Static task
static1
Behavioral task
behavioral1
Sample
7edbf24effee7348019a0ca6ad0fec536a4a8c67cbbbfb9f38f7edc5f84575e5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7edbf24effee7348019a0ca6ad0fec536a4a8c67cbbbfb9f38f7edc5f84575e5.exe
Resource
win10v2004-20220901-en
General
-
Target
7edbf24effee7348019a0ca6ad0fec536a4a8c67cbbbfb9f38f7edc5f84575e5
-
Size
700KB
-
MD5
0395991ed5b96b0857304eb277e42e90
-
SHA1
eb6e032518d221dba969d7f6059a96098c5691b1
-
SHA256
7edbf24effee7348019a0ca6ad0fec536a4a8c67cbbbfb9f38f7edc5f84575e5
-
SHA512
d1e15bef2ff9d07081a1645e2eea8b49a192bd15b4c7e99dfdbdff097236ebeed231cdecfc7728e10476fe90cd0d6661e84c277d259a92fba3b0eb8a68d2eead
-
SSDEEP
12288:lBgLGe7ET16nLQ496761e++C0toJzIr6oTITI3tseub1jYi6FQi8d9:EGewTaQ4Aud0Gi9oI9humiF1
Malware Config
Signatures
Files
-
7edbf24effee7348019a0ca6ad0fec536a4a8c67cbbbfb9f38f7edc5f84575e5.exe windows x86
770ae555477d8cf2733f2eb975d99061
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
InitializeAcl
GetTokenInformation
RegCloseKey
RegCreateKeyExA
RegEnumValueA
GetUserNameA
RegCreateKeyA
RegQueryInfoKeyA
OpenProcessToken
RegDeleteValueA
FreeSid
RegSetValueExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegOpenKeyA
OpenServiceA
RegQueryValueExA
RegEnumKeyA
RegDeleteKeyA
GetSidSubAuthority
ControlService
kernel32
CompareStringA
TlsGetValue
GetEnvironmentStringsW
GetCPInfo
ReadFile
GetEnvironmentStrings
GetACP
TlsSetValue
CreateMutexW
RaiseException
WriteFile
RtlUnwind
GetStartupInfoW
FreeEnvironmentStringsA
GetStartupInfoA
UnhandledExceptionFilter
VirtualFree
EnterCriticalSection
SetLastError
GetCurrentProcessId
GetStringTypeA
GetCommandLineW
MultiByteToWideChar
HeapAlloc
HeapSize
LCMapStringA
GetStdHandle
InterlockedExchange
SetEnvironmentVariableA
GetCurrentProcess
DeleteCriticalSection
SetFilePointer
FlushFileBuffers
GetModuleFileNameW
SetUnhandledExceptionFilter
CompareStringW
TlsFree
GetCommandLineA
GetTimeZoneInformation
HeapFree
LCMapStringW
GetTimeFormatA
GetStringTypeW
LoadLibraryW
CloseHandle
GetOEMCP
FreeEnvironmentStringsW
TlsAlloc
VirtualProtect
GetVersionExA
GetProcAddress
GetLastError
GetModuleHandleA
TerminateProcess
VirtualQuery
ExitProcess
HeapDestroy
GetDateFormatA
LoadLibraryA
GetTickCount
GetLocaleInfoA
GetSystemTimeAsFileTime
GetSystemInfo
SetHandleCount
GetCurrentThreadId
WideCharToMultiByte
InitializeCriticalSection
GetModuleFileNameA
IsBadCodePtr
GetFileType
LeaveCriticalSection
SetStdHandle
GetModuleHandleW
QueryPerformanceCounter
VirtualAlloc
HeapReAlloc
HeapCreate
comctl32
ImageList_ReplaceIcon
ImageList_Create
CreatePropertySheetPageA
ImageList_DragMove
ImageList_EndDrag
ImageList_GetIcon
ord17
ImageList_DragEnter
ImageList_Remove
ImageList_GetIconSize
ImageList_AddMasked
ImageList_Destroy
ImageList_DrawEx
_TrackMouseEvent
ImageList_GetImageInfo
InitCommonControlsEx
ImageList_Draw
ImageList_GetImageCount
gdi32
CreateRectRgn
GetObjectW
SetViewportOrgEx
SetPixel
RoundRect
BitBlt
SetBkMode
SetROP2
ExtTextOutW
CreatePatternBrush
GdiFlush
SetDIBits
GetViewportExtEx
PtInRegion
CreatePen
OffsetViewportOrgEx
CreateFontIndirectW
CombineRgn
CreateRectRgnIndirect
MoveToEx
DeleteDC
SetBkColor
SetPolyFillMode
DeleteObject
CreateCompatibleBitmap
PtVisible
Arc
CreateDCW
ScaleViewportExtEx
CreateBitmap
SetViewportExtEx
SetStretchBltMode
GetTextExtentPoint32W
SetAbortProc
GetTextMetricsW
GetClipBox
GetStockObject
SetTextAlign
GetPixel
SelectPalette
GetDeviceCaps
Polyline
ExtCreatePen
GetMapMode
RectVisible
GetBkMode
StartPage
IntersectClipRect
StretchDIBits
EndDoc
GetWindowExtEx
SelectObject
CreatePalette
CreateDIBSection
SetMapMode
GetRgnBox
Polygon
ScaleWindowExtEx
SetBrushOrgEx
EndPage
ExcludeClipRect
SetWindowOrgEx
Ellipse
PatBlt
Escape
SetWindowExtEx
SetTextColor
RealizePalette
SaveDC
GetPaletteEntries
LineTo
TextOutW
CreateEllipticRgn
CreatePolygonRgn
Rectangle
GetDIBits
AbortDoc
CreateBrushIndirect
RestoreDC
GetTextColor
SelectClipRgn
OffsetRgn
CreateCompatibleDC
CreateSolidBrush
StretchBlt
shell32
ord155
Shell_NotifyIconA
DragQueryFileA
SHGetSpecialFolderLocation
user32
ReleaseCapture
SetMenu
DrawEdge
OffsetRect
GetWindowPlacement
DispatchMessageW
EnableMenuItem
RegisterWindowMessageW
FrameRect
CopyAcceleratorTableW
CheckMenuItem
DrawIconEx
CreateDialogIndirectParamW
LoadBitmapW
CallNextHookEx
GetSubMenu
SetWindowLongW
KillTimer
GetClassNameW
GetMenuItemInfoW
MessageBoxW
LoadIconW
GetMessageW
CreatePopupMenu
SetPropW
GetDlgItem
GetWindowTextLengthW
RedrawWindow
SetMenuItemInfoW
ClientToScreen
EndDeferWindowPos
GetClientRect
UnregisterClassA
GetMenuItemID
GetForegroundWindow
DrawTextW
LoadMenuW
DrawMenuBar
GetCursorPos
MessageBeep
RemovePropW
GetCapture
PeekMessageW
CloseClipboard
DrawFrameControl
CreateWindowExW
IsWindowEnabled
SetActiveWindow
ModifyMenuW
GetSystemMenu
TrackPopupMenu
ReleaseDC
GetMenuItemCount
IntersectRect
SetTimer
SetCursor
LoadStringW
PtInRect
MoveWindow
EndPaint
RemoveMenu
PostQuitMessage
GetClassInfoExW
SetCapture
TranslateMessage
IsIconic
IsRectEmpty
GetWindowTextW
EmptyClipboard
DestroyCursor
UnregisterClassW
SetWindowTextW
DrawFocusRect
UnhookWindowsHookEx
LoadImageW
SetMenuDefaultItem
FillRect
RegisterClassExW
SetWindowPlacement
wsprintfW
SetMenuItemBitmaps
IsZoomed
SystemParametersInfoA
RegisterClassW
LoadCursorW
CallWindowProcW
SendMessageW
SetWindowPos
GetDC
GetWindowDC
SetWindowsHookExW
ShowWindow
GetMessagePos
IsWindowVisible
GetWindowRect
MapWindowPoints
GetWindowThreadProcessId
DestroyWindow
InflateRect
SetForegroundWindow
GetActiveWindow
GetDlgCtrlID
SetFocus
GetSysColorBrush
GetClassInfoW
GetAsyncKeyState
SetRectEmpty
GetSystemMetrics
GetKeyState
ScreenToClient
UpdateWindow
DefWindowProcW
InsertMenuW
GetNextDlgGroupItem
DestroyMenu
GetSysColor
GetPropW
BeginDeferWindowPos
IsChild
GetParent
WindowFromPoint
GetClassLongW
PostMessageW
DrawTextExW
WinHelpW
IsDialogMessageW
DestroyIcon
BeginPaint
GetWindowLongW
EnableWindow
SetRect
SetScrollInfo
Sections
.text Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 476KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ