Static task
static1
Behavioral task
behavioral1
Sample
7d052dfd1bf57d14f33d080377538dc30d770428452f8a3e1a7142193016de3e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7d052dfd1bf57d14f33d080377538dc30d770428452f8a3e1a7142193016de3e.exe
Resource
win10v2004-20220812-en
General
-
Target
7d052dfd1bf57d14f33d080377538dc30d770428452f8a3e1a7142193016de3e
-
Size
265KB
-
MD5
712d4086af35538cd27063a659f1e052
-
SHA1
32e2456545ad9fe4e36027f05f0de14546b6249d
-
SHA256
7d052dfd1bf57d14f33d080377538dc30d770428452f8a3e1a7142193016de3e
-
SHA512
13e307ea135600bd7595a4f3d54aff000e7300722c0dde912844e408076d8ab2f79e9f2060c0bc0ffd559b2a198be0253aeb19224b4a82724f19c8652c793a96
-
SSDEEP
3072:m8qqlVxbwfBJyh82igI6lJEpy9CHqiDE/jtFYG440qg6wJHlfbLrq:mZqlPcZ/I9CHS/jtFYQRWJHlf3G
Malware Config
Signatures
Files
-
7d052dfd1bf57d14f33d080377538dc30d770428452f8a3e1a7142193016de3e.exe windows x86
223d69a818c78a88e0f87d4e83c899a8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileExA
GetBinaryTypeA
FatalExit
FindVolumeMountPointClose
GetSystemTime
SetFileAttributesA
SetConsoleDisplayMode
GetGeoInfoW
GetConsoleCP
GetSystemDirectoryW
TlsGetValue
EndUpdateResourceW
CreateActCtxA
CancelTimerQueueTimer
CancelIo
VirtualUnlock
GetTimeZoneInformation
SetCriticalSectionSpinCount
PeekConsoleInputW
DebugBreak
ReleaseActCtx
DeviceIoControl
CheckNameLegalDOS8Dot3W
_lcreat
GetPrivateProfileSectionA
ReleaseSemaphore
GetAtomNameA
UnlockFileEx
VirtualLock
IsBadHugeReadPtr
FindAtomW
GlobalMemoryStatus
LockResource
SetCalendarInfoW
GlobalFix
CreateJobSet
EnumSystemLanguageGroupsW
VerSetConditionMask
EnumCalendarInfoExA
SetThreadLocale
PurgeComm
FreeEnvironmentStringsA
SetSystemTime
CreateWaitableTimerW
VerifyVersionInfoW
OpenThread
GetConsoleCursorInfo
GetSystemDirectoryA
EnumUILanguagesW
TzSpecificLocalTimeToSystemTime
_lread
MapUserPhysicalPages
GetSystemDefaultLCID
UnlockFile
GetGeoInfoA
CreateWaitableTimerA
GetCPInfo
ConvertFiberToThread
GetDllDirectoryW
SetLocaleInfoA
TerminateProcess
GetStartupInfoW
WriteFileEx
GetTimeFormatW
ScrollConsoleScreenBufferW
GetShortPathNameA
ConnectNamedPipe
LoadResource
GetNumberFormatA
SetComputerNameExW
GetLongPathNameW
SetFileShortNameW
GetProcessHeaps
GetDriveTypeA
MoveFileWithProgressA
SetEnvironmentVariableW
GetVolumePathNameA
GetSystemDefaultLangID
SetProcessShutdownParameters
GetConsoleSelectionInfo
DnsHostnameToComputerNameA
InitializeCriticalSectionAndSpinCount
GetThreadPriorityBoost
GlobalGetAtomNameW
GlobalUnlock
GetEnvironmentVariableA
OpenFileMappingW
GetStringTypeA
GetTempPathA
FindActCtxSectionGuid
GetCurrentProcessId
SetEndOfFile
FindNextFileW
OpenJobObjectA
TlsAlloc
GetCalendarInfoW
SystemTimeToTzSpecificLocalTime
WriteConsoleOutputW
GetProfileSectionW
SetVolumeMountPointW
CreateDirectoryW
ClearCommBreak
LocalCompact
SetupComm
FindFirstVolumeW
EnumUILanguagesA
DebugActiveProcess
WritePrivateProfileStructA
VirtualQuery
WriteConsoleOutputCharacterA
GlobalAlloc
SetLocaleInfoW
GetVersion
SetConsoleWindowInfo
GetVolumePathNameW
GetProfileSectionA
IsBadStringPtrA
FindNextChangeNotification
WriteTapemark
ReadConsoleA
EnumResourceNamesA
OpenFile
BackupSeek
QueryActCtxW
ReplaceFileW
GetPrivateProfileIntW
CheckNameLegalDOS8Dot3A
QueryDosDeviceW
BuildCommDCBA
WriteFileGather
ClearCommError
WriteConsoleInputA
_lopen
GetDateFormatW
CreateTimerQueue
WriteProfileSectionW
IsValidLanguageGroup
ReleaseMutex
GetLargestConsoleWindowSize
GetModuleHandleExW
WaitForMultipleObjectsEx
TerminateJobObject
AddConsoleAliasA
HeapAlloc
OutputDebugStringA
LocalUnlock
EnumResourceTypesW
GetConsoleAliasExesW
DeleteFiber
GetTapeStatus
CreateMemoryResourceNotification
GetThreadLocale
FindActCtxSectionStringA
IsDebuggerPresent
GlobalFindAtomA
HeapSize
GetProcessId
LockFileEx
GlobalGetAtomNameA
SetDllDirectoryW
SignalObjectAndWait
WriteConsoleOutputA
GlobalUnfix
SetFileTime
GlobalMemoryStatusEx
AddAtomW
GetVolumeNameForVolumeMountPointW
GetConsoleWindow
lstrcmpW
GetTickCount
GetTempPathW
AddAtomA
EnumSystemCodePagesW
CreateFileA
WTSGetActiveConsoleSessionId
SetProcessWorkingSetSize
GetPrivateProfileStringW
lstrcatA
SetConsoleScreenBufferSize
MoveFileExA
DosDateTimeToFileTime
lstrcpyW
GetModuleHandleW
CreateJobObjectW
GetFirmwareEnvironmentVariableA
GetProcessTimes
HeapValidate
LocalHandle
FindNextVolumeMountPointA
GlobalAddAtomA
TerminateThread
EnumDateFormatsExA
GetProfileIntW
WritePrivateProfileStringW
GetExitCodeProcess
ConvertThreadToFiber
GetSystemWow64DirectoryW
GetDllDirectoryA
AllocConsole
ReadConsoleW
ReadProcessMemory
ExpandEnvironmentStringsW
FreeLibrary
GetNamedPipeInfo
WriteConsoleW
GetProfileStringA
SetFileAttributesW
OpenJobObjectW
TransmitCommChar
VirtualQueryEx
MoveFileExW
CreateDirectoryExW
MultiByteToWideChar
CancelWaitableTimer
IsDBCSLeadByte
FindFirstFileW
GetPrivateProfileIntA
WriteProfileStringW
CallNamedPipeA
AssignProcessToJobObject
ExpandEnvironmentStringsA
SetTapeParameters
GetCompressedFileSizeA
CreateEventW
FindNextVolumeW
PeekNamedPipe
SetNamedPipeHandleState
MoveFileA
GetConsoleProcessList
ActivateActCtx
CreateHardLinkW
DecodeSystemPointer
QueryPerformanceCounter
GetProcessAffinityMask
BeginUpdateResourceW
SetConsoleCursorPosition
OpenWaitableTimerW
GetPrivateProfileSectionNamesW
GetDiskFreeSpaceExW
CreateFileMappingW
RtlCaptureStackBackTrace
GetCurrentProcess
BuildCommDCBW
GetNumaNodeProcessorMask
SetComputerNameExA
SetMailslotInfo
FindResourceExW
TlsFree
GetTimeFormatA
SwitchToFiber
GetConsoleAliasesA
GetOEMCP
GetLocaleInfoW
FillConsoleOutputAttribute
WriteConsoleOutputCharacterW
SetDllDirectoryA
SystemTimeToFileTime
WritePrivateProfileSectionW
SetCommTimeouts
TransactNamedPipe
EnumResourceTypesA
CreateSemaphoreW
EnumResourceLanguagesA
GetPrivateProfileSectionW
GlobalUnWire
CreateIoCompletionPort
SetConsoleTitleA
SetUnhandledExceptionFilter
DeleteTimerQueue
OpenEventA
GetProcessVersion
GetPrivateProfileStructW
GetCurrentConsoleFont
RegisterWaitForSingleObject
CreateProcessW
SetConsoleActiveScreenBuffer
DeleteAtom
QueryInformationJobObject
GetStringTypeExA
BuildCommDCBAndTimeoutsA
SearchPathA
GetModuleHandleA
LoadLibraryA
lstrcmpA
lstrlenA
lstrcmpiA
EnterCriticalSection
LeaveCriticalSection
lstrcpynA
DeleteCriticalSection
GetProcAddress
LoadLibraryW
HeapCreate
ExitProcess
GetLastError
HeapFree
GetCommandLineA
GetStartupInfoA
UnhandledExceptionFilter
VirtualFree
VirtualAlloc
HeapReAlloc
Sleep
WriteFile
GetStdHandle
GetModuleFileNameA
CloseHandle
ReadFile
SetHandleCount
GetFileType
SetFilePointer
RtlUnwind
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsSetValue
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetSystemTimeAsFileTime
SetStdHandle
GetConsoleMode
FlushFileBuffers
GetACP
IsValidCodePage
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
GetProcessHeap
LCMapStringA
LCMapStringW
GetStringTypeW
gdi32
AddFontResourceExA
PolyBezier
ExtSelectClipRgn
GetGlyphOutlineW
RemoveFontResourceA
CreateFontW
LPtoDP
GetTextExtentExPointI
ExtCreatePen
GetTextExtentExPointW
ArcTo
ExtEscape
Escape
GetObjectW
AddFontResourceW
GetGlyphIndicesW
GetEnhMetaFileBits
EnumFontFamiliesExA
SetDIBColorTable
ModifyWorldTransform
GetCharABCWidthsW
GetTextExtentPoint32A
StretchDIBits
RemoveFontResourceExA
SetDeviceGammaRamp
GetFontData
PtVisible
RealizePalette
SetBrushOrgEx
GetBitmapBits
CreateBrushIndirect
GetDeviceGammaRamp
LineTo
FillPath
CreateColorSpaceW
GetStockObject
GetCharABCWidthsFloatW
GdiSetBatchLimit
CheckColorsInGamut
GetWindowOrgEx
CloseEnhMetaFile
SetTextColor
Chord
EnumICMProfilesA
GetMetaFileBitsEx
AbortPath
CreateHatchBrush
PolyTextOutW
AddFontResourceA
SetTextAlign
CombineRgn
CopyEnhMetaFileW
SetViewportExtEx
CreatePenIndirect
GetCharWidth32A
PolyPolygon
comdlg32
GetOpenFileNameW
ChooseFontW
ReplaceTextW
ChooseColorA
PageSetupDlgA
GetSaveFileNameA
GetFileTitleW
GetOpenFileNameA
FindTextA
PrintDlgW
imm32
ImmGetIMEFileNameW
ImmSetCompositionFontA
ImmSetCompositionFontW
iphlpapi
GetNumberOfInterfaces
GetRTTAndHopCount
GetPerAdapterInfo
GetIcmpStatistics
GetExtendedTcpTable
GetAdapterOrderMap
GetTcpStatistics
GetNetworkParams
NotifyAddrChange
SetIpForwardEntry
GetUdpStatisticsEx
DeleteProxyArpEntry
GetBestInterfaceEx
GetUdpTable
SetIfEntry
DeleteIPAddress
CreateIpForwardEntry
GetTcpStatisticsEx
SendARP
SetIpNetEntry
GetIpStatisticsEx
GetBestRoute
GetIfTable
DeleteIpNetEntry
IpReleaseAddress
GetIfEntry
GetIpErrorString
UnenableRouter
DeleteIpForwardEntry
RestoreMediaSense
GetIpStatistics
GetFriendlyIfIndex
IpRenewAddress
AddIPAddress
GetIcmpStatisticsEx
SetTcpEntry
GetExtendedUdpTable
SetIpStatistics
msimg32
AlphaBlend
GradientFill
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 191KB - Virtual size: 197KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE