Static task
static1
Behavioral task
behavioral1
Sample
c619a7a55b2d77ffd1fd5653576f494e5ef13d2397ce9429f4a949aba27559a3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c619a7a55b2d77ffd1fd5653576f494e5ef13d2397ce9429f4a949aba27559a3.exe
Resource
win10v2004-20220901-en
General
-
Target
c619a7a55b2d77ffd1fd5653576f494e5ef13d2397ce9429f4a949aba27559a3
-
Size
130KB
-
MD5
ae0aeefbfa2222b62cdf6caa109b3ca4
-
SHA1
541974b862fd09da6100fde9f482c532b4df09b4
-
SHA256
c619a7a55b2d77ffd1fd5653576f494e5ef13d2397ce9429f4a949aba27559a3
-
SHA512
50ff9f16f41c737e3a65f60fa146904d1b7146fcd577296b00109a87c74fe143e40ec6c50150478cb1b4b0d8c2db63f5920e665def3477307e1f4f4524c6ef46
-
SSDEEP
3072:YY6we8cOtChdcFWpXr0FkBVcMKcq50JYpaQb0DVL/:4v8clcu7Bqwq50SYQb0DF
Malware Config
Signatures
Files
-
c619a7a55b2d77ffd1fd5653576f494e5ef13d2397ce9429f4a949aba27559a3.exe windows x86
222c99d57f9f54143ea63d65572c44f5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CreateGenericComposite
CoRegisterMallocSpy
CoRegisterSurrogate
advapi32
CreateServiceA
ReportEventA
BuildSecurityDescriptorW
GetEffectiveRightsFromAclA
GetUserNameA
RegCreateKeyExA
BuildTrusteeWithNameA
AbortSystemShutdownW
InitializeAcl
GetServiceDisplayNameA
shlwapi
PathGetCharTypeA
SHRegSetUSValueW
ColorAdjustLuma
PathIsFileSpecA
StrChrW
PathRemoveExtensionW
StrToIntW
PathRemoveFileSpecW
PathIsSystemFolderA
SHAutoComplete
user32
EnumWindowStationsW
EnumWindowStationsA
GetCaretPos
GetWindowPlacement
SetWindowPos
RealGetWindowClass
DdeImpersonateClient
CreateMenu
ExcludeUpdateRgn
CreateMDIWindowW
DialogBoxIndirectParamA
LoadCursorFromFileA
GetDlgItem
GetScrollInfo
GetTabbedTextExtentW
SetMenuInfo
GetKeyboardState
EmptyClipboard
CharUpperW
GetWindowContextHelpId
GetMenuState
DdeInitializeA
EnumDisplaySettingsExW
InsertMenuItemA
OpenDesktopA
SendMessageTimeoutA
HiliteMenuItem
DdeCreateStringHandleW
FindWindowA
PeekMessageA
SetPropA
GetShellWindow
SwitchDesktop
CloseDesktop
GetMenuItemInfoA
GetDC
GetGuiResources
GetTabbedTextExtentA
GetKeyNameTextA
CheckDlgButton
CharNextW
GetSystemMetrics
GetCursorInfo
CharPrevW
PostThreadMessageW
LoadBitmapW
DdeQueryConvInfo
GetMenuItemCount
ReleaseDC
RegisterClassExA
CopyAcceleratorTableW
EnumPropsExA
SetProcessDefaultLayout
ChangeDisplaySettingsA
GetMenuItemRect
ShowOwnedPopups
GetInputDesktop
SetWindowContextHelpId
DdeDisconnect
GetInputState
GetKeyboardLayoutList
DefWindowProcW
DialogBoxParamW
LoadMenuW
GetPropW
ChangeMenuW
GetProcessDefaultLayout
DrawMenuBar
EqualRect
CallMsgFilterW
MessageBoxW
GetWindowLongW
GetMessageTime
SetScrollPos
IntersectRect
BroadcastSystemMessageA
OemToCharW
SendInput
SetParent
LoadMenuIndirectW
DrawStateA
DdeAddData
WinHelpA
OpenWindowStationA
MessageBeep
GetMonitorInfoA
RegisterDeviceNotificationA
DdeKeepStringHandle
AppendMenuA
GetMessageW
GetIconInfo
DrawTextExW
SendMessageTimeoutW
ClientToScreen
GetWindowModuleFileNameW
InsertMenuItemW
GetKeyboardLayoutNameA
CascadeChildWindows
SetActiveWindow
ChildWindowFromPoint
FreeDDElParam
ValidateRgn
DdeNameService
SetDlgItemTextW
WINNLSGetIMEHotkey
MessageBoxExW
WinHelpW
SendDlgItemMessageW
PaintDesktop
GetGUIThreadInfo
LookupIconIdFromDirectory
MenuItemFromPoint
RegisterClassExW
CheckMenuRadioItem
CharToOemA
CharLowerW
GetWindowTextLengthA
SetMenuContextHelpId
KillTimer
ValidateRect
SetUserObjectInformationA
OemKeyScan
CallWindowProcA
GetPriorityClipboardFormat
SetShellWindow
DdeConnectList
BlockInput
IsCharLowerA
ExitWindowsEx
CharToOemW
FindWindowW
CheckMenuItem
SetClassLongA
GetClientRect
DlgDirSelectComboBoxExA
SetProcessWindowStation
UnloadKeyboardLayout
DlgDirSelectExA
SetForegroundWindow
GetUpdateRect
SystemParametersInfoA
ScrollDC
EnumDisplayDevicesA
GetDesktopWindow
GetWindowDC
CharToOemBuffA
SetWindowLongW
CreateDesktopW
GetDoubleClickTime
SetWindowPlacement
SetLastErrorEx
IsCharAlphaNumericA
SetScrollInfo
SetCapture
CallMsgFilter
LoadStringW
CascadeWindows
GetWindowWord
CharLowerA
WindowFromPoint
InternalGetWindowText
ShowCursor
LoadCursorW
PostThreadMessageA
EnumDisplayMonitors
SendMessageA
ChangeDisplaySettingsExA
DispatchMessageA
SetCaretBlinkTime
HideCaret
CreateCaret
WaitForInputIdle
DdeReconnect
GetMonitorInfoW
DrawCaption
ScrollWindowEx
AdjustWindowRect
SetMessageExtraInfo
ClipCursor
RedrawWindow
GetClipboardOwner
NotifyWinEvent
SendNotifyMessageW
TranslateMDISysAccel
BeginDeferWindowPos
SetKeyboardState
kernel32
VirtualFree
SetThreadAffinityMask
ReadConsoleOutputAttribute
FreeEnvironmentStringsA
VerLanguageNameW
GetTimeZoneInformation
SetComputerNameA
ReadFileEx
ReadConsoleOutputA
SetPriorityClass
DisableThreadLibraryCalls
SetNamedPipeHandleState
GetCompressedFileSizeW
LockFileEx
GetSystemDefaultLangID
CancelWaitableTimer
CreateNamedPipeA
GetProcAddress
PostQueuedCompletionStatus
GetOverlappedResult
SetConsoleMode
GetTempPathA
GetNumberOfConsoleMouseButtons
InitializeCriticalSectionAndSpinCount
lstrlen
SetStdHandle
EnumSystemLocalesW
GetHandleInformation
GetLogicalDrives
GetDiskFreeSpaceA
SetVolumeLabelW
WriteConsoleOutputCharacterW
CopyFileW
CreateDirectoryExW
RaiseException
QueryDosDeviceA
FindResourceW
GlobalCompact
GetWindowsDirectoryW
GlobalDeleteAtom
VirtualAlloc
RtlFillMemory
VerLanguageNameA
GetUserDefaultLangID
Module32Next
AddAtomW
WideCharToMultiByte
SetConsoleTextAttribute
LoadLibraryW
lstrlenA
GetPrivateProfileStructA
TlsSetValue
UpdateResourceW
GetProfileIntW
EnumCalendarInfoExW
RequestWakeupLatency
QueryPerformanceFrequency
VirtualProtect
QueueUserAPC
GetEnvironmentVariableA
FillConsoleOutputCharacterA
lstrcpyA
GetWriteWatch
GetNamedPipeHandleStateA
Heap32ListNext
LocalUnlock
GetExitCodeProcess
lstrcatA
GetModuleHandleA
AllocConsole
GetTempPathW
GetConsoleOutputCP
CreateDirectoryExA
GetProfileSectionA
ReleaseSemaphore
FormatMessageW
LoadLibraryA
CreateEventW
ConvertThreadToFiber
FindResourceA
lstrcpyW
GlobalAlloc
IsBadWritePtr
GlobalAddAtomA
SetCurrentDirectoryW
TransactNamedPipe
EnumResourceTypesA
PulseEvent
SetTimeZoneInformation
GetEnvironmentStringsW
SetThreadPriorityBoost
GetLocaleInfoW
LockResource
EnumDateFormatsExA
TlsGetValue
OpenMutexA
CompareStringA
MoveFileW
GetCurrencyFormatW
GetThreadContext
GetProcessWorkingSetSize
CreateMutexW
SetConsoleCtrlHandler
PeekConsoleInputW
Toolhelp32ReadProcessMemory
SetLocaleInfoA
SetUnhandledExceptionFilter
CopyFileExW
FlushViewOfFile
lstrcpynW
lstrcmpiW
FindAtomW
FileTimeToSystemTime
IsBadStringPtrA
GetEnvironmentStrings
EnumResourceLanguagesA
TlsAlloc
CreateProcessW
BackupSeek
ReadConsoleOutputCharacterA
GetMailslotInfo
GetFullPathNameA
IsBadHugeReadPtr
SetMailslotInfo
GlobalFlags
SetConsoleOutputCP
OpenEventA
ScrollConsoleScreenBufferA
SetConsoleTitleA
DeleteFiber
EnumResourceNamesW
GetVersionExA
IsValidCodePage
GetPrivateProfileSectionNamesA
LCMapStringA
GetStartupInfoW
CompareStringW
GetSystemDefaultLCID
WriteConsoleOutputCharacterA
GetBinaryTypeA
IsBadReadPtr
SystemTimeToTzSpecificLocalTime
FileTimeToLocalFileTime
OpenSemaphoreW
GetFullPathNameW
LoadResource
GetNumberOfConsoleInputEvents
GetCalendarInfoA
GetProfileIntA
CreateSemaphoreW
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ