Static task
static1
Behavioral task
behavioral1
Sample
7f9ad9f192eefba847ea594560d1bae1a602f42627e6e2751f926c6a2c5cdea1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7f9ad9f192eefba847ea594560d1bae1a602f42627e6e2751f926c6a2c5cdea1.exe
Resource
win10v2004-20220812-en
General
-
Target
7f9ad9f192eefba847ea594560d1bae1a602f42627e6e2751f926c6a2c5cdea1
-
Size
86KB
-
MD5
533a3f9cbb3fffa2917b7093ab68ef2a
-
SHA1
0ea91a3701413b083efe7b01ff5edc7566d1012f
-
SHA256
7f9ad9f192eefba847ea594560d1bae1a602f42627e6e2751f926c6a2c5cdea1
-
SHA512
97265f142a8390a918e2f61c6a13d12068df0af0dc22656862336ae9b7bf539869e4306d331460db307a44593d84f8b71fa56115e30a28f6dffc4eb78479c162
-
SSDEEP
1536:Dm/uE4qFE8Ms2FW9ZnhNuKPld1+003Ris6wekNlznZ:W7az3iB/lqisHekN1nZ
Malware Config
Signatures
Files
-
7f9ad9f192eefba847ea594560d1bae1a602f42627e6e2751f926c6a2c5cdea1.exe windows x86
2dbb21b28913b4acd0901aa02511836d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
Shell_NotifyIconW
wtsapi32
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
advapi32
RegOpenKeyW
RegSetValueExW
GetUserNameW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegQueryValueExW
kernel32
lstrlenW
CloseHandle
OpenProcess
GetProcAddress
LoadLibraryA
lstrcmpW
lstrcatW
GetSystemDirectoryW
GetVersionExW
SystemTimeToFileTime
GetSystemTime
lstrcpynW
GetTickCount
SetEvent
WaitForSingleObject
DeviceIoControl
ResetEvent
CreateThread
CreateFileW
CreateEventW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetModuleHandleA
WideCharToMultiByte
HeapFree
HeapAlloc
RtlUnwind
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
WriteFile
ReadFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
MultiByteToWideChar
LCMapStringA
LCMapStringW
FlushFileBuffers
HeapSize
SetStdHandle
GetACP
GetOEMCP
FreeLibrary
InterlockedExchange
VirtualQuery
GetStringTypeA
GetStringTypeW
VirtualProtect
GetSystemInfo
GetLocaleInfoA
IsBadReadPtr
IsBadCodePtr
SetEndOfFile
GetProcessHeap
ReleaseMutex
lstrcmpiW
Sleep
lstrcpyW
CreateProcessW
CreateMutexW
GetLastError
DeleteCriticalSection
GetCPInfo
gdi32
CreateBrushIndirect
GetClipBox
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC
GetDeviceCaps
StretchBlt
BitBlt
user32
wsprintfW
FindWindowW
LoadStringW
LoadImageW
SendMessageW
GetAsyncKeyState
GetSystemMetrics
GetParent
GetCursorPos
SetTimer
SetWindowPos
InvalidateRect
GetMonitorInfoW
MonitorFromPoint
ReleaseDC
GetDC
GetDesktopWindow
ShowWindow
GetClassNameW
GetWindowLongW
GetForegroundWindow
SystemParametersInfoW
SetWindowTextW
RemoveMenu
CheckMenuItem
DestroyMenu
TrackPopupMenu
SetForegroundWindow
GetSubMenu
LoadMenuW
PeekMessageW
PostQuitMessage
PostMessageW
KillTimer
EnumChildWindows
GetWindowThreadProcessId
WindowFromPoint
OffsetRect
IntersectRect
GetWindowRect
EndPaint
FillRect
DrawEdge
BeginPaint
ScrollDC
mouse_event
SetCursorPos
DefWindowProcW
SetWindowLongW
CreateWindowExW
RegisterClassExW
LoadCursorW
MessageBoxW
wvsprintfW
DestroyWindow
DispatchMessageW
GetMessageW
MessageBeep
ReleaseCapture
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE