Static task
static1
Behavioral task
behavioral1
Sample
d6cd1b6e603c63934bec681370a050d22597bd3cbfd0b72f166595fba33c73ba.exe
Resource
win7-20220812-en
General
-
Target
d6cd1b6e603c63934bec681370a050d22597bd3cbfd0b72f166595fba33c73ba
-
Size
985KB
-
MD5
2d95a1661d95145dbd768b8550a732f0
-
SHA1
ddf581e6d704ace9fad7cf9707cbedbbd947ee4f
-
SHA256
d6cd1b6e603c63934bec681370a050d22597bd3cbfd0b72f166595fba33c73ba
-
SHA512
ff4ee8f3d07a6e340733b1cdd173c5cde3d0d46b49d6715b16ac3b01c1caab9373c1079756e93ca36b177b1d434d6b836d069c98838d19ecd3e31ecbf5ed9688
-
SSDEEP
24576:H70wYvLloQ2unVN3VFHh3oORTfjo56LeAk/V9go4J:2vL12unjV3fTfk56LeAk/UJ
Malware Config
Signatures
Files
-
d6cd1b6e603c63934bec681370a050d22597bd3cbfd0b72f166595fba33c73ba.exe windows x86
ae280cedec2cf936d428e389f0631807
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
kernel32
GetFileAttributesW
GetSystemTime
SetFileTime
MulDiv
MapViewOfFileEx
GetFullPathNameW
GetCPInfo
IsDBCSLeadByte
InitializeCriticalSection
DeleteCriticalSection
FreeResource
OpenProcess
GetVersion
VirtualFreeEx
VirtualAllocEx
GetFileSizeEx
GlobalLock
GlobalUnlock
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetDriveTypeA
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
EnumSystemLocalesA
GetUserDefaultLCID
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
SetFileAttributesW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentDirectoryA
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
GetStdHandle
HeapCreate
IsValidCodePage
GetOEMCP
ExitProcess
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
RtlUnwind
GetStartupInfoW
CreateDirectoryW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetSystemTimeAsFileTime
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
Sleep
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
LocalFree
ProcessIdToSessionId
GetDiskFreeSpaceExW
DeviceIoControl
CreateMutexW
GetCommandLineW
OpenMutexW
QueryDosDeviceW
GetDriveTypeW
GetLogicalDrives
CopyFileW
WritePrivateProfileStringW
ReadProcessMemory
VirtualQueryEx
GetThreadSelectorEntry
SetUnhandledExceptionFilter
CreateFileA
FreeLibrary
GetVersionExW
GetCurrentThread
GetModuleFileNameA
VirtualQuery
GetCurrentProcessId
GetTickCount
CreateFileMappingW
SystemTimeToFileTime
OpenFileMappingW
GetLocalTime
UnmapViewOfFile
MapViewOfFile
GetProcAddress
LoadLibraryW
GetModuleFileNameW
SetFilePointer
GetLastError
WriteFile
ReadFile
GetFileSize
DeleteFileW
CloseHandle
GetFileTime
CreateFileW
FindClose
FindFirstFileW
WaitForSingleObject
WideCharToMultiByte
lstrlenW
GlobalFree
InterlockedDecrement
GlobalAlloc
InterlockedIncrement
FindNextFileW
EnterCriticalSection
GetCurrentThreadId
RaiseException
SetLastError
FlushInstructionCache
GetCurrentProcess
LeaveCriticalSection
FindResourceExW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
FindResourceW
IsValidLocale
user32
LoadBitmapW
SetWindowLongW
EndDialog
LoadImageW
GetWindowLongW
EnumDisplayMonitors
PostMessageW
SetWindowPos
IsWindowVisible
UpdateWindow
RegisterClassExW
GetClassInfoExW
DefWindowProcW
BeginPaint
UnregisterClassA
EndPaint
GetCursorPos
OffsetRect
ClientToScreen
GetMessagePos
ScreenToClient
GetClientRect
PtInRect
KillTimer
InvalidateRect
UnregisterClassW
MoveWindow
UpdateLayeredWindow
GetPropW
GetWindow
GetDesktopWindow
SetPropW
GetWindowThreadProcessId
SetRectEmpty
FindWindowExW
GetSysColorBrush
CallNextHookEx
CopyRect
GetMenuItemID
DrawTextW
WindowFromPoint
FillRect
MenuItemFromPoint
UnhookWindowsHookEx
SetWindowsHookExW
GetSysColor
GetKeyNameTextW
MapVirtualKeyW
SetRect
GetDC
ReleaseDC
MonitorFromPoint
GetMonitorInfoW
CreateWindowExW
DestroyWindow
MessageBoxW
GetKeyboardLayoutList
TrackPopupMenu
SetTimer
SystemParametersInfoW
DestroyMenu
FindWindowW
AppendMenuW
IsWindow
CreateMenu
GetWindowRect
GetKeyState
GetMenuItemRect
GetMenuItemInfoW
EnableMenuItem
GetMenuItemCount
CheckMenuRadioItem
CheckMenuItem
LoadIconW
SetMenuItemBitmaps
GetSubMenu
LoadMenuW
PostQuitMessage
InsertMenuW
DialogBoxParamW
SetForegroundWindow
ModifyMenuW
DispatchMessageW
TranslateMessage
IsDialogMessageW
CreateDialogParamW
GetMessageW
ShowWindow
RegisterWindowMessageW
SetWindowTextW
SendMessageW
GetDlgItem
CallWindowProcW
LoadCursorW
SetCursor
DestroyIcon
gdi32
GetDeviceCaps
GetObjectW
CreateDIBSection
CreateSolidBrush
CreatePen
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
SetPixel
GetPixel
Ellipse
SetBkMode
PatBlt
SetStretchBltMode
StretchDIBits
DeleteDC
CreateFontW
DeleteObject
CreateFontIndirectW
Rectangle
BitBlt
SetTextColor
advapi32
LookupAccountSidW
RegSetValueExW
LookupAccountNameW
OpenProcessToken
ConvertSidToStringSidW
GetTokenInformation
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
IsTextUnicode
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityInfo
shell32
Shell_NotifyIconW
SHGetFolderPathW
SHGetSpecialFolderPathW
ShellExecuteW
SHCreateDirectoryExW
ShellExecuteExW
ole32
CoUninitialize
CoCreateGuid
StgCreateDocfile
StgOpenStorage
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoInitialize
shlwapi
PathFileExistsW
comctl32
ord17
msimg32
TransparentBlt
imm32
ImmGetIMEFileNameW
ImmGetHotKey
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
ws2_32
htons
closesocket
socket
gethostbyname
WSACleanup
WSAStartup
ntohl
htonl
sendto
netapi32
NetWkstaTransportEnum
Netbios
NetApiBufferFree
Sections
.text Size: 620KB - Virtual size: 617KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE