Static task
static1
Behavioral task
behavioral1
Sample
01bd3a0b4cb33cbe1c145c73b0e3b6a17f8302794312acb5cb755c5a445ac2e2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
01bd3a0b4cb33cbe1c145c73b0e3b6a17f8302794312acb5cb755c5a445ac2e2.exe
Resource
win10v2004-20220812-en
General
-
Target
01bd3a0b4cb33cbe1c145c73b0e3b6a17f8302794312acb5cb755c5a445ac2e2
-
Size
523KB
-
MD5
31aac87ec1ca866aecef7bef88abb090
-
SHA1
d0266e8f6c5a63ae544f5306e4d4f92c8bbcd848
-
SHA256
01bd3a0b4cb33cbe1c145c73b0e3b6a17f8302794312acb5cb755c5a445ac2e2
-
SHA512
c26abdd94ed85a49209a1938c0b0e7be78fa71bace6b8946da309c911d35a1f6b7dab714602c865f6dd75287f42c785d2239d58d5ccfe335e257763eef699276
-
SSDEEP
6144:pURZjqK1DLaYjr//RW19lNGGFYGGFyeUL:pMtqKNLaYjr/KlNGGCGG/G
Malware Config
Signatures
Files
-
01bd3a0b4cb33cbe1c145c73b0e3b6a17f8302794312acb5cb755c5a445ac2e2.exe windows x86
26b589cfdb216ea1e72ef542e2eb607d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_onexit
??3@YAXPAX@Z
swprintf
_wcsicmp
_purecall
wcscpy
qsort
_c_exit
_exit
_iob
fwrite
strtol
_wtoi
_itow
_ftol
memmove
_snwprintf
wcsncpy
wcscmp
wcslen
_controlfp
atoi
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
advapi32
RegOpenKeyExA
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenThreadToken
OpenProcessToken
ConvertSidToStringSidW
RegLoadKeyW
RegUnLoadKeyW
GetUserNameW
RegQueryValueExA
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
LookupAccountNameW
GetSidSubAuthorityCount
GetSidSubAuthority
kernel32
GetModuleHandleA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadLibraryA
InterlockedCompareExchange
DeleteAtom
AddAtomW
lstrcatW
TlsGetValue
HeapFree
HeapReAlloc
HeapAlloc
MulDiv
GetProcAddress
LoadLibraryW
InterlockedDecrement
InterlockedIncrement
HeapCreate
TlsAlloc
TlsFree
HeapDestroy
TlsSetValue
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
GetLocaleInfoW
GetModuleHandleW
lstrlenW
lstrcpynW
lstrcmpiW
SetUnhandledExceptionFilter
ExitProcess
LocalAlloc
lstrcpyW
LocalFree
GetStartupInfoA
DelayLoadFailureHook
GetLastError
GetComputerNameW
LocalSize
SetLastError
ExpandEnvironmentStringsW
IsBadWritePtr
IsBadStringPtrW
GetCurrentThread
CloseHandle
InterlockedExchange
GetVersionExA
GetAtomNameW
SetProcessWorkingSetSize
GetUserDefaultUILanguage
MultiByteToWideChar
FindAtomW
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringW
SizeofResource
LockResource
LoadResource
FindResourceW
gdi32
CreateCompatibleDC
CreateFontIndirectW
GdiFlush
CreateSolidBrush
GetDeviceCaps
CreateBitmap
SelectObject
SetBkColor
SetTextColor
ExtTextOutW
PatBlt
DeleteObject
DeleteDC
CreateRectRgn
OffsetRgn
ExtTextOutA
LPtoDP
StretchDIBits
GetLayout
SetLayout
CreateDIBPatternBrushPt
CreateDIBSection
GetDIBits
GetBrushOrgEx
SetBrushOrgEx
CreateHalftonePalette
SelectPalette
RealizePalette
PlayEnhMetaFile
SetStretchBltMode
CreatePatternBrush
BitBlt
SetBkMode
SetTextAlign
GetTextExtentPoint32W
DeleteEnhMetaFile
GetObjectA
StretchBlt
GetObjectW
GetPixel
GetStockObject
CreateCompatibleBitmap
user32
CreateWindowExW
ShowWindow
SetForegroundWindow
EnableWindow
DestroyWindow
UnregisterClassW
GetSystemMetrics
SetWindowLongW
MonitorFromPoint
GetMonitorInfoW
SetWindowPos
wsprintfW
LoadStringW
PostMessageW
CopyIcon
GetClientRect
MessageBoxW
FindWindowW
GetKeyboardLayout
DestroyIcon
GetKeyboardLayoutList
SystemParametersInfoW
GetDC
ReleaseDC
GetSysColor
DrawTextW
GetProcessDefaultLayout
CreateIconIndirect
GetWindowRect
SendMessageW
KillTimer
SetTimer
LoadCursorW
RegisterClassExW
GetWindowLongW
DefWindowProcW
BeginPaint
FillRect
EndPaint
CharNextA
CharNextW
GetWindowLongA
SetRect
GetIconInfo
LoadImageW
EqualRect
DrawIconEx
DrawFocusRect
IntersectRect
DrawFrameControl
CopyRect
SetRectEmpty
AdjustWindowRectEx
GetParent
SetCursor
ScreenToClient
GetMessagePos
InvalidateRect
DefWindowProcA
GetClassInfoExW
GetSysColorBrush
SendMessageA
GetWindowTextW
GetWindowTextLengthW
DispatchMessageW
TranslateMessage
GetMessageW
PostQuitMessage
SetWindowLongA
SetFocus
SystemParametersInfoA
NotifyWinEvent
SetParent
CallWindowProcW
UpdateWindow
SetWindowRgn
SetWindowTextW
MapWindowPoints
GetFocus
comctl32
ord413
ord412
InitCommonControlsEx
ord355
ord17
ord410
shell32
ord752
ntdll
NtQuerySystemInformation
RtlUnhandledExceptionFilter
netapi32
NetApiBufferFree
DsGetDcNameW
NetQueryDisplayInformation
ole32
CoUninitialize
CoInitialize
CoDisconnectObject
CoInitializeEx
CoCreateInstance
oleaut32
VariantInit
VariantClear
SysAllocString
SysFreeString
rpcrt4
RpcBindingFromStringBindingW
NdrClientCall2
RpcBindingFree
RpcStringFreeW
RpcEpResolveBinding
RpcStringBindingComposeW
duser
UtilDrawBlendRect
DUserRegisterStub
DeleteHandle
FindGadgetFromPoint
LookupGadgetTicket
SetGadgetRootInfo
GetStdColorBrushI
GetStdColorI
FindStdColor
GetMessageExW
InitGadgets
SetGadgetBufferInfo
GetGadgetTicket
MapGadgetPoints
CreateAction
GetGadgetRgn
GetGadgetAnimation
BuildInterpolation
BuildAnimation
GetGadgetSize
GetGadgetRect
CreateGadget
DUserPostEvent
ForwardGadgetMessage
AttachWndProcW
InvalidateGadget
SetGadgetRect
SetGadgetParent
SetGadgetFocus
GetGadgetFocus
SetGadgetMessageFilter
SetGadgetStyle
DUserSendEvent
msimg32
GradientFill
AlphaBlend
TransparentBlt
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 343KB - Virtual size: 343KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE