Static task
static1
Behavioral task
behavioral1
Sample
14d85d8e8de288376804a1a4233f1eb7f3904d831a778314abada1fcada19551.exe
Resource
win7-20220901-en
General
-
Target
14d85d8e8de288376804a1a4233f1eb7f3904d831a778314abada1fcada19551
-
Size
323KB
-
MD5
7b099cab638b84055260489bf4d14921
-
SHA1
ea0c29eb256a29e771466ddb58437ca34889298e
-
SHA256
14d85d8e8de288376804a1a4233f1eb7f3904d831a778314abada1fcada19551
-
SHA512
5f39329487a04bb6cd0bb0d3363287af555d9ad060d9c144214b8c52e6add8c641a4f1b5328aba9f734009ecd4f78ee3f31fdd979b9ee8fd89051b7c384b921a
-
SSDEEP
6144:n7kAXjy0yySvDUV6oGEp/9oJ59k+9pZ9ZpagRWM:7UvDUV6oGEp/9oJDky3TWM
Malware Config
Signatures
Files
-
14d85d8e8de288376804a1a4233f1eb7f3904d831a778314abada1fcada19551.exe windows x86
e057bd78452205f4b72a834dba0d5b6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
lstrcmpA
lstrlenA
lstrcmpW
GlobalFlags
GlobalAddAtomW
GlobalReAlloc
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
CreateFileW
GlobalDeleteAtom
GetVersionExA
LoadLibraryA
GlobalFindAtomW
GetModuleHandleA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
HeapReAlloc
HeapSize
ExitProcess
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
VirtualAlloc
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CreateFileA
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
InterlockedDecrement
InterlockedIncrement
GetModuleHandleW
WideCharToMultiByte
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
GetLocalTime
GetDiskFreeSpaceExW
GetDriveTypeW
GetLogicalDrives
CopyFileW
MultiByteToWideChar
CreateThread
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentProcess
LoadLibraryW
FreeLibrary
GetProcAddress
CloseHandle
FindClose
FindNextFileW
FindFirstFileW
LockResource
DeleteFileW
CreateMutexW
GetVersionExW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
Sleep
SizeofResource
LoadResource
FindResourceW
WaitForSingleObject
TerminateThread
GetExitCodeThread
GetCurrentThreadId
GetLastError
GetModuleFileNameW
user32
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
DestroyMenu
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CopyRect
DefWindowProcW
CallWindowProcW
GetMenu
SystemParametersInfoA
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
RegisterWindowMessageW
PostQuitMessage
SetForegroundWindow
IsIconic
SetWindowPos
SetWindowLongW
IsWindow
GetDlgItem
SetWindowsHookExW
CallNextHookEx
GetKeyState
ValidateRect
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
GetWindowTextW
GetWindowThreadProcessId
SendMessageW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
PostThreadMessageW
DispatchMessageW
PeekMessageW
UnhookWindowsHookEx
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetMenuState
GetMenuItemID
LoadIconW
WinHelpW
OpenWindowStationW
GetProcessWindowStation
SetProcessWindowStation
OpenDesktopW
CloseDesktop
wsprintfW
FindWindowW
PostMessageW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetMenuItemCount
GetSubMenu
CheckMenuItem
GetTopWindow
advapi32
DeregisterEventSource
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
CreateProcessAsUserW
StartServiceW
ReportEventW
RegisterEventSourceW
DeleteService
ControlService
CreateServiceW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegisterServiceCtrlHandlerW
SetServiceStatus
StartServiceCtrlDispatcherW
shell32
ShellExecuteW
ole32
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
VariantClear
VariantChangeType
SysFreeString
SysAllocString
VariantInit
shlwapi
PathFileExistsW
PathRemoveFileSpecW
oleacc
LresultFromObject
CreateStdAccessibleObject
gdi32
SetBkColor
SaveDC
RestoreDC
CreateBitmap
DeleteObject
GetStockObject
SetViewportOrgEx
SetTextColor
DeleteDC
SetMapMode
PtVisible
RectVisible
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
GetDeviceCaps
SelectObject
Escape
ExtTextOutW
TextOutW
OffsetViewportOrgEx
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
Sections
.text Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE