Static task
static1
Behavioral task
behavioral1
Sample
cfd4408df887f96efa66fc2123cc57777840efb4a41f9b5947f4cfae622aff43.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cfd4408df887f96efa66fc2123cc57777840efb4a41f9b5947f4cfae622aff43.exe
Resource
win10v2004-20220812-en
General
-
Target
cfd4408df887f96efa66fc2123cc57777840efb4a41f9b5947f4cfae622aff43
-
Size
36KB
-
MD5
72d6f08703e023d9d4befd1873ae3fe1
-
SHA1
ad95178d45289ef31f10929cd80dd06ee570f59e
-
SHA256
cfd4408df887f96efa66fc2123cc57777840efb4a41f9b5947f4cfae622aff43
-
SHA512
e26a39ba1b1771ca50ed614332bd773b0f591ccc4b4b9c7c63f2550f63cae2af97477a3d133ae5a58155d828d428d2a9d5195d7b8553c435d62e7c776582f485
-
SSDEEP
768:T8Mp7jric22Y7h/TB835n043bGsIF97Ay5jHkZJ+i2u2lW:5jrhBMhm35b3k97Ay5ja+um
Malware Config
Signatures
Files
-
cfd4408df887f96efa66fc2123cc57777840efb4a41f9b5947f4cfae622aff43.exe windows x86
4ae3676998141984f1b27e80e6bb3e1c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shlwapi
PathIsUNCW
PathRemoveExtensionW
PathStripToRootW
PathFindFileNameW
PathFindExtensionW
comctl32
CreateStatusWindowA
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
user32
GetWindowLongW
ModifyMenuW
FindWindowW
GetWindowTextLengthW
UnhookWindowsHookEx
ClientToScreen
TranslateMessage
SetScrollPos
ShowWindow
SetActiveWindow
WinHelpW
GetDlgItem
GetClientRect
ShowScrollBar
DeferWindowPos
CallNextHookEx
GetMessageW
SetDlgItemInt
GetDlgItemTextW
AdjustWindowRectEx
DefWindowProcW
GetMenuStringW
SystemParametersInfoW
GetFocus
EnableMenuItem
GetMenuItemID
GetActiveWindow
ScrollWindowEx
GetParent
GetClassNameW
CreateDialogIndirectParamW
GetCursorPos
RegisterWindowMessageW
EndPaint
GetClassInfoW
ScrollWindow
BeginPaint
GetSystemMetrics
GetWindowThreadProcessId
GetDlgItemInt
DrawTextW
ScreenToClient
WaitForInputIdle
IsWindow
RemovePropW
IsChild
GetWindowRect
CheckRadioButton
GetMenuCheckMarkDimensions
GrayStringW
CheckDlgButton
GetClassLongW
SetWindowPos
MoveWindow
GetSysColorBrush
GetPropW
SetWindowTextW
TrackPopupMenu
SetWindowsHookExW
GetNextDlgTabItem
LoadMenuW
GetScrollPos
DestroyIcon
SetMenuItemBitmaps
CreateDialogParamW
GetMenuState
RegisterClassExW
ShowOwnedPopups
InflateRect
SendDlgItemMessageA
GetMenu
EnumThreadWindows
SetWindowPlacement
CreateWindowExW
EqualRect
SetCursor
IsWindowVisible
ReleaseDC
InsertMenuW
UnregisterClassW
GetWindowTextW
GetSysColor
SetPropW
AppendMenuW
SetScrollInfo
GetWindowDC
GetDesktopWindow
PostMessageW
LoadStringW
KillTimer
EndDeferWindowPos
RegisterClassW
UnregisterClassA
EnableWindow
GetDC
SetClassLongW
GetClassInfoExW
TabbedTextOutW
GetWindowPlacement
LoadBitmapW
GetTopWindow
SetScrollRange
IsDlgButtonChecked
BeginDeferWindowPos
GetScrollRange
OffsetRect
EndDialog
IsWindowEnabled
GetLastActivePopup
GetDialogBaseUnits
DestroyMenu
SetFocus
GetForegroundWindow
GetScrollInfo
DeleteMenu
GetDlgCtrlID
PeekMessageW
UpdateWindow
DispatchMessageW
MapWindowPoints
LoadIconW
DrawTextExW
LoadCursorW
TrackPopupMenuEx
IntersectRect
SetForegroundWindow
CheckMenuItem
CopyRect
GetWindow
ValidateRect
GetMessagePos
GetMessageTime
SendDlgItemMessageW
SetTimer
RemoveMenu
PtInRect
DestroyWindow
FindWindowExW
IsIconic
CharUpperW
GetSubMenu
GetMenuItemInfoW
SystemParametersInfoA
GetMenuItemCount
CallWindowProcW
GetCapture
SetWindowLongW
GetKeyState
SetDlgItemTextW
IsDialogMessageW
FillRect
PostQuitMessage
SendMessageW
MessageBoxW
LoadImageW
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
advapi32
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExW
RegEnumValueW
RegCloseKey
RegDeleteValueW
RegOpenKeyW
RegNotifyChangeKeyValue
RegCreateKeyW
RegOpenKeyA
RegOpenKeyExW
RegQueryValueW
RegSetValueW
RegDeleteKeyA
RegEnumKeyW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyA
RegSetValueExW
RegQueryValueExA
ws2_32
WSAGetLastError
gdi32
GetViewportExtEx
SetWindowExtEx
GetCurrentPositionEx
GetTextMetricsW
CombineRgn
SetArcDirection
BitBlt
SetROP2
ExtCreatePen
SetGraphicsMode
PolyDraw
SetWorldTransform
LineTo
SetWindowOrgEx
CopyMetaFileW
CreatePatternBrush
SelectClipRgn
IntersectClipRect
GetClipBox
SetTextAlign
SetMapMode
GetObjectType
ArcTo
SetPolyFillMode
SetTextCharacterExtra
SelectObject
GetStockObject
GetWindowExtEx
PlayMetaFile
OffsetViewportOrgEx
DeleteObject
GetDeviceCaps
DeleteDC
StartDocW
OffsetClipRgn
OffsetWindowOrgEx
CreateHatchBrush
GetTextExtentPoint32W
SetColorAdjustment
EnumMetaFile
PolyBezierTo
CreateCompatibleDC
PatBlt
SelectPalette
SetViewportExtEx
GetMapMode
SelectClipPath
GetClipRgn
DPtoLP
SetStretchBltMode
ScaleWindowExtEx
RestoreDC
PtVisible
ModifyWorldTransform
CreateDIBPatternBrushPt
SetMapperFlags
CreateDCW
ExtTextOutW
SetTextJustification
SetTextColor
ScaleViewportExtEx
ExtSelectClipRgn
GetPixel
MoveToEx
CreateFontIndirectW
PlayMetaFileRecord
GetObjectW
RectVisible
SetRectRgn
ExcludeClipRect
SetBkColor
GetDCOrgEx
TextOutW
SaveDC
CreateBitmap
SetViewportOrgEx
CreateRectRgn
Escape
SetBkMode
CreateRectRgnIndirect
PolylineTo
CreateSolidBrush
CreatePen
shell32
Shell_NotifyIconW
ExtractIconW
SHGetFileInfoW
ShellExecuteW
kernel32
EnumResourceLanguagesW
SetCurrentDirectoryW
CreateProcessW
CopyFileW
GlobalSize
GlobalHandle
GetVersionExA
GetFileAttributesA
CreateFileW
LeaveCriticalSection
GetPrivateProfileStringW
GetCurrentDirectoryW
WritePrivateProfileStringW
UnlockFile
FindFirstFileW
SetFilePointer
LoadResource
LocalAlloc
lstrcpyA
CreateThread
GlobalFindAtomW
GetTimeZoneInformation
DeleteFileW
CloseHandle
GetACP
GetEnvironmentStringsW
GetLocaleInfoA
SetEnvironmentVariableA
LocalFileTimeToFileTime
TerminateProcess
LCMapStringA
GetCurrentThread
lstrlenW
GetFileSize
TlsSetValue
HeapAlloc
ConvertDefaultLocale
GlobalAddAtomW
GetLocaleInfoW
GetStringTypeA
GetCurrentProcess
TlsAlloc
RtlUnwind
SystemTimeToFileTime
GetSystemTimeAsFileTime
lstrcmpiW
EnumSystemLocalesA
GetDriveTypeW
GetStartupInfoA
FreeEnvironmentStringsW
GlobalReAlloc
SuspendThread
SetHandleCount
SetLastError
GetFullPathNameW
TlsGetValue
GetModuleHandleW
MoveFileW
LoadLibraryA
GetTimeFormatA
GetModuleFileNameW
GlobalUnlock
GetStdHandle
GetTickCount
GetConsoleCP
WideCharToMultiByte
FileTimeToSystemTime
GetCurrentThreadId
GetOEMCP
FreeLibrary
GetFileTime
GetFullPathNameA
LocalReAlloc
lstrcmpA
FreeEnvironmentStringsA
GetFileType
GetFileAttributesW
WaitForSingleObject
UnhandledExceptionFilter
GlobalFlags
SetConsoleCtrlHandler
MulDiv
SetFileTime
FreeResource
LockFile
SetStdHandle
FindNextFileW
WriteConsoleA
GlobalLock
GetModuleHandleA
GetShortPathNameW
MultiByteToWideChar
InterlockedDecrement
GlobalDeleteAtom
GetProcAddress
GetLastError
GetAtomNameW
GetCPInfo
ResetEvent
HeapFree
VirtualFree
lstrlenA
GlobalGetAtomNameW
GetSystemInfo
GetStartupInfoW
GlobalFree
GetThreadLocale
HeapDestroy
SetFileAttributesW
SetEndOfFile
FindClose
GetVersion
GetConsoleMode
GetDriveTypeA
ReadFile
RaiseException
WriteFile
SetCurrentDirectoryA
ResumeThread
GetModuleFileNameA
GetDateFormatA
GetPrivateProfileIntW
Sleep
GetConsoleOutputCP
SetUnhandledExceptionFilter
DeleteCriticalSection
GetUserDefaultLCID
GetProcessHeap
LCMapStringW
GlobalAlloc
TlsFree
LoadLibraryW
HeapCreate
HeapReAlloc
WriteConsoleW
InitializeCriticalSection
IsValidCodePage
FileTimeToLocalFileTime
InterlockedIncrement
ExitProcess
CompareStringA
GetCommandLineW
GetCommandLineA
LocalFree
ExitThread
FatalAppExitA
LockResource
EnterCriticalSection
CreateFileA
VirtualAlloc
FormatMessageW
HeapSize
IsValidLocale
GetStringTypeW
GetCurrentProcessId
CompareStringW
InterlockedExchange
SizeofResource
SetEvent
QueryPerformanceCounter
GetVersionExW
GetVolumeInformationW
SetErrorMode
GetStringTypeExW
IsDebuggerPresent
DuplicateHandle
GetEnvironmentStrings
FindResourceW
SetThreadPriority
FlushFileBuffers
lstrcmpW
GetCurrentDirectoryA
CreateEventW
comdlg32
GetFileTitleW
Sections
.data Size: 3KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE