Static task
static1
Behavioral task
behavioral1
Sample
7476b09ac71d569c2cea898928443afe4d1600e752e8ddeedf443f5a87beecd0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7476b09ac71d569c2cea898928443afe4d1600e752e8ddeedf443f5a87beecd0.exe
Resource
win10v2004-20220812-en
General
-
Target
7476b09ac71d569c2cea898928443afe4d1600e752e8ddeedf443f5a87beecd0
-
Size
331KB
-
MD5
6af1efe6a31be288b2ebde6b1658e830
-
SHA1
957a47d9475fd699cbd2a7b68e76a294bca99111
-
SHA256
7476b09ac71d569c2cea898928443afe4d1600e752e8ddeedf443f5a87beecd0
-
SHA512
bab3e4c021e0baeff36dd57be06cc0dac03236e5c96775919f1eb36c8c9e5ec722d6fab7add4daf7ecd898ad34db96f9788ffd7bc63dcefbc42221369660c1df
-
SSDEEP
3072:oDnvgB7NLEx9MS9DQSsdOgBdJdbJh0tZq+czoDCra5CpjXO8:unoBI9DIOgBV0WGKa8Ze8
Malware Config
Signatures
Files
-
7476b09ac71d569c2cea898928443afe4d1600e752e8ddeedf443f5a87beecd0.exe windows x86
7a8ea20578d8e33de1b67d77850dcc16
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumDisplaySettingsW
WaitForInputIdle
GetClassLongW
GetUpdateRgn
GetUpdateRect
IntersectRect
ValidateRect
GetScrollInfo
SetScrollInfo
ScrollWindowEx
IsWindowEnabled
GetDlgCtrlID
PeekMessageW
MsgWaitForMultipleObjects
CheckRadioButton
BeginDeferWindowPos
EnumChildWindows
EndDeferWindowPos
OffsetRect
UnionRect
IsZoomed
GetSystemMetrics
PtInRect
BeginPaint
DrawFrameControl
EndPaint
SetPropW
CallWindowProcW
DefWindowProcW
GetClientRect
CopyRect
GetWindowLongW
GetParent
ShowWindow
SetWindowLongW
GetKeyState
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetCursorPos
SetWindowPos
PostMessageW
SendMessageW
MessageBoxW
EndDialog
GetDlgItem
GetWindowRect
MoveWindow
SetDlgItemTextW
LoadCursorW
EnableWindow
WindowFromDC
GetMenuItemRect
IsHungAppWindow
DrawIcon
GetScrollBarInfo
TabbedTextOutA
EnumClipboardFormats
gdi32
SelectClipRgn
GetBkMode
CreateRectRgn
GetBkColor
SelectObject
SetTextColor
SetBkMode
CreateRectRgnIndirect
RectInRegion
GetObjectW
GetStockObject
DeleteObject
CreateSolidBrush
DeleteDC
CreateCompatibleDC
CreateDIBSection
BitBlt
SetBkColor
EndDoc
EndPage
StartPage
StartDocW
SetMapMode
GetDeviceCaps
GetTextExtentPoint32W
ExtTextOutW
SetTextAlign
RestoreDC
Rectangle
CreatePen
SetROP2
CreateCompatibleBitmap
LineTo
MoveToEx
GetTextMetricsW
Polyline
CreateFontIndirectW
GetOutlineTextMetricsW
GetPixel
SetColorAdjustment
GetViewportOrgEx
GetOutlineTextMetricsA
SetDCBrushColor
SetMiterLimit
EnumMetaFile
ExcludeClipRect
SetDIBColorTable
GetEnhMetaFileDescriptionW
SaveDC
SetArcDirection
AnimatePalette
PatBlt
kernel32
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
IsDebuggerPresent
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCommandLineA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
HeapReAlloc
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
GetCurrentProcessId
SetProcessPriorityBoost
LocalAlloc
MapUserPhysicalPages
SetProcessWorkingSetSize
FreeResource
UnhandledExceptionFilter
lstrlenA
LocalFree
FormatMessageA
GetLastError
GetModuleFileNameA
LockResource
LoadResource
FindResourceA
MapViewOfFile
CloseHandle
CreateFileMappingA
GetFileSize
CreateFileA
UnmapViewOfFile
GetProcAddress
LoadLibraryA
GetFullPathNameA
OutputDebugStringA
GetModuleHandleA
FreeLibrary
VirtualAlloc
VirtualProtect
VirtualFree
HeapFree
GetProcessHeap
SetLastError
IsBadReadPtr
HeapAlloc
Sleep
GetStartupInfoA
SetUnhandledExceptionFilter
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 151KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ