Static task
static1
Behavioral task
behavioral1
Sample
75f3460576c98d5f3cc76349729760debd1e64634a73615f6b547253da8b6da8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
75f3460576c98d5f3cc76349729760debd1e64634a73615f6b547253da8b6da8.exe
Resource
win10v2004-20220812-en
General
-
Target
75f3460576c98d5f3cc76349729760debd1e64634a73615f6b547253da8b6da8
-
Size
108KB
-
MD5
ffbbe719fa05a9231bc750d53572ed22
-
SHA1
90314ef899a7b9fefdba68c814ddef7371b6b61f
-
SHA256
75f3460576c98d5f3cc76349729760debd1e64634a73615f6b547253da8b6da8
-
SHA512
c034f1ecc03639a9a25974d69c6ff8740f3492ecbb7bc8dc639024f7324978630d36ab3a2fdf3fe7726437975fcf379c8528ba5400f3d4f109adec9e74232ba5
-
SSDEEP
3072:VAvk2pELbm332KkvjG01z+yEUNSxAYHAr:2RoU8vjCyxcLw
Malware Config
Signatures
Files
-
75f3460576c98d5f3cc76349729760debd1e64634a73615f6b547253da8b6da8.exe windows x86
11a2d08983127b4c9f50a461df1e9671
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
CreateSemaphoreW
GetVolumeInformationW
CreateDirectoryExW
GetSystemDefaultLCID
ConnectNamedPipe
VirtualProtectEx
lstrcmpi
GetPrivateProfileIntW
SetSystemTimeAdjustment
GetEnvironmentVariableA
WaitForMultipleObjects
GetAtomNameA
ReadConsoleOutputCharacterW
GetPrivateProfileSectionW
MulDiv
GetTimeZoneInformation
GetStringTypeExA
GetHandleInformation
GlobalMemoryStatus
ExitProcess
MoveFileExA
ReleaseSemaphore
IsBadStringPtrA
GetLastError
DosDateTimeToFileTime
ResetWriteWatch
Process32First
GetTimeFormatW
GetThreadContext
CopyFileW
SetTimeZoneInformation
SetEnvironmentVariableW
GetProfileSectionA
Thread32First
ReadConsoleOutputA
ReadFileEx
SetThreadIdealProcessor
FileTimeToSystemTime
GetCurrentDirectoryA
LoadLibraryExA
lstrcatW
GetNumberFormatW
GetCurrencyFormatW
GetNumberOfConsoleMouseButtons
SystemTimeToTzSpecificLocalTime
WritePrivateProfileSectionA
OpenEventW
CancelIo
GetThreadTimes
VirtualLock
GenerateConsoleCtrlEvent
SetNamedPipeHandleState
LocalUnlock
CopyFileA
GetShortPathNameA
GetVolumeInformationA
GetConsoleTitleW
EnumSystemCodePagesW
GetProcessAffinityMask
TlsSetValue
GetProfileIntA
LCMapStringW
IsBadReadPtr
ResetEvent
GetDriveTypeA
LockResource
EnumTimeFormatsA
FindAtomA
CreateFiber
GetLogicalDrives
GetPrivateProfileSectionNamesW
CopyFileExW
PeekConsoleInputA
SignalObjectAndWait
HeapWalk
GlobalAddAtomW
FindFirstFileA
WritePrivateProfileSectionW
GlobalFindAtomA
OpenFileMappingW
GetCompressedFileSizeA
CreateMailslotW
CreateNamedPipeW
FlushConsoleInputBuffer
InitAtomTable
GetProfileIntW
QueryPerformanceCounter
EnumCalendarInfoExW
Heap32ListFirst
PostQueuedCompletionStatus
GetComputerNameW
WriteConsoleOutputCharacterA
ReadConsoleOutputW
FatalExit
GetMailslotInfo
SetSystemPowerState
LocalFileTimeToFileTime
SetThreadAffinityMask
SetEvent
GetFileSize
LoadResource
SetConsoleActiveScreenBuffer
GetDriveTypeW
PeekNamedPipe
WaitForMultipleObjectsEx
OpenFile
GetProcAddress
GlobalSize
GetConsoleTitleA
IsBadHugeWritePtr
lstrcpynW
GlobalFree
GetStdHandle
UpdateResourceA
CreateDirectoryW
GetCurrentThreadId
GetDateFormatW
lstrlen
RequestDeviceWakeup
GetSystemPowerStatus
SetLocaleInfoA
EnumDateFormatsExA
WritePrivateProfileStringA
CancelDeviceWakeupRequest
SetLocaleInfoW
SetConsoleCtrlHandler
HeapCompact
SetEnvironmentVariableA
GlobalAlloc
MoveFileW
Process32Next
SetConsoleWindowInfo
GetFileInformationByHandle
EnumResourceTypesA
GetConsoleOutputCP
DeleteFileW
SetFilePointer
ReadConsoleA
GlobalFlags
GetComputerNameA
GetNumberOfConsoleInputEvents
LockFileEx
OpenMutexA
SetProcessAffinityMask
LocalFlags
SetStdHandle
RtlFillMemory
lstrcpynA
FindAtomW
GetUserDefaultLangID
GetLogicalDriveStringsW
SetCalendarInfoA
CompareStringW
VerLanguageNameW
SetVolumeLabelW
QueryPerformanceFrequency
VerLanguageNameA
GlobalAddAtomA
GetTempFileNameA
HeapLock
GetShortPathNameW
VirtualProtect
LoadLibraryA
shlwapi
StrSpnW
UrlHashA
PathRemoveFileSpecA
SHAutoComplete
ole32
OleConvertIStorageToOLESTREAMEx
CoTaskMemFree
CoFreeLibrary
OleCreateLinkToFile
CreateStreamOnHGlobal
CoQueryProxyBlanket
user32
PaintDesktop
ChangeDisplaySettingsExW
LoadMenuW
SetScrollRange
GetMenuInfo
MsgWaitForMultipleObjectsEx
EnumDisplayDevicesA
IsChild
SetWindowPlacement
ShowOwnedPopups
GetUserObjectInformationW
GetClipboardViewer
DrawIcon
InSendMessage
CharUpperBuffW
SendMessageTimeoutA
LoadAcceleratorsA
DialogBoxParamW
GetClassInfoW
GetWindowWord
UnloadKeyboardLayout
EnumDisplaySettingsA
PackDDElParam
MessageBeep
LookupIconIdFromDirectory
GetNextDlgTabItem
OemToCharBuffA
VkKeyScanExW
DrawFrame
TrackMouseEvent
GetKeyboardState
DdeEnableCallback
GetDesktopWindow
GetWindowPlacement
LoadMenuA
EnumChildWindows
ChangeDisplaySettingsW
GetClassNameW
ExcludeUpdateRgn
SetClassLongW
LoadMenuIndirectW
WINNLSGetIMEHotkey
OpenWindowStationA
ChangeMenuA
ClientToScreen
EqualRect
CloseClipboard
OpenClipboard
EnableWindow
GetKeyNameTextW
GetDC
RedrawWindow
MapVirtualKeyExW
ModifyMenuA
LoadCursorA
DdePostAdvise
ToAsciiEx
EnumDesktopsA
GetCursorInfo
CallWindowProcA
SendNotifyMessageA
GetDoubleClickTime
GetActiveWindow
RemoveMenu
SetSysColors
BroadcastSystemMessage
ExitWindowsEx
IsCharAlphaA
WindowFromPoint
CreateMDIWindowA
TranslateAcceleratorW
SwitchDesktop
IsWindowUnicode
DdeGetData
InvalidateRgn
GetScrollPos
DlgDirSelectExW
DdeFreeStringHandle
MapVirtualKeyW
ReleaseDC
GetMenuItemInfoA
DdeKeepStringHandle
ImpersonateDdeClientWindow
IsWindow
GetClipboardSequenceNumber
HideCaret
DefMDIChildProcA
GetProcessWindowStation
GetMenuItemRect
ChildWindowFromPoint
UnpackDDElParam
DialogBoxIndirectParamA
GetMessageTime
MapVirtualKeyExA
InSendMessageEx
CopyRect
GetMenuItemCount
CreateDialogParamA
PostQuitMessage
CreateDesktopW
DdeSetUserHandle
InvalidateRect
TrackPopupMenuEx
GetWindowTextLengthW
CopyImage
DdeCreateStringHandleA
FreeDDElParam
SetDlgItemTextA
ShowWindowAsync
LoadKeyboardLayoutW
GetCursorPos
InsertMenuA
UnionRect
GetWindow
EnumPropsA
GetClassLongW
EnumWindowStationsW
NotifyWinEvent
DrawAnimatedRects
SendIMEMessageExW
GetClipboardFormatNameW
GetWindowTextW
SetClipboardData
SetCapture
PtInRect
DlgDirListA
MonitorFromRect
GetScrollInfo
SendIMEMessageExA
CharNextW
GetMenuItemInfoW
DefWindowProcA
DdeDisconnectList
SetUserObjectInformationW
InternalGetWindowText
CharLowerBuffW
CharUpperA
RegisterHotKey
ToAscii
EnumDesktopWindows
IsMenu
SetMenu
DdeInitializeW
DefFrameProcA
DefFrameProcW
TabbedTextOutW
GetKeyboardLayout
EnumDisplayMonitors
IntersectRect
CharToOemBuffW
CreatePopupMenu
GetDCEx
HiliteMenuItem
CheckDlgButton
GetWindowLongA
SetClassLongA
GetSubMenu
DdeClientTransaction
GetForegroundWindow
LoadImageW
SendMessageW
SetWindowPos
GetPriorityClipboardFormat
CreateAcceleratorTableW
GetClipboardData
GetAncestor
FindWindowExA
CharNextA
ReleaseCapture
CallMsgFilterA
CharNextExA
DdeQueryConvInfo
DdeSetQualityOfService
GetWindowTextLengthA
IsCharLowerW
GetKeyNameTextA
PeekMessageW
SetUserObjectSecurity
DrawCaption
RegisterWindowMessageA
DrawEdge
ChangeDisplaySettingsA
RegisterClassExA
GetDlgCtrlID
SetWindowContextHelpId
GetUpdateRect
SetScrollInfo
CascadeChildWindows
CallMsgFilterW
GetTabbedTextExtentA
ClipCursor
TranslateAccelerator
LoadAcceleratorsW
EnumPropsExW
BeginDeferWindowPos
GetClipboardOwner
CreateWindowStationW
DestroyAcceleratorTable
SetDlgItemTextW
DragObject
IsDlgButtonChecked
DdeUninitialize
IsWindowVisible
GetMenuStringA
LockWindowUpdate
GetWindowRgn
SendDlgItemMessageA
GetClassWord
EnableMenuItem
SendInput
ScrollDC
GetMenuState
advapi32
SetFileSecurityW
RegRestoreKeyA
CreateProcessAsUserA
CryptEnumProvidersW
LookupAccountNameW
CopySid
OpenServiceW
InitiateSystemShutdownW
CryptReleaseContext
GetAccessPermissionsForObjectA
GetNamedSecurityInfoA
CryptSignHashA
BuildImpersonateExplicitAccessWithNameW
RegSetValueExA
SetSecurityInfoExW
GetTokenInformation
CryptSetHashParam
TrusteeAccessToObjectA
SetSecurityDescriptorSacl
IsValidSecurityDescriptor
Sections
.text Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ