Static task
static1
Behavioral task
behavioral1
Sample
cd643c5b51fe72f8d3aa64b734cf0d84e5e9b96efe85a9cb9ef95679f61e7e0e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd643c5b51fe72f8d3aa64b734cf0d84e5e9b96efe85a9cb9ef95679f61e7e0e.exe
Resource
win10v2004-20220901-en
General
-
Target
cd643c5b51fe72f8d3aa64b734cf0d84e5e9b96efe85a9cb9ef95679f61e7e0e
-
Size
280KB
-
MD5
63af2a630c886906b4bf73b408957760
-
SHA1
457f7a73d2529528217ed78dd01e410e65c79591
-
SHA256
cd643c5b51fe72f8d3aa64b734cf0d84e5e9b96efe85a9cb9ef95679f61e7e0e
-
SHA512
3d113565170ae811d00040dd9efd28e08478b66cfe2a7855d337fc6870197a5bc54055b615296d7fd93cee009737bb726a55d464f430a74845672b9fc81e999f
-
SSDEEP
6144:nw+Pojc5alEMUXKzucnpZm5JLx7aOz5E7Y0:hPo44lEMUmucpZKRAOlh0
Malware Config
Signatures
Files
-
cd643c5b51fe72f8d3aa64b734cf0d84e5e9b96efe85a9cb9ef95679f61e7e0e.exe windows x86
71d65c87f6cd758dce8525cd8a158996
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
AppendMenuW
DragDetect
GetCapture
CreateDialogIndirectParamW
RegisterClassExW
ReleaseCapture
FindWindowW
CreateAcceleratorTableW
RegisterWindowMessageW
SetWindowLongA
CreateWindowStationA
CharNextW
CallMsgFilterA
VkKeyScanExW
GetAltTabInfoA
SetWindowContextHelpId
ShowCursor
IsWindow
DestroyCursor
CreateCursor
ScrollWindow
SetScrollInfo
InsertMenuItemW
LoadStringW
SetMenuItemInfoW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageA
GetMessageW
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetMonitorInfoW
SetForegroundWindow
SetWindowPlacement
CheckMenuRadioItem
EnableMenuItem
CheckMenuItem
DestroyAcceleratorTable
GetSubMenu
GetMenuItemID
ModifyMenuW
DialogBoxIndirectParamW
DialogBoxParamW
RemoveMenu
LoadIconW
DestroyIcon
mouse_event
GetDesktopWindow
GetDCEx
WindowFromPoint
PtInRect
LockWindowUpdate
SetDlgItemInt
MapWindowPoints
GetKeyState
TrackPopupMenu
GetWindowTextW
MessageBoxA
SetCapture
GetActiveWindow
IsChild
GetDlgCtrlID
RedrawWindow
GetCursorPos
SetWindowsHookExW
UnhookWindowsHookEx
SetParent
SetWindowTextW
LoadBitmapW
CallNextHookEx
CreatePopupMenu
CreateMenu
InsertMenuW
DestroyMenu
CallWindowProcA
CharUpperW
CharLowerW
DrawIcon
EndDialog
ScreenToClient
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
CreateDialogParamW
DrawFocusRect
FillRect
FrameRect
SetWindowLongW
GetWindowLongW
GetSysColor
GetClassNameW
PostQuitMessage
LoadMenuW
InflateRect
ClientToScreen
CallWindowProcW
IsWindowVisible
GetWindowRect
ShowWindow
SetWindowPos
SetClipboardViewer
ChangeClipboardChain
SendDlgItemMessageW
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
RegisterClipboardFormatW
CloseClipboard
MessageBoxW
RegisterClassW
BeginPaint
EndPaint
GetFocus
PostMessageW
LoadCursorW
SetCursor
DestroyWindow
CreateCaret
DestroyCaret
GetSystemMetrics
GetWindowPlacement
CreateWindowExW
GetScrollPos
GetScrollRange
UpdateWindow
DefWindowProcW
DrawFrameControl
GetMenu
ShowCaret
MessageBeep
DrawTextW
SetCaretPos
HideCaret
GetParent
ShowScrollBar
SetScrollRange
InvalidateRect
SetScrollPos
GetKeyboardState
ToAscii
wsprintfW
GetDC
DrawEdge
DrawTextExW
ReleaseDC
GetClientRect
MoveWindow
SetFocus
LoadImageW
DrawIconEx
GetDlgItem
SendMessageW
EnableWindow
SystemParametersInfoW
SetMenu
IsDialogMessageW
IsDialogMessageA
PeekMessageW
IsZoomed
DeleteMenu
RealChildWindowFromPoint
IsIconic
DrawMenuBar
GetMenuItemCount
GetMenuStringW
EmptyClipboard
SetClipboardData
GetMenuState
IsWindowUnicode
MonitorFromWindow
kernel32
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSectionAndSpinCount
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
MoveFileA
GetCommProperties
GetExitCodeThread
IsBadStringPtrW
OpenJobObjectA
ReleaseSemaphore
GlobalAlloc
Sleep
ReleaseMutex
WaitForSingleObject
CreateDirectoryW
GlobalSize
CreateThread
CreateMutexW
FindClose
FindNextFileW
FindFirstFileW
TerminateThread
CopyFileW
lstrcpynW
GetSystemInfo
GetVersionExW
ExpandEnvironmentStringsW
GetTimeFormatW
GetDateFormatW
GetLocalTime
MulDiv
GetACP
SizeofResource
LockResource
LoadResource
FindResourceW
LocalLock
LocalAlloc
GetTempPathW
SetLastError
GetCommandLineW
VirtualFree
HeapCreate
HeapDestroy
LoadLibraryA
LocalUnlock
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetModuleFileNameA
WriteFile
GetDateFormatA
GetTimeFormatA
GetCurrentDirectoryA
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStringTypeW
GetStringTypeA
GetCPInfo
LCMapStringW
LCMapStringA
GetStartupInfoA
GetProcessHeap
HeapAlloc
GetVersionExA
GetCommandLineA
HeapFree
ExitProcess
GetModuleHandleA
GetSystemTimeAsFileTime
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
ReadFile
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
RtlUnwind
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalFree
LoadLibraryW
GetProcAddress
CreateFileW
GetCurrentProcessId
GetCurrentProcess
CloseHandle
GlobalFree
FreeLibrary
GetCurrentDirectoryW
SetCurrentDirectoryW
GetModuleHandleW
GetCurrentThreadId
GetLastError
GlobalLock
GlobalUnlock
GetFileAttributesW
SetFileAttributesW
MoveFileW
GetFullPathNameW
GetLongPathNameW
lstrcmpiW
DeleteFileW
lstrcpyW
lstrlenW
GetModuleFileNameW
lstrcatW
lstrcmpW
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
HeapReAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEndOfFile
GetDriveTypeA
CompareStringA
CompareStringW
HeapSize
IsProcessorFeaturePresent
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BSS Size: 6KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ