Static task
static1
Behavioral task
behavioral1
Sample
письмо/письмо.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
письмо/письмо.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
письмо/письмо.pdf
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
письмо/письмо.pdf
Resource
win10v2004-20220812-en
General
-
Target
50f6e57d50781122528d88e415a77a0cd564bc31b35921e8da81f91362fc7afd.zip
-
Size
3.0MB
-
MD5
24ef6a627d69f6bfe4b8325f74a8adba
-
SHA1
a619559e58db81db1df27e32661d9263092a29ea
-
SHA256
50f6e57d50781122528d88e415a77a0cd564bc31b35921e8da81f91362fc7afd
-
SHA512
4f44aab2f8708c6fd42bdb32138309bf335177111da43d09da2caeed88126824b341113f4f19223ecc5f5a32f1b13f7c5a2f47ddc5c2c3197e9c2e073088930f
-
SSDEEP
49152:8SzKHmFV53Wh3t7uIIV+NZmmoviUj7sw42ru0pdtelUsUeWnbb2E8dY5Q1B9JFs:8S+C3c9PQGZT1UjBrGUsYWWsno
Malware Config
Signatures
Files
-
50f6e57d50781122528d88e415a77a0cd564bc31b35921e8da81f91362fc7afd.zip.zip
-
письмо/письмо ..exe.exe windows x86
a0055b5d3a38e21796114cdce3937647
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetKeySecurity
RegOpenKeyExW
RegCloseKey
RegEnumKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
kernel32
HeapDestroy
HeapCreate
TerminateProcess
GetEnvironmentVariableA
GlobalMemoryStatusEx
Module32FirstW
GetSystemInfo
CreateToolhelp32Snapshot
GetCurrentThreadId
OutputDebugStringA
Module32NextW
GetCurrentProcessId
InterlockedIncrement
InterlockedDecrement
GetProcAddress
GetUserDefaultUILanguage
AllocConsole
CreateProcessW
VerSetConditionMask
SetConsoleScreenBufferSize
FormatMessageA
LoadLibraryW
GetModuleFileNameW
VerifyVersionInfoW
GetStdHandle
GetConsoleScreenBufferInfo
lstrcpyW
GetTempFileNameW
GetDriveTypeW
CreateDirectoryW
SetFileTime
WriteFile
GetVolumePathNameW
ReadFile
CreateFileW
WritePrivateProfileStringW
GetTempPathW
GetPrivateProfileIntW
GetFileSizeEx
GetLongPathNameW
GetFileTime
GetFileAttributesExW
GetShortPathNameW
DeleteFileW
GetFileInformationByHandle
RaiseException
CompareFileTime
ReadDirectoryChangesW
WaitForMultipleObjectsEx
QueueUserAPC
ResetEvent
CancelIo
GetModuleHandleW
WideCharToMultiByte
MultiByteToWideChar
GetThreadContext
VirtualQuery
GetCurrentThread
Thread32First
Thread32Next
OpenThread
GetModuleFileNameA
GetModuleHandleA
SuspendThread
ResumeThread
GetEnvironmentVariableW
GetExitCodeProcess
TryEnterCriticalSection
GetVersionExW
LocalFileTimeToFileTime
SetFilePointer
CreateFileA
AreFileApisANSI
FreeLibrary
GetCurrentDirectoryW
SetConsoleCtrlHandler
SetLastError
CompareStringW
IsDBCSLeadByte
GetCPInfo
FileTimeToSystemTime
FileTimeToLocalFileTime
FlushFileBuffers
SetEndOfFile
GetFileType
CreateEventA
InterlockedExchange
InterlockedCompareExchange
GetFullPathNameA
GetFileAttributesA
MoveFileW
DeviceIoControl
GetConsoleMode
SetThreadPriority
CreateHardLinkW
RemoveDirectoryW
GetProcessAffinityMask
ReleaseSemaphore
CreateSemaphoreW
lstrcpynW
WriteConsoleW
GetTimeZoneInformation
CreateProcessA
GetProcessHeap
GetConsoleCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
PeekNamedPipe
LCMapStringW
SetHandleCount
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapSize
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetCurrentDirectoryA
GetCurrentDirectoryA
SetEnvironmentVariableA
DuplicateHandle
RtlUnwind
InitializeCriticalSectionAndSpinCount
SetStdHandle
FindFirstFileExW
GetStartupInfoW
HeapSetInformation
GetCommandLineA
MoveFileA
DecodePointer
EncodePointer
GetFullPathNameW
ExitProcess
GetCommandLineW
SetErrorMode
MoveFileExW
GetSystemTimeAsFileTime
CopyFileW
FormatMessageW
HeapFree
GetCurrentProcess
SetUnhandledExceptionFilter
HeapAlloc
GetLocaleInfoA
HeapReAlloc
LockResource
SizeofResource
LoadResource
FindResourceW
GetSystemTime
QueryPerformanceFrequency
SetThreadExecutionState
QueryPerformanceCounter
SystemTimeToFileTime
GetLogicalDrives
CreateEventW
GetTickCount
SetEvent
GetTimeFormatW
GetLocaleInfoW
GetDateFormatW
GlobalAddAtomW
GlobalDeleteAtom
GetWindowsDirectoryW
GetSystemDirectoryW
CreateThread
CloseHandle
DeleteCriticalSection
GlobalFree
EnterCriticalSection
GlobalUnlock
LeaveCriticalSection
Sleep
GlobalAlloc
InitializeCriticalSection
WaitForSingleObject
GlobalLock
FindNextFileW
FindClose
FindFirstFileW
SetFileAttributesW
LocalFree
GetLastError
MulDiv
GetFileAttributesW
GetACP
user32
DeferWindowPos
SetPropW
RemovePropW
OemToCharBuffA
CharToOemA
OemToCharA
CharToOemBuffW
CharUpperW
CheckRadioButton
SetDlgItemTextW
EnableWindow
GetWindow
IsCharAlphaNumericW
CloseClipboard
EmptyClipboard
OpenClipboard
HideCaret
LoadImageW
ShowCaret
SetClassLongW
SetForegroundWindow
RedrawWindow
GetMessagePos
GetWindowTextLengthW
ShowWindowAsync
ReuseDDElParam
MessageBeep
IsWindowUnicode
UnpackDDElParam
DdeInitializeW
DdeCreateStringHandleW
PostMessageW
DdeFreeStringHandle
DdeUninitialize
DdeClientTransaction
DdeConnect
DdeDisconnect
DdeFreeDataHandle
TrackPopupMenu
GetMenuItemID
CreateMenu
ModifyMenuW
GetMenu
CheckMenuRadioItem
AppendMenuW
EnableMenuItem
IsDlgButtonChecked
RemoveMenu
InsertMenuW
MapWindowPoints
CheckMenuItem
SetActiveWindow
DrawTextW
CopyImage
EndPaint
EndDeferWindowPos
GetPropW
EnumDisplayMonitors
ScreenToClient
GetWindowDC
GetWindowInfo
MonitorFromWindow
GetDesktopWindow
GetCursorPos
AdjustWindowRectEx
SetClipboardData
SetMenuItemInfoW
GetMonitorInfoW
DispatchMessageW
MoveWindow
DefWindowProcW
CallWindowProcW
GetScrollPos
SetScrollInfo
DestroyMenu
UpdateWindow
SendMessageW
IsWindowVisible
GetSystemMetrics
ReleaseCapture
MessageBoxW
GetCursor
CreateWindowExW
ShowScrollBar
IsWindow
LoadBitmapW
SetMenu
ShowWindow
SetWindowPos
GetSysColor
SetWindowLongW
GetDlgItem
SystemParametersInfoW
GetAncestor
GetWindowLongW
InvalidateRect
GetScrollInfo
LoadIconW
RegisterClassExW
GetForegroundWindow
LoadAcceleratorsW
TranslateMessage
GetCapture
CharLowerW
IsCharUpperW
BeginPaint
SetFocus
GetClientRect
FindWindowW
SetParent
LoadCursorW
MonitorFromRect
GetDC
ReleaseDC
DrawFrameControl
wsprintfA
DialogBoxIndirectParamW
DialogBoxParamW
EndDialog
SendDlgItemMessageW
CreatePopupMenu
CheckDlgButton
TrackMouseEvent
GetParent
GetFocus
GetKeyState
IsZoomed
KillTimer
SetCapture
FillRect
IsIconic
PostQuitMessage
GetMessageW
GetWindowRect
SetTimer
TranslateAcceleratorW
SetCursor
DestroyWindow
BeginDeferWindowPos
gdi32
SetStretchBltMode
SelectClipRgn
CreateFontIndirectW
GetTextExtentPoint32W
SetLayout
AbortDoc
EndDoc
StartDocW
SetMapMode
CreateDCW
GetDeviceCaps
StartPage
EndPage
CreateRoundRectRgn
SetBkColor
SetWorldTransform
GetObjectW
SetDIBits
CreateCompatibleBitmap
GetDIBits
LineTo
SetGraphicsMode
MoveToEx
ExtTextOutW
CreateDIBitmap
CreateRectRgn
RoundRect
TextOutW
SetTextColor
BitBlt
DeleteDC
StretchBlt
DeleteObject
SelectObject
CreateCompatibleDC
Rectangle
CreatePen
GetStockObject
SetBkMode
CreateSolidBrush
comdlg32
PrintDlgExW
GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
shell32
SHAddToRecentDocs
SHGetFileInfoW
DragAcceptFiles
DragQueryFileW
DragFinish
SHGetDesktopFolder
ShellExecuteExW
SHGetFolderPathW
SHBindToParent
SHChangeNotify
gdiplus
GdipDrawLine
GdipGetFamilyName
GdipSetPenDashArray
GdipSetWorldTransform
GdipGetFamily
GdipTransformMatrixPoints
GdipInvertMatrix
GdipSetPenDashOffset
GdipGetImageHorizontalResolution
GdipSetImageAttributesWrapMode
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipGetPointCount
GdipGetFontCollectionFamilyList
GdipCreatePath2
GdipSetImageAttributesColorMatrix
GdipGetEmHeight
GdipAddPathPath
GdipFillPolygon
GdipPrivateAddFontFile
GdipSetClipRect
GdipDrawImagePointsRect
GdipSetPageScale
GdipGetDpiY
GdipGetFontCollectionFamilyCount
GdipGetMatrixElements
GdipTransformRegion
GdipGraphicsClear
GdipCreateRegionRectI
GdipSetPenLineCap197819
GdipWidenPath
GdipIsStyleAvailable
GdipDrawRectangle
GdipSetPenColor
GdipCreateMatrix2
GdipCreateRegionPath
GdipSetImagePalette
GdipNewPrivateFontCollection
GdipGetWorldTransform
GdipSetCompositingMode
GdipCreateStringFormat
GdipDeletePrivateFontCollection
GdipSetPenTransform
GdipGetCellAscent
GdipRestoreGraphics
GdipCloneFontFamily
GdipSetPixelOffsetMode
GdipSetPenLineJoin
GdipGetClipBounds
GdiplusShutdown
GdiplusStartup
GdipFree
GdipGetImageHeight
GdipAlloc
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipCreateHBITMAPFromBitmap
GdipSaveImageToFile
GdipFillRectangle
GdipDrawString
GdipClonePath
GdipTransformPath
GdipSetPenMiterLimit
GdipGetPathWorldBoundsI
GdipSetPenMode
GdipCreateMatrix
GdipCreatePen2
GdipSetPropertyItem
GdipFillEllipseI
GdipDrawImageRectRect
GdipAddPathLine
GdipClosePathFigure
GdipStartPathFigure
GdipDrawImageI
GdipDrawRectangleI
GdipCreateBitmapFromGraphics
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipDeleteFontFamily
GdipDeleteFont
GdipSetTextRenderingHint
GdipCreateLineBrushFromRect
GdipSaveGraphics
GdipGetFontHeight
GdipDeleteStringFormat
GdipGetLogFontW
GdipDrawLineI
GdipBitmapLockBits
GdipStringFormatGetGenericTypographic
GdipSetCompositingQuality
GdipCloneStringFormat
GdipGetImageEncoders
GdipMeasureCharacterRanges
GdipRotateMatrix
GdipSetPageUnit
GdipSetStringFormatMeasurableCharacterRanges
GdipGetImageEncodersSize
GdipTranslateMatrix
GdipBitmapUnlockBits
GdipSetSmoothingMode
GdipGetDC
GdipGetRegionHRgn
GdipTranslateWorldTransform
GdipDeleteMatrix
GdipGetRegionBounds
GdipBitmapSetResolution
GdipCreateBitmapFromStream
GdipMeasureString
GdipGetStringFormatFlags
GdipScaleMatrix
GdipCloneBitmapAreaI
GdipSetStringFormatFlags
GdipCreateRegion
GdipDeleteRegion
GdipSetClipRectI
GdipGetClip
GdipSetClipRegion
GdipFillRectangleI
GdipSetInterpolationMode
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipDrawImageRectRectI
GdipCreatePen1
GdipCreatePath
GdipFillPath
GdipCreateFromHDC
GdipDeletePath
GdipCreateSolidFill
GdipDeleteGraphics
GdipDrawPath
GdipWindingModeOutline
GdipAddPathRectangleI
GdipCloneBrush
GdipDeletePen
GdipDeleteBrush
GdipGetImageWidth
GdipCloneImage
GdipReleaseDC
ole32
CoTaskMemFree
CoInitialize
CreateStreamOnHGlobal
CoUninitialize
CoTaskMemAlloc
OleInitialize
CoCreateInstance
CoGetMalloc
ReleaseStgMedium
comctl32
InitCommonControlsEx
CreatePropertySheetPageW
ImageList_Create
ImageList_AddMasked
ImageList_GetIconSize
ImageList_Draw
ImageList_Destroy
msimg32
GradientFill
winspool.drv
OpenPrinterW
DocumentPropertiesW
GetPrinterW
ClosePrinter
ord203
wininet
HttpSendRequestA
HttpOpenRequestW
HttpQueryInfoW
InternetSetOptionW
InternetConnectW
InternetReadFile
InternetOpenUrlW
InternetOpenW
InternetCloseHandle
oleaut32
SafeArrayPutElement
VariantInit
SafeArrayCreateVector
SysAllocString
VariantClear
shlwapi
PathIsNetworkPathW
SHSetValueW
PathAppendW
SHDeleteKeyW
StrStrIW
StrRStrIW
StrStrW
PathIsRelativeW
SHDeleteValueW
ord219
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
urlmon
CoInternetGetSession
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 299KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
письмо/письмо.pdf.pdf