Static task
static1
Behavioral task
behavioral1
Sample
580484e4aa95bfa8e5b86b568b57e76625a8fe648bbe1093517281ac8cd0f148.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
580484e4aa95bfa8e5b86b568b57e76625a8fe648bbe1093517281ac8cd0f148.exe
Resource
win10v2004-20220722-en
General
-
Target
580484e4aa95bfa8e5b86b568b57e76625a8fe648bbe1093517281ac8cd0f148
-
Size
384KB
-
MD5
6e40ceedbbe126326e9f2c00a6bcea26
-
SHA1
589928e1e8d398a4be6a3e85270bd09bad9104d1
-
SHA256
580484e4aa95bfa8e5b86b568b57e76625a8fe648bbe1093517281ac8cd0f148
-
SHA512
05da4dd8f16ee82988ddec7e5e5c09dbf21da944a72dc464cbd9cdaab6117080bde3409185a37d0d8aff82017b1bc43f77371d4afb899230365f5e6312e4957d
-
SSDEEP
6144:ZzRfELIZmc3g2c1SrOW8AZwH2H9SCNFTX4hkBMOf7RZyoBSQWMrWLMAGmIe4tUCx:hRJMuc1QJZwH2d1QkOOf7RkoBSQBDHtp
Malware Config
Signatures
Files
-
580484e4aa95bfa8e5b86b568b57e76625a8fe648bbe1093517281ac8cd0f148.exe windows x86
39e6701c7b8ef273496a6d1a05014c21
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteEnhMetaFile
ResizePalette
PolyBezierTo
CreateBitmap
GetFontData
SetWindowExtEx
StretchBlt
GetEnhMetaFileHeader
CreateFontA
CreateFontIndirectA
SetViewportOrgEx
GetPixel
GetStockObject
PolyDraw
StartPage
GetEnhMetaFileBits
GetNearestPaletteIndex
CreateEnhMetaFileA
EnumMetaFile
SetTextCharacterExtra
GetClipRgn
GetGlyphOutlineW
CreateDIBPatternBrushPt
CreateFontW
ExtEscape
SetWindowOrgEx
RemoveFontResourceA
DeleteObject
GetBitmapBits
SetWorldTransform
GetGlyphOutlineA
RealizePalette
ResetDCW
GetWinMetaFileBits
EndPage
IntersectClipRect
StartDocA
ScaleViewportExtEx
GetTextFaceA
Rectangle
AbortDoc
LPtoDP
RectInRegion
GetDIBColorTable
GdiFlush
GetSystemPaletteEntries
SetMapMode
GetEnhMetaFilePaletteEntries
GetMapMode
SetMetaFileBitsEx
CancelDC
GetObjectW
DeleteDC
CreateRoundRectRgn
EndPath
GetObjectA
BeginPath
ExtCreatePen
CreateDCA
GetClipBox
SetTextAlign
SelectClipRgn
SetStretchBltMode
EqualRgn
EndDoc
GetTextMetricsA
UpdateColors
MoveToEx
CreateFontIndirectW
CreateRectRgn
SetBitmapBits
FillPath
GetTextExtentPoint32A
CreateEllipticRgn
CreateICW
PolyPolyline
GetKerningPairsA
CreateCompatibleBitmap
FillRgn
GetTextColor
SetPolyFillMode
OffsetClipRgn
SetColorAdjustment
PlayEnhMetaFileRecord
BitBlt
ExtSelectClipRgn
advapi32
DecryptFileW
SetServiceStatus
GetServiceKeyNameA
RegConnectRegistryA
RegOpenKeyExA
ControlService
ReportEventW
RegisterServiceCtrlHandlerW
EnumServicesStatusA
LogonUserA
StartServiceCtrlDispatcherW
RegOpenKeyExW
RegQueryInfoKeyA
RegNotifyChangeKeyValue
GetServiceDisplayNameW
RegCreateKeyExW
RegSetValueExA
ChangeServiceConfigW
ReportEventA
ReadEventLogW
RegCreateKeyW
OpenSCManagerA
RegSetValueW
QueryServiceConfigW
RegRestoreKeyW
RegSetValueA
LsaOpenPolicy
ChangeServiceConfig2A
RegQueryInfoKeyW
CreateServiceW
StartServiceCtrlDispatcherA
RegCloseKey
SetServiceObjectSecurity
GetUserNameW
CreateProcessAsUserW
RegDeleteKeyA
DeleteService
InitiateSystemShutdownA
QueryServiceLockStatusW
ChangeServiceConfig2W
RegEnumKeyExA
RegisterEventSourceA
LsaFreeMemory
QueryServiceStatus
EnumDependentServicesA
RegUnLoadKeyW
RegCreateKeyA
RegCreateKeyExA
OpenSCManagerW
RegQueryValueW
CloseServiceHandle
RegEnumKeyW
OpenEventLogW
rasapi32
RasGetConnectStatusA
RasEnumConnectionsA
user32
ShowOwnedPopups
FillRect
CheckMenuItem
ReuseDDElParam
CreateDialogParamA
SystemParametersInfoA
ChangeDisplaySettingsA
DrawStateA
GetCursorPos
GetClipCursor
SetClipboardData
ClipCursor
DialogBoxParamA
InsertMenuW
FindWindowA
EnableWindow
mouse_event
GetClipboardFormatNameW
DdeClientTransaction
GetCapture
GetDlgItem
GetMessagePos
CharToOemA
FindWindowExA
SetActiveWindow
DrawStateW
GetWindow
GetClassNameA
InsertMenuA
DispatchMessageA
FindWindowW
GetWindowTextLengthA
SetMenuDefaultItem
DrawTextA
SetFocus
DrawIcon
ChangeClipboardChain
MapVirtualKeyA
CopyImage
CharNextA
IsCharLowerA
GetKeyState
SetWindowPlacement
GetSystemMetrics
UnionRect
SendInput
MessageBoxA
DdeFreeStringHandle
GetWindowLongW
GetDC
ValidateRect
IsClipboardFormatAvailable
TranslateAcceleratorW
msvcrt
_setmbcp
_controlfp
_getpid
__dllonexit
_onexit
exit
wcstok
_j0
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
mpr
WNetUseConnectionA
WNetCancelConnectionA
WNetDisconnectDialog
MultinetGetConnectionPerformanceA
WNetGetConnectionA
kernel32
GetFileTime
GetConsoleTitleA
EnterCriticalSection
OpenJobObjectA
GetStringTypeA
mfc42
ord4424
ord1029
ord4080
ord3079
ord3825
ord3831
ord3830
ord3401
ord2976
ord3081
ord2985
ord3262
ord1084
ord4465
ord3259
ord1054
ord2982
ord3738
ord5714
ord1041
ord5307
ord4698
ord1059
ord2725
ord5302
ord1082
ord3346
ord2396
ord1014
ord1089
ord3922
ord5731
ord1035
ord2554
ord4486
ord6375
ord815
ord561
ord1576
ord1078
ord1168
Sections
.text Size: 240KB - Virtual size: 237KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ