Static task
static1
Behavioral task
behavioral1
Sample
0fd0463a29331e0e48241e522d5ff911ae7cedf6d5070969c21b1613bcb6240c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0fd0463a29331e0e48241e522d5ff911ae7cedf6d5070969c21b1613bcb6240c.exe
Resource
win10v2004-20220812-en
General
-
Target
0fd0463a29331e0e48241e522d5ff911ae7cedf6d5070969c21b1613bcb6240c
-
Size
620KB
-
MD5
1ab7b50c44a292bfb471a1926c3c9319
-
SHA1
1598ac1f776aa108f0f1a49a3cdf29b3d85b5496
-
SHA256
0fd0463a29331e0e48241e522d5ff911ae7cedf6d5070969c21b1613bcb6240c
-
SHA512
c7ae1c63b6adc16d02d1e60bfa8130b7b8f7bfdd26c4ca6e8d16a24346b51a6a3526c322f0df2b3e7812e2ba8e0aeff6bb4e4ac451f834f44300fec4b1b4a86d
-
SSDEEP
12288:zAlWcKEJ0MkBh0/ZK/tCGpDbSQbmEeD59GLb/RvTOixu:z+xfv6EZK/tLDy1D54RvT
Malware Config
Signatures
Files
-
0fd0463a29331e0e48241e522d5ff911ae7cedf6d5070969c21b1613bcb6240c.exe windows x86
131335ec83fdc09835dd0d6bc6b2cf50
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawIcon
RegisterClassExA
OpenWindowStationW
LockWindowUpdate
WINNLSEnableIME
EnumClipboardFormats
DdeAccessData
DefFrameProcA
MapDialogRect
EnumWindows
GetClassInfoW
EnumPropsExW
TabbedTextOutA
IsCharAlphaNumericA
GetAltTabInfo
SetRectEmpty
DdeNameService
DrawAnimatedRects
DialogBoxIndirectParamW
SetScrollRange
WaitForInputIdle
AppendMenuA
MessageBoxA
GetNextDlgTabItem
UnhookWinEvent
LoadMenuW
PtInRect
SetUserObjectInformationA
DefWindowProcW
EnumPropsA
MsgWaitForMultipleObjectsEx
MessageBoxW
GetClipboardSequenceNumber
DdeUnaccessData
RegisterClipboardFormatA
CheckRadioButton
GetWindowWord
SendNotifyMessageA
OemToCharBuffW
CreateWindowStationW
ScrollWindowEx
InvalidateRgn
OpenInputDesktop
ChildWindowFromPoint
SubtractRect
ReleaseDC
GetGuiResources
CreateWindowExA
CloseWindowStation
InvalidateRect
RemovePropW
ExcludeUpdateRgn
DrawStateW
SetClassLongW
CallWindowProcW
SetFocus
GetMessagePos
SetScrollPos
MapVirtualKeyExW
VkKeyScanExA
EnumDisplayDevicesW
IsDialogMessage
RegisterClassA
EnumChildWindows
CreateDesktopA
wvsprintfW
EnumDisplaySettingsW
CharToOemBuffA
ShowWindow
SendMessageTimeoutA
GetMessageA
GetSystemMetrics
WaitMessage
LoadBitmapA
EnumDisplayDevicesA
SendIMEMessageExW
PaintDesktop
DestroyWindow
SetRect
SystemParametersInfoA
ChangeDisplaySettingsW
GetCaretPos
GetClassNameW
CreateMDIWindowA
SetDeskWallpaper
SetWindowLongW
IsDialogMessageW
FrameRect
GetCursorPos
GetShellWindow
GetKeyboardType
LoadImageW
GetClipboardData
RegisterDeviceNotificationW
GetUpdateRgn
GetMenuItemInfoA
TrackPopupMenu
TranslateAccelerator
IsCharLowerW
VkKeyScanExW
DialogBoxIndirectParamA
comctl32
ImageList_GetDragImage
ImageList_EndDrag
ImageList_DragShowNolock
ImageList_GetIcon
ImageList_Create
ImageList_Write
ImageList_BeginDrag
InitCommonControlsEx
CreateStatusWindowA
ImageList_SetImageCount
CreateToolbar
ImageList_Merge
GetEffectiveClientRect
CreateMappedBitmap
ImageList_GetImageRect
ImageList_AddIcon
ImageList_AddMasked
CreatePropertySheetPageW
CreateStatusWindow
DestroyPropertySheetPage
comdlg32
GetSaveFileNameA
ChooseFontW
PageSetupDlgW
ReplaceTextW
kernel32
GetConsoleMode
ReadFile
FreeLibrary
GetLocaleInfoW
CreateFileA
GetProcessHeap
SetConsoleMode
TlsGetValue
SetConsoleCursorInfo
CreateMutexA
LoadLibraryA
GetStringTypeW
GetCurrentProcessId
SetStdHandle
SetEndOfFile
GetCommandLineA
WriteProfileSectionW
GetVersionExA
WideCharToMultiByte
InterlockedIncrement
GetNamedPipeInfo
CompareStringW
SetConsoleCtrlHandler
HeapFree
InterlockedDecrement
GetUserDefaultLCID
InitializeCriticalSection
GetTimeZoneInformation
DebugActiveProcess
GetDiskFreeSpaceA
GetCurrentProcess
GetConsoleCP
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
EnumCalendarInfoW
GetCalendarInfoW
FindClose
ExitProcess
GetLogicalDrives
GetNamedPipeHandleStateA
OpenMutexW
VirtualFree
TerminateProcess
WriteConsoleW
LocalUnlock
HeapCreate
GetTimeFormatA
GetThreadTimes
UnhandledExceptionFilter
CloseHandle
SetFilePointer
VirtualAlloc
SetLocaleInfoA
RtlFillMemory
LCMapStringA
HeapSize
MapViewOfFile
GetStdHandle
TlsSetValue
SetHandleCount
GlobalGetAtomNameW
FillConsoleOutputCharacterW
GetEnvironmentStringsW
IsValidLocale
VirtualQuery
EnumSystemLocalesA
GetCurrentThreadId
SetLastError
GetConsoleOutputCP
GetEnvironmentStrings
TlsFree
GetPrivateProfileStringW
RtlZeroMemory
OpenMutexA
FindResourceA
GetConsoleCursorInfo
IsDebuggerPresent
GetFileType
GetSystemTimeAdjustment
CreateEventA
GetModuleHandleA
FreeEnvironmentStringsA
HeapReAlloc
EnumDateFormatsW
EnterCriticalSection
GetStringTypeA
FreeEnvironmentStringsW
MultiByteToWideChar
GetStartupInfoA
IsValidCodePage
CompareStringA
GetCPInfo
SetEnvironmentVariableA
InterlockedExchange
GetConsoleTitleW
HeapAlloc
SetCurrentDirectoryW
VirtualProtect
GetACP
FlushFileBuffers
GetOEMCP
SetVolumeLabelW
Sleep
RtlUnwind
WriteConsoleA
TlsAlloc
CreateDirectoryW
WriteProfileSectionA
WriteFile
QueryPerformanceCounter
LeaveCriticalSection
GetModuleFileNameA
GetLocaleInfoA
DeleteCriticalSection
WritePrivateProfileStringW
HeapDestroy
GetCurrentThread
VirtualFreeEx
LCMapStringW
GetModuleHandleW
SetEvent
SetUnhandledExceptionFilter
GetLastError
GetDateFormatA
Sections
.text Size: 232KB - Virtual size: 230KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 264KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ