Static task
static1
Behavioral task
behavioral1
Sample
989ec69afa820ac7cc4eb2cf2eaae7eab3454049cdf6c529e4b997ee1b17fce8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
989ec69afa820ac7cc4eb2cf2eaae7eab3454049cdf6c529e4b997ee1b17fce8.exe
Resource
win10v2004-20220812-en
General
-
Target
989ec69afa820ac7cc4eb2cf2eaae7eab3454049cdf6c529e4b997ee1b17fce8
-
Size
237KB
-
MD5
47ffc4bc9da5c88e75fe7f8b529d4ed0
-
SHA1
e78f4806e8e586ed435354ea8cd952c1290eeaa7
-
SHA256
989ec69afa820ac7cc4eb2cf2eaae7eab3454049cdf6c529e4b997ee1b17fce8
-
SHA512
5f58680c7bf55a72a6fc327dfa967051c733729878029d2bb6a7b29cbe9a9f8e5654262dabfd27858738958448b556b3338d7742c1d548d482b9d369d6400cd5
-
SSDEEP
6144:14gZvpMai8sGCwIizvp00FIa6FaGqsXolR:LZvp08sGZxd4FagXy
Malware Config
Signatures
Files
-
989ec69afa820ac7cc4eb2cf2eaae7eab3454049cdf6c529e4b997ee1b17fce8.exe windows x86
9748e23638d9a98f7546d68370188e03
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hccutils
FindResources
LoadSTRINGFromHKCU
LoadSTRING
kernel32
GetModuleHandleA
CreateProcessA
FreeLibrary
LoadLibraryA
CloseHandle
GetLastError
InterlockedDecrement
SearchPathA
CompareFileTime
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
lstrlenA
lstrcmpiA
InterlockedIncrement
GetModuleFileNameA
GetModuleHandleW
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetWindowsDirectoryA
Sleep
CreateMutexA
GetCurrentThreadId
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoA
GetProcAddress
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetStdHandle
WriteFile
HeapCreate
HeapReAlloc
ExitProcess
LCMapStringW
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
VirtualFree
SetUnhandledExceptionFilter
IsDebuggerPresent
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualProtect
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
RtlUnwind
user32
CharNextW
PostThreadMessageA
UnregisterClassA
wsprintfA
CharNextA
GetWindowLongA
GetCursorPos
EnumDisplayDevicesA
EnumDisplaySettingsA
CreateDialogParamA
CallWindowProcA
RegisterClassExA
UnregisterHotKey
RegisterHotKey
ActivateKeyboardLayout
MapVirtualKeyExA
GetKeyNameTextA
GetKeyboardLayout
GetKeyboardLayoutList
LoadCursorA
GetClassInfoExA
SetWindowLongA
RegisterClassA
CreateWindowExA
GetMessageA
DispatchMessageA
SetTimer
IsWindow
SendMessageA
ShowWindow
PostQuitMessage
PeekMessageA
DefWindowProcA
KillTimer
DestroyWindow
GetDlgItem
GetDesktopWindow
GetWindowRect
SetWindowTextA
MessageBoxA
advapi32
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
ShellExecuteExA
ole32
CoRevokeClassObject
CoCreateInstance
CoTaskMemRealloc
CoSuspendClassObjects
CoTaskMemAlloc
CoRegisterClassObject
CoTaskMemFree
StringFromGUID2
CoUninitialize
CoInitialize
oleaut32
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
SysStringLen
SysAllocString
SysFreeString
VariantClear
LoadTypeLi
Sections
.text Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 19KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE