW
DeleteFileW
SetFileAttributesW
GetFileAttributesW
MultiByteToWideChar
SetEndOfFile
LoadLibraryW
FreeLibrary
IsDebuggerPresent
SetUnhandledExceptionFilter
CreateFileW
BeginUpdateResourceW
UnhandledExceptionFilter
TerminateProcess
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
RtlUnwind
RaiseException
GetLocaleInfoA
GetACP
GetTickCount
GlobalFlags
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GetFileTime
GetVolumeInformationW
DuplicateHandle
GetFileSize
UnlockFile
LockFile
SetPriorityClass
InitializeCriticalSectionAndSpinCount
InterlockedIncrement
InterlockedDecrement
TlsGetValue
GetTapeStatus
UpdateResourceW
EndUpdateResourceW
WriteFile
ReadFile
AreFileApisANSI
GetEnvironmentStringsW
LocalUnlock
CreateMemoryResourceNotification
DecodePointer
GetCurrentProcessId
GetEnvironmentStrings
DecodeSystemPointer
PostQueuedCompletionStatus
CreateDirectoryA
FindResourceA
GetEnvironmentVariableA
GetFullPathNameA
GetWindowsDirectoryA
IsDBCSLeadByte
RemoveDirectoryA
GetSystemTime
CreateProcessW
EnumCalendarInfoW
GetDiskFreeSpaceW
GetUserDefaultLangID
SignalObjectAndWait
lstrcpynW
SizeofResource
LCMapStringW
LockResource
LoadResource
FindResourceW
Sleep
GetLastError
GetModuleFileNameW
CloseHandle
WaitForSingleObject
CreateThread
SetCurrentDirectoryW
GetSystemDefaultLangID
GetUserDefaultLCID
GetCurrentThreadId
ReleaseMutex
CreateMutexW
FindResourceExW
SetFilePointerEx
Sections
.hbgfxdv Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 338KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 209KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ