Static task
static1
Behavioral task
behavioral1
Sample
f55f5d210dfbbcc7691082d8beaa11e5535549bdfda3da8bedf5f2995ca1f5c9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f55f5d210dfbbcc7691082d8beaa11e5535549bdfda3da8bedf5f2995ca1f5c9.exe
Resource
win10v2004-20220812-en
General
-
Target
f55f5d210dfbbcc7691082d8beaa11e5535549bdfda3da8bedf5f2995ca1f5c9
-
Size
761KB
-
MD5
005b17544285bdfe2dceedd462546eb0
-
SHA1
aa5dc14f9285614f8d225dc9b4c14d282f28e5de
-
SHA256
f55f5d210dfbbcc7691082d8beaa11e5535549bdfda3da8bedf5f2995ca1f5c9
-
SHA512
8e0f4dfbbfc2b4e17c069f842621cd32be5f305065b59e77b69189887099369b373123d9ac16107f5802ab15fd29f0e5b6e02f0f91e98d570fe0d30fac454fe8
-
SSDEEP
12288:OSADDHyj7/BbmaDEPoiAtPA6lHu1PUK1FpDScTb0NwFwBJwBa4sGSh:Yy9EAZI6lK1FpPTIKFGJGa7
Malware Config
Signatures
Files
-
f55f5d210dfbbcc7691082d8beaa11e5535549bdfda3da8bedf5f2995ca1f5c9.exe windows x86
7cb6d6d119d595b5e656eb23798762b0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dbghelp
MiniDumpWriteDump
kernel32
GetLongPathNameA
CreateProcessA
DeviceIoControl
GlobalMemoryStatus
VirtualQuery
RaiseException
GetFileSize
WriteFile
SetFilePointer
GetFileTime
GetSystemTimeAsFileTime
GetSystemInfo
FileTimeToLocalFileTime
FileTimeToDosDateTime
lstrcpyA
lstrlenA
GetTickCount
lstrcmpA
GetVersionExA
GetProcAddress
FlushInstructionCache
VirtualProtectEx
WriteProcessMemory
LoadLibraryA
lstrcpynA
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
OpenFileMappingA
GetLocalTime
MultiByteToWideChar
WideCharToMultiByte
SetProcessWorkingSetSize
WinExec
WaitForSingleObject
ReadFile
DeleteFileA
CopyFileA
GetShortPathNameA
GetCurrentThread
SetThreadPriority
lstrcatA
CreateEventA
GetEnvironmentVariableA
OutputDebugStringW
SetEndOfFile
CreateFileW
SetEnvironmentVariableA
WriteConsoleW
GetStringTypeW
OutputDebugStringA
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
LoadLibraryW
SetFilePointerEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
ReadConsoleW
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetConsoleCtrlHandler
LoadLibraryExW
FreeLibrary
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetFileType
HeapSize
GetModuleFileNameW
GetStdHandle
CreateSemaphoreW
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetLastError
UnhandledExceptionFilter
FatalAppExitA
GetCommandLineA
VirtualProtect
VirtualAlloc
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileA
FindFirstFileExA
FindClose
AreFileApisANSI
GetModuleHandleExW
IsProcessorFeaturePresent
IsDebuggerPresent
SetPriorityClass
CreateDirectoryA
GetTempPathA
GetModuleHandleA
CreateMutexA
Sleep
ReleaseMutex
ResumeThread
GetLastError
CreateThread
OpenProcess
GetProcessHeap
HeapFree
HeapAlloc
GlobalAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CreateFileA
GetFileAttributesExW
GetModuleFileNameA
CloseHandle
InitializeCriticalSectionAndSpinCount
SetErrorMode
GetCurrentThreadId
SetUnhandledExceptionFilter
ExitProcess
GetCurrentProcessId
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
GlobalFree
SetStdHandle
RtlUnwind
DecodePointer
EncodePointer
lstrcatW
GetSystemDirectoryA
lstrlenW
LocalFree
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
InterlockedExchange
user32
GetClassNameA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
wvsprintfA
wsprintfA
SendMessageA
GetParent
GetWindowRect
EnumChildWindows
TrackMouseEvent
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
PostMessageA
IsZoomed
CallWindowProcA
UnregisterClassA
RegisterClassExA
CreateWindowExA
ShowWindow
MoveWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
RemovePropA
GetClientRect
MapWindowPoints
FindWindowExA
LoadCursorA
LoadImageA
RegisterWindowMessageA
PostThreadMessageA
DefWindowProcW
CallWindowProcW
SetPropA
GetPropA
IsWindowEnabled
DrawTextA
GetWindowTextA
SystemParametersInfoA
FillRect
SetCursor
SetWindowTextA
InvalidateRect
SetWindowRgn
GetForegroundWindow
KillTimer
SetTimer
OffsetRect
SetWindowPos
DestroyWindow
PostQuitMessage
DrawIconEx
DestroyIcon
GetWindowLongA
SetWindowLongW
gdi32
GetObjectA
CreatePolygonRgn
TextOutA
CreateSolidBrush
SetTextColor
StretchBlt
GetTextExtentPoint32A
CreateFontA
CreateDIBSection
SetBkMode
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
BitBlt
GetBitmapBits
advapi32
GetUserNameA
StartServiceA
OpenServiceA
OpenSCManagerA
DeleteService
CreateServiceA
ControlService
CloseServiceHandle
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyA
RegCloseKey
shell32
ShellExecuteExA
SHChangeNotify
ole32
OleUninitialize
StgCreateDocfile
OleCreate
OleInitialize
CoUninitialize
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize
oleaut32
VariantClear
VariantCopy
VarCmp
SysAllocStringLen
SysStringLen
SysStringByteLen
SysAllocStringByteLen
VariantInit
SafeArrayDestroy
SafeArrayAccessData
SafeArrayPutElement
VariantChangeType
CreateErrorInfo
SetErrorInfo
GetErrorInfo
SafeArrayCreate
SysAllocString
SysFreeString
ws2_32
accept
bind
closesocket
inet_ntoa
gethostbyname
gethostname
__WSAFDIsSet
WSACleanup
WSAStartup
connect
ioctlsocket
socket
shutdown
setsockopt
sendto
send
select
recvfrom
recv
listen
inet_addr
htons
htonl
getsockname
getpeername
msimg32
AlphaBlend
shlwapi
StrStrIA
wininet
InternetCloseHandle
InternetOpenA
DeleteUrlCacheEntry
InternetReadFile
InternetOpenUrlA
psapi
GetModuleInformation
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
Sections
.text Size: 442KB - Virtual size: 441KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ