Static task
static1
Behavioral task
behavioral1
Sample
38d9e4bc5af2de94839de751c27ee252708ae6ffa28a45150a9f3590b0482748.exe
Resource
win7-20220812-en
General
-
Target
38d9e4bc5af2de94839de751c27ee252708ae6ffa28a45150a9f3590b0482748
-
Size
1.5MB
-
MD5
8d29491d0af28cc5962287a06a068591
-
SHA1
f47ba5ae16268697edb27ac1352adbbb6f362a1f
-
SHA256
38d9e4bc5af2de94839de751c27ee252708ae6ffa28a45150a9f3590b0482748
-
SHA512
8c7d38707d57836d050f4166689dcddaad2259ee22aa236d658eea1aab9cb2989d0cc1f6ff3e2f97b8b0cbdfbcf8a2f599daee7b3037805b155226373434c03b
-
SSDEEP
24576:6FxpxpW9k+g8jyWz5a7j7disAe3I6IJ/yesvaNz9TydD:6vpW9kr8jTEEn0I6q6esvopTydD
Malware Config
Signatures
Files
-
38d9e4bc5af2de94839de751c27ee252708ae6ffa28a45150a9f3590b0482748.exe windows x86
5493040c735a1b33030cf050751cff7c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
mpr
WNetCloseEnum
WNetOpenEnumW
WNetGetLastErrorW
WNetAddConnection2W
WNetCancelConnection2W
WNetEnumResourceW
netapi32
NetGetJoinInformation
NetUseGetInfo
NetApiBufferFree
kernel32
SleepEx
WriteFileEx
FindNextFileW
GetFileAttributesW
CreateEventA
ResetEvent
SetEvent
SetLastError
MulDiv
lstrlenW
lstrcmpW
InterlockedExchange
MultiByteToWideChar
CompareStringA
WideCharToMultiByte
GetLocaleInfoW
EnumResourceLanguagesW
GetVersion
ConvertDefaultLocale
GlobalDeleteAtom
ResumeThread
SuspendThread
GlobalAddAtomW
FreeResource
CompareStringW
GlobalFindAtomW
LocalAlloc
GlobalReAlloc
GlobalHandle
LocalReAlloc
WritePrivateProfileStringW
GlobalFlags
MoveFileW
DeleteFileW
GetStringTypeExW
GetThreadLocale
FileTimeToSystemTime
WriteFile
FileTimeToLocalFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
RemoveDirectoryW
CreateDirectoryW
ExitThread
CreateThread
FindFirstFileA
GetDriveTypeA
GetFullPathNameA
ExitProcess
HeapReAlloc
HeapSize
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetTickCount
GetSystemTimeAsFileTime
VirtualAlloc
GetCPInfo
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryA
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
ReadFile
FlushFileBuffers
IsBadCodePtr
IsBadReadPtr
ReadProcessMemory
GetProcessAffinityMask
SetProcessAffinityMask
GlobalMemoryStatusEx
WaitForSingleObjectEx
GetExitCodeThread
SetThreadPriority
GetCurrentThreadId
GetThreadPriority
GetACP
GetOEMCP
LoadLibraryW
GetDiskFreeSpaceExW
GetFullPathNameW
GetFileAttributesExW
SetVolumeLabelW
GetShortPathNameW
DeviceIoControl
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
SetFilePointer
SetEndOfFile
GetFileSize
SetFileTime
CreateFileW
GetFileInformationByHandle
SetFileAttributesW
FindFirstFileW
FindClose
FindFirstVolumeW
FindNextVolumeMountPointW
GetVolumeInformationW
FindFirstVolumeMountPointW
FindVolumeMountPointClose
FindNextVolumeW
FindVolumeClose
GetCurrentThread
VirtualQueryEx
GetModuleFileNameA
CreateFileA
LoadLibraryA
FreeLibrary
GetCurrentProcessId
GetCommandLineA
QueryPerformanceFrequency
QueryPerformanceCounter
GetLocalTime
GetSystemTime
InterlockedDecrement
InterlockedIncrement
InterlockedExchangeAdd
GetWindowsDirectoryW
GetComputerNameW
GetVersionExA
GetSystemInfo
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
InitializeCriticalSection
GetDateFormatW
GetTimeFormatW
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
FormatMessageW
LocalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetDriveTypeW
GetCommandLineW
SearchPathW
GetExitCodeProcess
CloseHandle
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
Sleep
CreateEventW
GetCurrentProcess
GetLastError
ReleaseMutex
WaitForSingleObject
FindResourceW
LoadResource
LockResource
SizeofResource
SetErrorMode
user32
ShowWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
UpdateWindow
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CopyRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
EndPaint
BeginPaint
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
LoadStringW
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
SetWindowsHookExW
CallNextHookEx
GetMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
SetMenuItemBitmaps
LoadBitmapW
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
PostMessageW
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
WindowFromPoint
GetSysColorBrush
DestroyMenu
UnregisterClassW
GetSubMenu
wsprintfA
LoadImageW
SendNotifyMessageW
SetForegroundWindow
GetDesktopWindow
BringWindowToTop
PeekMessageW
DispatchMessageW
TranslateMessage
SetWindowLongW
GetSysColor
IsWindow
ReleaseCapture
EnableWindow
GetParent
SetCapture
RedrawWindow
InvalidateRect
ReleaseDC
GetDC
GetClientRect
GetWindowRect
SendMessageW
InflateRect
PtInRect
LoadCursorW
SetCursor
MessageBoxW
UnregisterClassA
GetMenuCheckMarkDimensions
gdi32
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetBkMode
SetBkColor
RestoreDC
RectVisible
SaveDC
CreateBitmap
GetDeviceCaps
BitBlt
CreateCompatibleDC
GetTextExtentPoint32W
SetViewportExtEx
GetObjectW
CreateFontIndirectW
GetStockObject
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetTextColor
OffsetViewportOrgEx
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
RegUnLoadKeyW
RegLoadKeyW
RegQueryInfoKeyA
LookupPrivilegeValueA
AdjustTokenPrivileges
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
OpenProcessToken
GetTokenInformation
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
shell32
ShellExecuteExW
CommandLineToArgvW
ShellExecuteW
shlwapi
PathFindFileNameW
PathFindExtensionW
oleaut32
VariantClear
VariantChangeType
VariantInit
dbghelp
SymGetModuleBase64
SymFunctionTableAccess64
StackWalk64
SymSetOptions
SymGetLineFromAddr64
SymLoadModule64
SymInitialize
SymGetOptions
SymGetModuleInfo64
Sections
.text Size: 1.1MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 324KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 24KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
._rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE