Static task
static1
Behavioral task
behavioral1
Sample
9119d27278482c821e678a23ee441d180370cdaa9e94ecfff3ee60fed868ffc8.exe
Resource
win7-20220812-en
General
-
Target
9119d27278482c821e678a23ee441d180370cdaa9e94ecfff3ee60fed868ffc8
-
Size
786KB
-
MD5
054267b256c2cfdffe332832188dac70
-
SHA1
22cbf8f49db96c04246071d9e811ee680469e19c
-
SHA256
9119d27278482c821e678a23ee441d180370cdaa9e94ecfff3ee60fed868ffc8
-
SHA512
2ad6d3526efcfb14407b848906ffe28b8a8a569c72795c97adf3cc1a2e6d9774f6af989cbd9392064d149539482c51ce592afe1986b9a811cca1ae72bc0bc11b
-
SSDEEP
6144:EBQgqTudbAZeNa5JXZ//0RQlTFQ8Ff2BzemM1EZ0wGHvItfxX7puI:EBQgqiSJJERQl5vd2BzFM1EKwGPI8I
Malware Config
Signatures
Files
-
9119d27278482c821e678a23ee441d180370cdaa9e94ecfff3ee60fed868ffc8.exe windows x86
5e3fe29593db58688211b0f45fc0a8fd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchangeAdd
InterlockedDecrement
GetModuleHandleW
DeviceIoControl
GetVersionExA
LockResource
LoadResource
SizeofResource
FindResourceA
MultiByteToWideChar
GetFileSize
SetFileAttributesA
GetFileAttributesA
GetCurrentProcessId
ExitProcess
ReleaseMutex
CreateMutexA
WritePrivateProfileStringA
SetUnhandledExceptionFilter
ResumeThread
FindClose
FindNextFileA
FindFirstFileA
SetProcessWorkingSetSize
HeapFree
FreeLibrary
GetWindowsDirectoryA
GetProcessHeap
HeapAlloc
VirtualFreeEx
Module32Next
Module32First
ReadProcessMemory
GetVersion
GetCommandLineA
GetExitCodeThread
WaitForSingleObject
CreateRemoteThread
IsBadReadPtr
CreateProcessA
DeleteFileA
TerminateProcess
CreateFileA
GetModuleFileNameA
GetCurrentThreadId
WideCharToMultiByte
lstrlenW
GetModuleHandleA
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetCurrentProcess
FlushInstructionCache
FormatMessageA
GlobalAlloc
GlobalFree
LocalFree
Sleep
GetTickCount
CreateThread
CloseHandle
OpenProcess
Thread32Next
Thread32First
Process32Next
Process32First
CreateToolhelp32Snapshot
GetLastError
GetProcAddress
LoadLibraryA
WriteProcessMemory
VirtualAllocEx
UnmapViewOfFile
GetSystemDirectoryA
CreateFileMappingA
MapViewOfFile
lstrcmpW
SetLastError
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrlenA
GlobalUnlock
GlobalLock
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
lstrcmpA
GlobalFlags
InterlockedIncrement
GetLocaleInfoA
GetCPInfo
GetOEMCP
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetStartupInfoA
RtlUnwind
RaiseException
VirtualAlloc
HeapReAlloc
HeapSize
GetACP
IsValidCodePage
VirtualFree
HeapCreate
GetStdHandle
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
user32
IsWindowEnabled
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
GetDC
ReleaseDC
DestroyMenu
ValidateRect
GetSysColorBrush
GetWindow
GetWindowPlacement
IsIconic
SystemParametersInfoA
GetLastActivePopup
GetForegroundWindow
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
SetWindowsHookExA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetKeyState
GetMenu
CallWindowProcA
GetDlgCtrlID
CopyRect
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
GetClientRect
SetFocus
SetWindowTextA
RegisterHotKey
PostQuitMessage
EnableWindow
PostThreadMessageA
UpdateWindow
CreateWindowExA
DefWindowProcA
GetSubMenu
TrackPopupMenu
PostMessageA
EndPaint
BeginPaint
EndMenu
IsWindowVisible
GetSystemMetrics
WindowFromPoint
GetCursorPos
LoadMenuA
SetTimer
GetWindowLongA
SetWindowLongA
GetWindowTextA
ScreenToClient
DispatchMessageA
TranslateMessage
PeekMessageA
PtInRect
RegisterClassExA
LoadCursorA
SendMessageW
SendMessageA
FindWindowA
ShowWindow
FindWindowExA
SetWindowPos
AdjustWindowRectEx
GetWindowRect
IsWindow
GetParent
EnumChildWindows
GetClassNameA
GetWindowThreadProcessId
EnumWindows
RemovePropA
GetFocus
GetWindowTextLengthA
GetMessagePos
GetSysColor
RegisterClassA
GetClassInfoA
GetClassInfoExA
MessageBoxA
GetMenuItemCount
GetMenuItemID
SetForegroundWindow
SetMenu
MapWindowPoints
gdi32
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
DeleteObject
SetMapMode
CreateFontIndirectA
GetObjectA
DeleteDC
GetDeviceCaps
CreateDCA
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
advapi32
RegSetValueExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueA
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
CloseServiceHandle
RegEnumKeyA
RegCreateKeyExA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetSpecialFolderPathA
ole32
OleInitialize
CoCreateInstance
OleUninitialize
CoInitialize
CoUninitialize
StgCreateDocfile
OleCreate
oleaut32
VariantChangeType
VariantInit
SysAllocString
SysFreeString
VariantClear
SafeArrayCreate
SafeArrayAccessData
SafeArrayDestroy
shlwapi
StrStrIW
StrStrW
StrStrIA
psapi
GetModuleFileNameExA
GetProcessImageFileNameA
GetModuleInformation
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
dbghelp
MiniDumpWriteDump
wininet
FindNextUrlCacheEntryA
DeleteUrlCacheEntry
FindFirstUrlCacheEntryA
oleacc
LresultFromObject
CreateStdAccessibleObject
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
Sections
.text Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 510KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ