Static task
static1
Behavioral task
behavioral1
Sample
932e62a72e367ee815e417aa5fdc313f1e8f44cb8176de4e5930a2a8cf19de01.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
932e62a72e367ee815e417aa5fdc313f1e8f44cb8176de4e5930a2a8cf19de01.exe
Resource
win10v2004-20220812-en
General
-
Target
932e62a72e367ee815e417aa5fdc313f1e8f44cb8176de4e5930a2a8cf19de01
-
Size
274KB
-
MD5
622b3dfdb3898e0797e6b6df11708310
-
SHA1
3fd8fd83c30ae5a770705f6dd5c21dbe01fdbc29
-
SHA256
932e62a72e367ee815e417aa5fdc313f1e8f44cb8176de4e5930a2a8cf19de01
-
SHA512
cc32ac58d58f489e39a5301cdd94a90f09d617860376e9ac0ae4982d50df219e966c33d6da58f922355250bc58cabae90d9a2d2845198fec61865d53699e940e
-
SSDEEP
6144:d2LS8Bzl1bVTYYVWWUwZWih/ofgwtmYONxdo6WPOuaVzp83krIH6yGxU:49uEWxwZWih/oCcHPRaVzp8U0D6U
Malware Config
Signatures
Files
-
932e62a72e367ee815e417aa5fdc313f1e8f44cb8176de4e5930a2a8cf19de01.exe windows x86
081f84e9552af00b47e665199d6086dd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateSolidBrush
DeleteObject
kernel32
RaiseException
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
SetLastError
MulDiv
GetCommandLineW
FreeLibrary
InitializeCriticalSection
DeleteCriticalSection
lstrlenW
GetLastError
GetProcAddress
GetModuleHandleW
lstrcmpiW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
CloseHandle
WriteFile
ReadFile
GetFileSize
DeleteFileW
MoveFileExW
GlobalUnlock
GlobalLock
GlobalAlloc
LocalFree
GetUserDefaultLCID
lstrlenA
CreateThread
FindClose
FindFirstFileW
GetLongPathNameW
WaitForSingleObject
ReleaseMutex
CreateMutexW
WideCharToMultiByte
CreateProcessW
ProcessIdToSessionId
GetCurrentProcessId
LocalAlloc
RtlCaptureStackBackTrace
GetModuleHandleExW
GetVersionExA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
InterlockedExchange
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualProtect
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
LoadLibraryA
FormatMessageA
GetSystemDirectoryW
LoadLibraryW
Sleep
TlsGetValue
DecodePointer
EncodePointer
user32
TrackPopupMenu
GetMenuStringW
ModifyMenuW
CreatePopupMenu
AppendMenuW
GetCursorPos
InflateRect
MessageBeep
FindWindowExW
GetClassNameW
OpenClipboard
FrameRect
AdjustWindowRect
EmptyClipboard
SetClipboardData
CloseClipboard
MessageBoxA
GetKeyState
SetWindowLongW
GetWindowLongW
SendMessageW
GetClientRect
ShowWindow
GetClassInfoExW
LoadCursorW
CallWindowProcW
KillTimer
CharNextW
SetTimer
MapVirtualKeyW
DestroyIcon
GetWindowPlacement
SetWindowPlacement
SetWindowTextW
MessageBoxW
PostMessageW
GetSystemMetrics
GetTopWindow
GetForegroundWindow
BringWindowToTop
GetWindow
EnumWindows
SendMessageTimeoutW
GetParent
MonitorFromWindow
GetMonitorInfoW
SetWindowPos
SystemParametersInfoW
IsWindowVisible
GetWindowRect
LoadIconW
MapWindowPoints
CopyRect
DestroyWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
UnregisterClassA
msocf
?CreateTheApp@Frame@MsoCF@@YGXAAUCreateTheAppArgs@12@@Z
?TheApp@Frame@MsoCF@@YGPAUAFrameApp@2@XZ
?TerminateTheApp@Frame@MsoCF@@YGXXZ
?Finish@Frame@MsoCF@@YGXXZ
?Finish@Utilities@MsoCF@@YGXXZ
??0CToolbarData@MsoCF@@QAE@XZ
?Init@CToolbarData@MsoCF@@QAGXPBUStaticToolbarDesc@2@IPBUStaticMenuDesc@2@I@Z
?g_FixedBufferAllocator@MsoCF@@3VCFixedBufferAllocator@1@A
?SetWzFromNumber@Strings@MsoCF@@YGXAAV?$CWzInBuffer_T@V?$String@UWzTraits@MsoCF@@@MsoCF@@V?$CBuffer@_W@2@@2@IHHPAH@Z
?g_FastBufferAllocator@MsoCF@@3VCFastBufferAllocator@1@A
?AppendArrayOfCharactersToWz@Strings@MsoCF@@YGXPB_WHAAV?$CWzInBuffer_T@V?$String@UWzTraits@MsoCF@@@MsoCF@@V?$CBuffer@_W@2@@2@PAH@Z
?SetWzFromResource@Strings@MsoCF@@YGXAAV?$CWzInBuffer_T@V?$String@UWzTraits@MsoCF@@@MsoCF@@V?$CBuffer@_W@2@@2@PAUHINSTANCE__@@IPAH@Z
?CreateActionManager@MsoCF@@YGXPAPAUIActionManager@1@@Z
??1CToolbarData@MsoCF@@QAE@XZ
?Start@Utilities@MsoCF@@YGXHPAU_msotcfcf@@@Z
?Start@Frame@MsoCF@@YGXXZ
?TheActionManager@MsoCF@@YGPAUIActionManager@1@XZ
?Set@Properties@MsoCF@@YGXPAUIPropertySet@2@ABUPropertyInfo@2@PBXW4PropertyType@2@@Z
?LookupProperty@MsoCF@@YGABUPropertyInfo@1@I@Z
?FGet@Properties@MsoCF@@YG_NPAUIPropertySet@2@PBUPropertyInfo@2@PAXHW4PropertyType@2@@Z
?FreeAndZero_ComplexType@CPropertyData@MsoCF@@SGXPAXW4PropertyType@2@@Z
?ProduceAtom@MsoCF@@YGXPAPAVIAtom@1@PBXH@Z
?GetProperty@IPropertySet@MsoCF@@QAGXABUPropertyInfo@2@PAVCPropertyValue@2@@Z
?RegisterPropertySpace@MsoCF@@YGXPBUPropertySpaceInfo@1@@Z
?Free@Allocator@Memory@MsoCF@@YGXPAX@Z
?SetWzFromPattern@Strings@MsoCF@@YGXAAV?$CWzInBuffer_T@V?$String@UWzTraits@MsoCF@@@MsoCF@@V?$CBuffer@_W@2@@2@PAUHINSTANCE__@@IQAPB_WHPAH@Z
?SetWtzFromPattern@Strings@MsoCF@@YGXAAV?$CWtzInBuffer_Template@V?$CBuffer@_W@MsoCF@@@2@PAUHINSTANCE__@@IQAPB_WH@Z
msvcr90
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_controlfp_s
_invoke_watson
_crt_debugger_hook
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
??3@YAXPAX@Z
??_V@YAXPAX@Z
__CxxFrameHandler3
_CxxThrowException
swprintf_s
wcsncpy_s
??_U@YAPAXI@Z
memset
_recalloc
??2@YAPAXI@Z
wcsstr
malloc
free
memcpy_s
_vsnwprintf_s
_vsnprintf_s
memcpy
wcschr
_snwprintf_s
_wtoi
wcsrchr
_wcsdup
_wtol
_mbsstr
strncpy_s
vswprintf_s
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
oleaut32
SysAllocString
VariantInit
SysFreeString
SafeArrayGetLBound
SafeArrayGetElement
SafeArrayDestroyData
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VariantChangeType
VarUI4FromStr
VariantClear
shlwapi
PathCreateFromUrlW
AssocQueryStringW
shell32
SHFileOperationW
CommandLineToArgvW
wininet
InternetErrorDlg
HttpQueryInfoW
InternetOpenW
InternetReadFile
InternetCloseHandle
InternetOpenUrlW
urlmon
URLDownloadToFileW
ObtainUserAgentString
Sections
.text Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE