Static task
static1
Behavioral task
behavioral1
Sample
871af1167d5438710b3f7bae70f4cd8d62dfd576bff7fbecd267b3f4f228ef41.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
871af1167d5438710b3f7bae70f4cd8d62dfd576bff7fbecd267b3f4f228ef41.exe
Resource
win10v2004-20220812-en
General
-
Target
871af1167d5438710b3f7bae70f4cd8d62dfd576bff7fbecd267b3f4f228ef41
-
Size
139KB
-
MD5
6c25548015c9210cdb87aedc53a00bd0
-
SHA1
95ea256bfc82ce80fbf9c67a73468f9b2597d818
-
SHA256
871af1167d5438710b3f7bae70f4cd8d62dfd576bff7fbecd267b3f4f228ef41
-
SHA512
766cb3b8998c8a43b00d4737d34cf7dbebec6ce20252e3ccc290604a5f97b3ad8f6e8b1db637857b9a7e73095f5f11ca407bfd7bc8a296a55fca7286c0ffa83f
-
SSDEEP
3072:NF6Bju1R/R7THsl3dyLwLizG9rngMQNzNF6:c+xMl3dyLBr
Malware Config
Signatures
Files
-
871af1167d5438710b3f7bae70f4cd8d62dfd576bff7fbecd267b3f4f228ef41.exe windows x86
82179978e2095f470b0bbf6acac0f2d3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msi
ord151
gdi32
GetStretchBltMode
SelectObject
SetROP2
LPtoDP
GetWindowExtEx
IntersectClipRect
SelectClipRgn
CreateHalftonePalette
SetWindowOrgEx
Rectangle
PatBlt
CreateFontW
PolylineTo
SetMapMode
GetPaletteEntries
CreateDIBSection
GetDIBits
SetStretchBltMode
DPtoLP
DeleteObject
RoundRect
SetPixelV
SetWindowExtEx
SetViewportExtEx
DeleteDC
GetMapMode
UnrealizeObject
PolyPolyline
CreateDIBitmap
CreatePolygonRgn
SaveDC
RectVisible
Escape
ExtSelectClipRgn
CreateCompatibleBitmap
SetTextColor
ScaleViewportExtEx
CreateDCA
Polyline
GetObjectW
EndPage
GetClipBox
MoveToEx
SetBrushOrgEx
shlwapi
PathGetCharTypeA
kernel32
LocalAlloc
CompareStringW
CompareStringA
GetTimeZoneInformation
GetCommandLineA
IsDebuggerPresent
GetVersionExA
GetEnvironmentStrings
GetModuleHandleW
lstrcmpA
VirtualAlloc
GetProcessVersion
lstrlenA
GetFileAttributesA
GetStartupInfoW
DeleteFileW
GetSystemInfo
GetStartupInfoA
LoadLibraryExW
EnterCriticalSection
CreateFileA
DeleteCriticalSection
SetLastError
LoadResource
SizeofResource
lstrlenW
HeapSize
CreateEventW
WideCharToMultiByte
FreeLibrary
CreateEventA
GetFileAttributesW
ReadFile
WriteFile
LoadLibraryA
SetHandleCount
SetEnvironmentVariableA
GetEnvironmentStringsW
WaitForSingleObject
GetExitCodeProcess
SetFilePointerEx
HeapCreate
FindFirstFileW
SetFilePointer
LCMapStringW
GetCommandLineW
GetOEMCP
FreeLibraryAndExitThread
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
GetStringTypeW
HeapAlloc
ExitProcess
GetLocaleInfoA
LoadLibraryW
GetModuleFileNameA
WaitForSingleObjectEx
FreeEnvironmentStringsW
FindNextFileW
GetModuleHandleA
FindClose
HeapDestroy
GetVersionExW
LocalFree
SetEndOfFile
TlsFree
SetErrorMode
SetStdHandle
TryEnterCriticalSection
MultiByteToWideChar
FormatMessageW
HeapFree
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcAddress
GetStdHandle
FreeEnvironmentStringsA
GetLastError
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
SetConsoleCtrlHandler
InterlockedExchange
InitializeCriticalSection
GetCPInfo
GetACP
Sleep
HeapReAlloc
RtlUnwind
GetLocaleInfoW
LCMapStringA
GetStringTypeA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
Sections
.text Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 17B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ