Static task
static1
Behavioral task
behavioral1
Sample
921cbee46e303c9205541fdd2464ea4f35fd698335a90e1f62c3aba811facd6b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
921cbee46e303c9205541fdd2464ea4f35fd698335a90e1f62c3aba811facd6b.exe
Resource
win10v2004-20220812-en
General
-
Target
921cbee46e303c9205541fdd2464ea4f35fd698335a90e1f62c3aba811facd6b
-
Size
8.3MB
-
MD5
0786fad03ffa76b446d225681288f21c
-
SHA1
05bb3e74d6b4c1ee26c8eb80aa025c590253dc76
-
SHA256
921cbee46e303c9205541fdd2464ea4f35fd698335a90e1f62c3aba811facd6b
-
SHA512
f256e3394b7849bc58c2ec54649f27d88bd6c74544435fb9e91d995966799cbe7ff0daf6fbb92f7098c9c0bf2a7ca4b90e392b3f685422557ecac536fde4084e
-
SSDEEP
196608:o5HyWYTlAp3/AJ37EBdVAhOvOcHQZRhtIP58LCPmNYKoNEI:olYY3IJ3ThgOcHOXeFPmNWNEI
Malware Config
Signatures
Files
-
921cbee46e303c9205541fdd2464ea4f35fd698335a90e1f62c3aba811facd6b.exe windows x86
981a275bce22f656f306ebaaaa886c29
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
lstrcmpW
MulDiv
SetFilePointerEx
GetFileSizeEx
SetFileAttributesW
DeleteFileW
SetFileTime
SetEndOfFile
WriteFile
GetVersion
lstrlenW
GetFullPathNameW
lstrcatW
WaitForSingleObject
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventW
SetEvent
ResetEvent
lstrcpyW
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateHardLinkW
RemoveDirectoryW
CreateSymbolicLinkW
VirtualAlloc
VirtualFree
GetModuleFileNameW
GetFileAttributesW
GetCurrentThread
FileTimeToSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
Sleep
IsNormalizedString
NormalizeString
GlobalMemoryStatusEx
CompareStringW
CreateFileA
GetDriveTypeW
FlushFileBuffers
GetTickCount
FindClose
GlobalFree
LocalFree
WideCharToMultiByte
GetModuleHandleW
lstrcmpiW
RaiseException
InitializeCriticalSectionEx
SetLastError
GetCurrentThreadId
GetUserDefaultLangID
DecodePointer
GetConsoleOutputCP
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
SetStdHandle
GetConsoleMode
LCMapStringW
GetStdHandle
GetCommandLineW
GetCommandLineA
ExitProcess
GetFileType
GetModuleHandleExW
FreeLibraryAndExitThread
WriteConsoleW
ExitThread
CreateThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
IsProcessorFeaturePresent
GetLastError
GetProcAddress
CloseHandle
CreateFileW
lstrcpynW
ReadFile
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetSystemDirectoryW
FreeLibrary
LoadLibraryExW
LoadLibraryW
FlushInstructionCache
GetCurrentProcess
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
OutputDebugStringW
IsDebuggerPresent
user32
GetDlgItem
CreateWindowExW
GetWindowRect
SendMessageW
SystemParametersInfoW
ScreenToClient
SetFocus
EndDialog
KillTimer
EnableWindow
SetTimer
SetDlgItemTextW
PostMessageW
MessageBoxW
GetWindow
MonitorFromWindow
GetMonitorInfoW
GetClientRect
LoadIconW
GetWindowTextW
DialogBoxParamW
UnregisterClassW
GetActiveWindow
CharNextW
PeekMessageW
DispatchMessageW
TranslateMessage
RegisterWindowMessageW
MoveWindow
EnumChildWindows
SetWindowLongW
GetWindowLongW
FindWindowExW
GetClassNameW
MapWindowPoints
GetDlgCtrlID
GetParent
SetWindowPos
MonitorFromPoint
SetProcessDPIAware
ReleaseDC
GetDC
SetWindowTextW
InvalidateRect
GetWindowTextLengthW
gdi32
GetDeviceCaps
CreateFontIndirectW
GetObjectW
GetStockObject
DeleteObject
CreateFontW
advapi32
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
AreAllAccessesGranted
AccessCheck
OpenThreadToken
RevertToSelf
ImpersonateSelf
GetFileSecurityW
shell32
SHBrowseForFolderW
CommandLineToArgvW
SHGetPathFromIDListW
ole32
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
VarUI4FromStr
shlwapi
PathIsDirectoryW
PathCanonicalizeW
Sections
.text Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ