Static task
static1
Behavioral task
behavioral1
Sample
772693cc54549ab6a25c6a19bc7ae84e9104fb1e762edb39a9f13a7b76ac0bbb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
772693cc54549ab6a25c6a19bc7ae84e9104fb1e762edb39a9f13a7b76ac0bbb.exe
Resource
win10v2004-20220812-en
General
-
Target
772693cc54549ab6a25c6a19bc7ae84e9104fb1e762edb39a9f13a7b76ac0bbb
-
Size
98KB
-
MD5
6a2aa638cb60e0e60c7b2604215235b0
-
SHA1
3a4b990f88af900dee47f6a028fe23a4b781af3c
-
SHA256
772693cc54549ab6a25c6a19bc7ae84e9104fb1e762edb39a9f13a7b76ac0bbb
-
SHA512
b76ec22fb1b513934eb2d23cf16a0e46dc17a0ce10fcc36e8ff5b1a32b4d8deb2b509277b3994d691e9690041778938d47b2d39b1fb2c1ea673bd856bedcdce4
-
SSDEEP
3072:pGi0KWQ5JOWEcQj0Ypa+lU3AF77zVHzkS:wg5JVBc0YpaCzp
Malware Config
Signatures
Files
-
772693cc54549ab6a25c6a19bc7ae84e9104fb1e762edb39a9f13a7b76ac0bbb.exe windows x86
960d26ef6562972e6e48ef72ab112be4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
ExpandEnvironmentStringsW
lstrcmpiA
QueryPerformanceFrequency
GetModuleHandleW
GetDateFormatA
GetPrivateProfileSectionW
LockFile
LocalAlloc
GlobalFlags
CompareStringA
CopyFileW
GlobalReAlloc
GetEnvironmentStringsW
GetModuleFileNameW
GetFileTime
lstrcpynW
GetVersionExW
FileTimeToSystemTime
GlobalAddAtomW
GetLocalTime
GetDateFormatW
SetErrorMode
MapViewOfFile
GetTimeFormatA
SetStdHandle
EnumResourceLanguagesW
LocalReAlloc
FlushFileBuffers
GlobalHandle
GetTimeFormatW
LockResource
GetLocaleInfoW
FindNextFileW
GetThreadLocale
lstrcmpW
WritePrivateProfileStringW
LoadLibraryW
GetPrivateProfileStringW
ResumeThread
CreateDirectoryW
LoadResource
lstrcmpiW
GetPrivateProfileIntW
UnlockFile
MulDiv
GetFileAttributesW
lstrcpyW
GetTimeZoneInformation
GetVolumeInformationW
lstrcatW
RaiseException
FileTimeToLocalFileTime
CreateWaitableTimerW
WaitForMultipleObjects
GlobalDeleteAtom
FindFirstFileW
GetCurrentThread
DuplicateHandle
FreeEnvironmentStringsW
SetFileAttributesW
SetEnvironmentVariableA
SetWaitableTimer
GetDriveTypeW
IsValidCodePage
FormatMessageW
GetFileSize
CheckNameLegalDOS8Dot3A
GlobalAddAtomA
SetHandleInformation
CancelWaitableTimer
ActivateActCtx
OpenWaitableTimerA
OpenWaitableTimerW
CancelIo
DeleteFileW
FindResourceW
CreateProcessW
GlobalFindAtomW
GetTempPathW
GetFullPathNameW
CompareStringW
UnmapViewOfFile
WritePrivateProfileSectionW
LCMapStringW
lstrcmpA
SizeofResource
CreateSemaphoreA
Sleep
InterlockedIncrement
GetAtomNameA
ReleaseSemaphore
WaitForSingleObject
FindAtomA
GetOEMCP
TlsFree
InitializeCriticalSection
IsBadReadPtr
GetCurrentProcessId
GetStringTypeA
CreateDirectoryA
HeapAlloc
GetPrivateProfileSectionNamesA
FindFirstFileA
UnhandledExceptionFilter
GetUserDefaultLCID
GetStdHandle
LCMapStringA
VirtualAlloc
GetNumberFormatA
GetVersionExA
GetSystemInfo
GetACP
HeapDestroy
GetCurrentThreadId
VirtualProtect
TlsSetValue
HeapReAlloc
GetCPInfo
HeapCreate
ExpandEnvironmentStringsA
LeaveCriticalSection
SetUnhandledExceptionFilter
WideCharToMultiByte
FindNextFileA
FindClose
ExitProcess
GetCommandLineA
GetSystemTimeAsFileTime
ReadFile
RtlUnwind
GetPrivateProfileIntA
GetPrivateProfileStringA
HeapSize
SetFilePointer
GetTickCount
MoveFileA
GetCurrentProcess
FreeEnvironmentStringsA
EnterCriticalSection
GetLocaleInfoA
SetEndOfFile
HeapFree
VirtualQuery
TerminateProcess
SetHandleCount
DeleteCriticalSection
TlsAlloc
WriteFile
WritePrivateProfileStringA
InterlockedExchange
CreateFileA
VirtualFree
GetFileType
QueryPerformanceCounter
IsBadCodePtr
GetStringTypeW
IsBadWritePtr
GetEnvironmentStrings
TlsGetValue
AreFileApisANSI
GetFullPathNameA
LoadLibraryA
lstrlenW
lstrcpyA
LocalFree
FreeLibrary
GetProcAddress
GetModuleFileNameA
lstrcpynA
CreateMutexA
CloseHandle
InterlockedDecrement
GetLastError
lstrlenA
OutputDebugStringA
CreateProcessA
GlobalAlloc
GetModuleHandleA
GlobalFree
GetVersion
GetFileAttributesA
SetLastError
MultiByteToWideChar
GetStartupInfoA
GetStartupInfoW
user32
SetMenuItemBitmaps
SendDlgItemMessageA
IsRectEmpty
GetMenuState
SetWindowPos
wsprintfA
CreateWindowExW
ValidateRect
SetMenuDefaultItem
GetMessageTime
GetWindow
SetPropW
IsChild
GetDesktopWindow
GetDoubleClickTime
GetWindowTextW
SetActiveWindow
RemovePropW
SendDlgItemMessageW
MapWindowPoints
EqualRect
EnableMenuItem
GetMenuCheckMarkDimensions
CreateDialogIndirectParamW
DrawMenuBar
GetSysColorBrush
SetDlgItemTextW
GetAsyncKeyState
GetClassInfoW
GetMenuItemID
WinHelpW
MessageBeep
GetMenu
GetWindowPlacement
CallNextHookEx
IsDialogMessageW
PeekMessageW
InvalidateRgn
DrawIcon
RegisterWindowMessageW
SetWindowsHookExW
DrawTextW
IntersectRect
wsprintfW
DefWindowProcW
GetWindowLongW
PostMessageW
GetFocus
EndPaint
WindowFromPoint
PostQuitMessage
LoadIconW
SendMessageW
GetPropW
GetForegroundWindow
UnregisterClassW
RegisterClassW
GetNextDlgGroupItem
SetWindowLongW
GetWindowTextLengthW
GetClassLongW
MapDialogRect
EndDialog
MessageBoxA
IsDialogMessageA
TranslateMessage
CheckDlgButton
DispatchMessageA
CheckRadioButton
GetActiveWindow
GetWindowLongA
GetMessageA
CreateDialogParamA
SetWindowLongA
GetNextDlgTabItem
GetDlgItem
ShowWindow
DialogBoxParamA
GetDlgItemTextA
FindWindowExA
CreateWindowExA
DestroyWindow
DestroyIcon
EnableWindow
LoadImageA
GrayStringA
UpdateWindow
FillRect
GetSystemMetrics
PtInRect
GetWindowRect
ReleaseCapture
FindWindowA
IsZoomed
SetWindowRgn
GetWindowDC
DrawIconEx
EnumChildWindows
IsWindow
IsWindowVisible
PostMessageA
DrawTextA
GetSystemMenu
SetRect
TabbedTextOutA
CopyRect
SystemParametersInfoA
DefWindowProcA
SetForegroundWindow
SetCapture
ReleaseDC
GetParent
SetWindowTextA
AdjustWindowRectEx
BeginPaint
GetTopWindow
CallWindowProcW
DispatchMessageW
GrayStringW
GetKeyState
GetMessagePos
TabbedTextOutW
GetCapture
DrawTextExW
IsDlgButtonChecked
UnhookWindowsHookEx
SetFocus
MessageBoxW
CheckMenuItem
GetDlgItemTextW
SetCursor
SetWindowContextHelpId
GetClassInfoExW
GetClassNameW
IsWindowEnabled
SetWindowTextW
LoadCursorA
ClientToScreen
GetSysColor
GetDlgCtrlID
LoadBitmapA
OffsetRect
GetDC
SendMessageA
GetWindowTextA
GetClientRect
InvalidateRect
LoadIconA
ScreenToClient
gdi32
SetMapMode
RestoreDC
SetBkColor
SetDIBColorTable
GetObjectW
CreateBitmap
GetTextExtentPoint32W
CreateRectRgnIndirect
GetViewportExtEx
CreateDIBSection
TextOutW
ExtTextOutW
GetClipBox
SaveDC
GetWindowExtEx
DPtoLP
SelectPalette
CreateCompatibleDC
Polyline
TextOutA
SetRectRgn
DeleteDC
PtInRegion
GetTextColor
CreateSolidBrush
SetPixel
GetCurrentObject
CombineRgn
CreatePalette
PtVisible
GetObjectA
CreateFontIndirectA
RealizePalette
GetPaletteEntries
StretchBlt
BitBlt
DeleteObject
CreateRectRgn
CreateHalftonePalette
SetBkMode
GetDeviceCaps
RectVisible
CreatePolygonRgn
ExtTextOutA
LPtoDP
comdlg32
GetFileTitleW
GetOpenFileNameW
GetSaveFileNameW
advapi32
RevertToSelf
CryptDestroyKey
LookupAccountNameA
LsaClose
RegDeleteKeyW
RegCloseKey
DuplicateToken
RegOpenKeyExW
CreateProcessAsUserW
LookupPrivilegeValueA
RegDeleteValueA
CryptDeriveKey
RegQueryValueW
RegConnectRegistryW
RegEnumKeyExW
RegUnLoadKeyW
RegOpenKeyW
RegQueryInfoKeyW
RegLoadKeyW
AllocateAndInitializeSid
RegSetValueExA
CryptDecrypt
RegEnumValueW
IsTextUnicode
LsaFreeMemory
RegSetValueExW
LsaOpenPolicy
CryptAcquireContextA
RegQueryValueExW
RegQueryValueExA
CryptEncrypt
RegOpenCurrentUser
FreeSid
CreateProcessAsUserA
RegEnumValueA
RegCreateKeyExA
CryptHashData
DuplicateTokenEx
RegCreateKeyExW
CryptCreateHash
EqualSid
RegDeleteValueW
CryptDestroyHash
RegOpenKeyExA
CryptReleaseContext
RegEnumKeyW
shell32
SHGetFolderLocation
SHBrowseForFolderW
ShellExecuteA
SHGetPathFromIDListA
SHGetDesktopFolder
SHBindToParent
SHGetMalloc
SHFileOperationW
SHGetFileInfoW
SHGetPathFromIDListW
ole32
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
CLSIDFromProgID
StringFromCLSID
CoCreateInstance
CoTaskMemFree
CoInitialize
CoUninitialize
OleFlushClipboard
CoFreeUnusedLibraries
OleIsCurrentClipboard
OleUninitialize
CoTaskMemAlloc
CoRevokeClassObject
OleInitialize
CLSIDFromString
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
comctl32
ImageList_ReplaceIcon
CreatePropertySheetPageW
PropertySheetW
ImageList_Create
ImageList_AddMasked
ImageList_SetBkColor
DestroyPropertySheetPage
_TrackMouseEvent
ImageList_Destroy
InitCommonControlsEx
PropertySheetA
ord17
shlwapi
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathFindFileNameA
StrRetToBufW
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
mpr
WNetAddConnection2W
WNetCancelConnectionW
secur32
GetUserNameExW
oledlg
OleUIBusyW
gdiplus
GdipBitmapLockBits
GdipCloneImage
GdipGetImagePaletteSize
GdipDrawImageI
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipFree
GdipCreateBitmapFromFileICM
GdiplusStartup
GdipGetImageWidth
GdipDisposeImage
GdipGetImageHeight
GdipBitmapUnlockBits
GdipCreateBitmapFromFile
GdipGetImageGraphicsContext
GdipGetImagePalette
GdipGetImagePixelFormat
GdiplusShutdown
GdipAlloc
msvcrt
printf
fgetpos
getenv
fwrite
fclose
clearerr
getc
atexit
signal
malloc
fflush
_fstati64
strlen
setvbuf
fopen
_errno
strftime
isalpha
_CIasin
fread
_XcptFilter
_mbsicmp
_splitpath
_onexit
_controlfp
?terminate@@YAXXZ
_initterm
_adjust_fdiv
__setusermatherr
__p__commode
__set_app_type
exit
_acmdln
__getmainargs
_vsnprintf
__CxxFrameHandler
_mbscmp
__p__fmode
free
_CIsin
??1type_info@@UAE@XZ
_exit
_setmbcp
_CxxThrowException
_strdup
__dllonexit
_except_handler3
toupper
strxfrm
strncmp
sprintf
_assert
freopen
strtol
strncpy
setlocale
strcpy
memchr
_filelengthi64
fprintf
strtod
_cexit
_lseeki64
_filbuf
memcpy
strcoll
strcspn
memset
ungetc
realloc
__p__environ
_ctype
strspn
strchr
strcmp
_iob
puts
_setmode
abort
fsetpos
memmove
putc
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ