Static task
static1
Behavioral task
behavioral1
Sample
339e22b898d197f200cca123464ed2ca8878eb2cadee488a70335a644c30af68.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
339e22b898d197f200cca123464ed2ca8878eb2cadee488a70335a644c30af68.exe
Resource
win10v2004-20220812-en
General
-
Target
339e22b898d197f200cca123464ed2ca8878eb2cadee488a70335a644c30af68
-
Size
365KB
-
MD5
7bd847420bc43f3dc639cf208c97c930
-
SHA1
f10258c7ddeec14601bb19ffef377ab6f1d02076
-
SHA256
339e22b898d197f200cca123464ed2ca8878eb2cadee488a70335a644c30af68
-
SHA512
ea17d91cfaacbf9e9d80e4bf0eff717373b10d90dc05dd5965675f7d840584ce0b4c5ba4a1c2b3bee899b92ee92c4cec84f333ff7ed75d7823cedd25d6955b6c
-
SSDEEP
1536:/sfwck8EoS4E0uxHZgeVA85SysuNc7ETRPk0e1xrQzGkcgQ1YryQuj5ue9:iuYS4ggeJWu27Edcr1NkGkcgrryQuj3
Malware Config
Signatures
Files
-
339e22b898d197f200cca123464ed2ca8878eb2cadee488a70335a644c30af68.exe windows x86
0207edd99223d410a909493e319b3a76
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
LineTo
GetObjectW
CreateSolidBrush
CreateBitmap
GetTextMetricsW
ExtTextOutW
CreateBitmap
GetStockObject
GetTextMetricsW
CreateBitmap
DeleteObject
GetTextExtentPoint32W
StretchBlt
TextOutW
ExtTextOutW
GetStockObject
StretchBlt
ExtTextOutW
StretchBlt
StretchBlt
GetTextExtentPoint32W
CreateBitmap
StretchBlt
GetTextExtentPoint32W
DeleteDC
DeleteObject
CreateBitmap
CreateFontIndirectW
CreateFontIndirectW
TextOutW
TextOutW
GetTextMetricsW
BitBlt
PatBlt
CreateSolidBrush
GetObjectW
DeleteObject
DeleteDC
GetTextExtentPoint32W
DeleteObject
PatBlt
GetDeviceCaps
BitBlt
GetObjectW
CreateSolidBrush
LineTo
CreateFontIndirectW
GetTextMetricsW
MoveToEx
GetDeviceCaps
LineTo
StretchBlt
DeleteDC
PatBlt
GetTextMetricsW
GetTextMetricsW
ExtTextOutW
DeleteDC
GetTextMetricsW
ExtTextOutW
DeleteObject
LineTo
LineTo
PatBlt
CreateSolidBrush
ExtTextOutW
MoveToEx
LineTo
CreateSolidBrush
MoveToEx
PatBlt
LineTo
GetTextExtentPoint32W
CreateCompatibleBitmap
ExtTextOutW
BitBlt
PatBlt
CreateSolidBrush
GetTextMetricsW
CreateSolidBrush
LineTo
CreateFontIndirectW
GetTextExtentPoint32W
GetStockObject
PatBlt
GetTextMetricsW
LineTo
ExtTextOutW
DeleteDC
GetObjectW
PatBlt
CreateBitmap
CreateFontIndirectW
PatBlt
DeleteDC
CreateBitmap
TextOutW
BitBlt
GetTextMetricsW
TextOutW
CreateSolidBrush
GetStockObject
GetObjectW
GetTextExtentPoint32W
MoveToEx
GetTextExtentPoint32W
BitBlt
CreateSolidBrush
GetObjectW
GetDeviceCaps
GetObjectW
MoveToEx
CreateCompatibleBitmap
TextOutW
CreateSolidBrush
CreateCompatibleDC
CreateFontIndirectW
GetDeviceCaps
GetObjectW
TextOutW
CreateBitmap
CreateBitmap
ExtTextOutW
GetStockObject
GetTextExtentPoint32W
GetTextExtentPoint32W
GetDeviceCaps
BitBlt
TextOutW
TextOutW
MoveToEx
StretchBlt
GetTextExtentPoint32W
CreateCompatibleDC
PatBlt
StretchBlt
CreateCompatibleDC
CreateBitmap
CreateFontIndirectW
MoveToEx
PatBlt
MoveToEx
CreateCompatibleDC
GetObjectW
LineTo
PatBlt
DeleteDC
DeleteObject
MoveToEx
GetTextExtentPoint32W
GetTextMetricsW
ExtTextOutW
GetStockObject
CreateSolidBrush
GetTextExtentPoint32W
CreateFontIndirectW
PatBlt
LineTo
GetTextMetricsW
GetDeviceCaps
GetObjectW
CreateFontIndirectW
GetStockObject
CreateSolidBrush
CreateCompatibleBitmap
LineTo
CreateCompatibleDC
StretchBlt
CreateCompatibleBitmap
CreateFontIndirectW
DeleteObject
CreateCompatibleDC
DeleteObject
GetStockObject
CreateFontIndirectW
StretchBlt
CreateSolidBrush
CreateSolidBrush
GetStockObject
CreateSolidBrush
CreateCompatibleBitmap
ExtTextOutW
MoveToEx
LineTo
BitBlt
CreateFontIndirectW
CreateSolidBrush
TextOutW
CreateCompatibleBitmap
DeleteDC
DeleteObject
LineTo
CreateCompatibleBitmap
StretchBlt
MoveToEx
CreateCompatibleDC
BitBlt
DeleteDC
CreateCompatibleBitmap
DeleteObject
PatBlt
DeleteObject
GetObjectW
GetStockObject
TextOutW
GetStockObject
ExtTextOutW
MoveToEx
GetDeviceCaps
TextOutW
GetStockObject
MoveToEx
DeleteObject
TextOutW
CreateSolidBrush
LineTo
StretchBlt
DeleteObject
GetTextExtentPoint32W
CreateBitmap
GetObjectW
MoveToEx
PatBlt
DeleteObject
BitBlt
GetTextMetricsW
BitBlt
CreateCompatibleBitmap
GetTextExtentPoint32W
DeleteDC
StretchBlt
CreateCompatibleDC
GetStockObject
MoveToEx
BitBlt
CreateCompatibleBitmap
user32
SetWindowTextA
FindWindowA
PackDDElParam
LoadStringA
GetParent
AdjustWindowRect
SendMessageCallbackW
UnhookWindowsHookEx
CheckDlgButton
TranslateAcceleratorA
GetMessageW
IsZoomed
GetMessageW
GetSystemMetrics
LoadStringA
SendMessageW
CheckDlgButton
TranslateAcceleratorA
GetClientRect
CheckDlgButton
IsIconic
GetMessageW
LoadIconA
GetParent
GetKeyboardType
FindWindowA
IsZoomed
GetTitleBarInfo
GetMessagePos
TranslateAcceleratorA
LoadIconA
GetClientRect
SetWindowTextA
GetTopWindow
WINNLSEnableIME
LoadIconA
GetMessagePos
IsDlgButtonChecked
AdjustWindowRect
TranslateAcceleratorA
PtInRect
LoadStringA
CheckDlgButton
IsZoomed
LoadStringA
IsWindowEnabled
CheckDlgButton
WINNLSEnableIME
FindWindowA
GetMessagePos
CheckDlgButton
kernel32
UnlockFileEx
GetWindowsDirectoryW
EnumSystemCodePagesW
QueryPerformanceCounter
IsBadReadPtr
IsProcessorFeaturePresent
WriteProfileStringA
IsProcessorFeaturePresent
QueryPerformanceCounter
GetLastError
QueryPerformanceCounter
Process32Next
SetDefaultCommConfigA
GetTapeStatus
GlobalMemoryStatus
IsBadReadPtr
QueryPerformanceCounter
RemoveDirectoryA
GetLastError
RemoveDirectoryA
GetWindowsDirectoryW
RaiseException
RemoveDirectoryA
GetWindowsDirectoryW
WriteProfileStringA
_lclose
RaiseException
GlobalFree
GlobalFree
InitAtomTable
GlobalMemoryStatus
QueryPerformanceCounter
RemoveDirectoryA
SetDefaultCommConfigA
QueryPerformanceCounter
WriteProfileStringA
IsProcessorFeaturePresent
FatalAppExitA
GlobalMemoryStatus
ReadConsoleOutputCharacterA
QueryPerformanceCounter
RemoveDirectoryA
WriteProfileStringA
ReadConsoleOutputCharacterA
CreateHardLinkW
WriteProfileStringA
QueryPerformanceCounter
WriteProfileStringA
GlobalMemoryStatus
QueryPerformanceCounter
GlobalFree
UnlockFileEx
ReadConsoleOutputCharacterA
QueryPerformanceCounter
RemoveDirectoryA
_lclose
QueryPerformanceCounter
WriteProfileStringA
WriteProfileStringA
Beep
Sections
.text Size: 212KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE