Static task
static1
Behavioral task
behavioral1
Sample
e2f33b9ddef8e7e07716d7cf893fff81977b16af26ccb28a995c552e9c4f2578.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e2f33b9ddef8e7e07716d7cf893fff81977b16af26ccb28a995c552e9c4f2578.exe
Resource
win10v2004-20220812-en
General
-
Target
e2f33b9ddef8e7e07716d7cf893fff81977b16af26ccb28a995c552e9c4f2578
-
Size
5.2MB
-
MD5
69ea3c42ee6bfd191ffdfb760171c32b
-
SHA1
befc65708ce1ac6c056fc9336f0f7c2d37eee579
-
SHA256
e2f33b9ddef8e7e07716d7cf893fff81977b16af26ccb28a995c552e9c4f2578
-
SHA512
ac754805e0d867277be6dcfe04a9f3f2d48f153bc2ea062e0d4e3f8bf9322e38ab5229c32eeb918b8ccdfd95227da3188206db0934f43cb566dfb92a87a32fe2
-
SSDEEP
98304:wNP4ImCo49EvR18LiTHwfXAwSGxv9oj9ghi1RebMIg9Cbk/V8sc:AzywfXAw5ojDIg9Cbk/V8
Malware Config
Signatures
Files
-
e2f33b9ddef8e7e07716d7cf893fff81977b16af26ccb28a995c552e9c4f2578.exe windows x86
2ae867a67dabbbbb7d92c3aa5362f71e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToLocalFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
FindResourceW
CreateFileW
SetEnvironmentVariableA
GetTimeZoneInformation
EnumSystemLocalesA
IsValidLocale
CreateProcessA
GetExitCodeProcess
LCMapStringW
CompareStringW
GetStringTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
QueryPerformanceCounter
HeapCreate
HeapQueryInformation
HeapSize
HeapReAlloc
HeapAlloc
GetLocaleInfoW
IsValidCodePage
GetConsoleMode
GetConsoleCP
SetHandleCount
IsProcessorFeaturePresent
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
GetStdHandle
GetFileType
SetStdHandle
ExitThread
CreateThread
ExitProcess
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapValidate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
DecodePointer
EncodePointer
RaiseException
RtlUnwind
FindResourceExW
GetNumberFormatA
GetWindowsDirectoryA
LocalFileTimeToFileTime
GetFileAttributesExA
GetFileSizeEx
VirtualProtect
GetTempPathA
GetProfileIntA
GetACP
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
InitializeCriticalSection
GetOEMCP
GetCPInfo
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
SetErrorMode
GetShortPathNameA
lstrcmpiA
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
OpenEventA
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DuplicateHandle
GetHandleInformation
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GlobalFlags
SearchPathA
GetThreadLocale
FileTimeToSystemTime
GetUserDefaultLCID
SystemTimeToFileTime
ReplaceFileA
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetTickCount
SetEvent
WaitForSingleObject
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleW
GetCurrentThread
GetLocaleInfoA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
lstrcmpA
lstrlenW
CopyFileA
FormatMessageA
LocalFree
GetAtomNameA
GlobalUnlock
MulDiv
GetCurrentProcessId
GetCurrentDirectoryA
ResumeThread
SetThreadPriority
CompareStringA
LoadLibraryW
GetVersionExA
lstrcmpW
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
ActivateActCtx
DeactivateActCtx
SetLastError
lstrlenA
MultiByteToWideChar
GlobalLock
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
FindResourceA
FreeResource
GlobalAlloc
GlobalReAlloc
GlobalSize
GlobalFree
GetModuleFileNameA
CreateFileA
GetFileSize
GetFileAttributesA
lstrcpyA
InterlockedDecrement
InterlockedIncrement
CreateDirectoryA
WinExec
GetCurrentProcess
GetLastError
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
FreeLibrary
IsBadReadPtr
VirtualFree
VirtualAlloc
Sleep
GetLocalTime
LoadLibraryA
GetProcAddress
GetProcessHeap
HeapFree
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
LockFile
user32
ToAsciiEx
LoadAcceleratorsW
CopyAcceleratorTableA
CreateAcceleratorTableA
PtInRect
WaitMessage
TranslateMessage
CharUpperBuffA
UnpackDDElParam
ReuseDDElParam
TranslateAcceleratorA
LoadAcceleratorsA
GetIconInfo
OffsetRect
EndDialog
CreateDialogIndirectParamA
SetLayeredWindowAttributes
EnumDisplayMonitors
PostQuitMessage
GetWindowThreadProcessId
DestroyAcceleratorTable
UpdateLayeredWindow
GetMessageA
MonitorFromPoint
SystemParametersInfoA
LoadMenuW
LoadMenuA
RemoveMenu
ModifyMenuA
InsertMenuItemA
InsertMenuA
GetSubMenu
GetMenuItemInfoA
GetMenuStringA
GetMenuState
GetMenuItemID
GetMenuItemCount
EnableMenuItem
CheckMenuItem
AppendMenuA
DeleteMenu
CreatePopupMenu
CreateMenu
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateA
DrawIcon
InvertRect
FrameRect
FillRect
CharUpperA
MessageBeep
SetCursor
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CheckDlgButton
LoadCursorW
PostThreadMessageA
MapDialogRect
NotifyWinEvent
SetWindowContextHelpId
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetKeyboardLayout
OpenClipboard
WindowFromPoint
SetParent
GetLastActivePopup
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
GetDesktopWindow
SetCapture
KillTimer
SetTimer
EnableScrollBar
LockWindowUpdate
ShowOwnedPopups
IsWindowVisible
ValidateRect
InvalidateRgn
InvalidateRect
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
ClientToScreen
GetWindowRgn
SetWindowRgn
IsZoomed
IsIconic
GetSystemMenu
DrawMenuBar
GetSysColorBrush
SetClassLongA
GetMenuCheckMarkDimensions
LoadBitmapW
SetMenuItemBitmaps
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
EnableWindow
IsChild
GetFocus
LoadImageA
LoadIconW
LoadIconA
SendDlgItemMessageA
MonitorFromWindow
GetMonitorInfoA
GetClientRect
MapWindowPoints
PeekMessageA
DispatchMessageA
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetKeyboardState
IsClipboardFormatAvailable
RealChildWindowFromPoint
SetCursorPos
CopyIcon
GetClipboardFormatNameA
IsRectEmpty
DefFrameProcA
TranslateMDISysAccel
DefMDIChildProcA
SetRectEmpty
GetDoubleClickTime
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
GetParent
GetWindow
GetCapture
WinHelpA
DestroyCursor
CharNextA
IsCharLowerA
MapVirtualKeyExA
GetTabbedTextExtentW
CreateCaret
SubtractRect
UnionRect
IntersectRect
InflateRect
SetRect
GetSystemMetrics
SetWindowPos
PostMessageA
SendMessageA
FindWindowExA
FindWindowA
GetClassNameA
EnumChildWindows
FindWindowW
MessageBoxA
GetActiveWindow
LoadCursorA
DestroyMenu
GetCursorPos
GetMenuDefaultItem
IsMenu
SetMenuDefaultItem
IsWindow
DrawIconEx
RegisterClipboardFormatA
LoadImageW
CopyImage
SetClipboardData
CloseClipboard
EmptyClipboard
DestroyIcon
ReleaseCapture
GetAsyncKeyState
RedrawWindow
GetWindowRect
BringWindowToTop
ShowWindow
RegisterWindowMessageA
GetKeyNameTextA
MapVirtualKeyA
SetWindowLongA
GetWindowLongA
GetMessagePos
GetMessageTime
GetMenu
SetMenu
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetDlgCtrlID
DestroyWindow
GetKeyState
GetWindowTextA
GetWindowTextLengthA
GetDlgItem
GetWindowPlacement
SetWindowPlacement
TrackPopupMenu
UnregisterClassA
gdi32
GetCurrentPositionEx
Polyline
Ellipse
Polygon
Rectangle
RoundRect
ExtFloodFill
TextOutA
ExtTextOutA
GetTextExtentPoint32A
GetTextAlign
GetTextFaceA
GetTextMetricsA
GetCharWidthA
Escape
GetBoundsRect
StartDocA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
SetPixelV
RectVisible
SaveDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetLayout
SetLayout
ExtSelectClipRgn
EnumFontFamiliesA
GetTextCharsetInfo
CreateDIBitmap
CopyMetaFileA
GetSystemPaletteEntries
EnumFontFamiliesExA
GetTextExtentPointA
GetTextExtentPoint32W
SetRectRgn
PtVisible
GetMapMode
GetTextColor
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetBkColor
GetNearestColor
GetDeviceCaps
CreateDCA
PtInRegion
GetRgnBox
OffsetRgn
FrameRgn
FillRgn
LPtoDP
DPtoLP
GetWindowExtEx
GetWindowOrgEx
GetViewportExtEx
GetViewportOrgEx
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
CreatePalette
RestoreDC
CreateRectRgnIndirect
CreateRectRgn
GetNearestPaletteIndex
SetPaletteEntries
GetPaletteEntries
GetStockObject
DeleteObject
DeleteDC
CreateFontA
CreateFontIndirectA
CreatePatternBrush
CreateHatchBrush
CreateSolidBrush
CreatePen
GetObjectType
SetTextColor
SetDIBColorTable
GetPixel
SetPixel
SelectPalette
RealizePalette
GetDIBits
CreateCompatibleBitmap
StretchBlt
CreateDIBSection
PatBlt
SetBkColor
BitBlt
SelectObject
CreateBitmap
GetObjectA
CreateCompatibleDC
CombineRgn
msimg32
AlphaBlend
TransparentBlt
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
OpenPrinterA
GetJobA
DocumentPropertiesA
advapi32
SetThreadToken
OpenThreadToken
RegEnumValueA
RegEnumKeyExA
RegOpenKeyExW
GetFileSecurityA
SetFileSecurityA
RegEnumKeyA
RegQueryValueA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueA
RegCloseKey
RevertToSelf
shell32
SHGetSpecialFolderLocation
DragFinish
DragQueryFileA
SHAppBarMessage
ShellExecuteA
SHGetFileInfoA
ExtractIconA
SHAddToRecentDocs
SHGetDesktopFolder
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
DragAcceptFiles
comctl32
ImageList_GetImageCount
ImageList_GetIcon
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon
ImageList_GetIconSize
InitCommonControlsEx
ImageList_DrawEx
shlwapi
PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
PathRemoveExtensionA
PathFindExtensionA
ole32
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
OleLockRunning
DoDragDrop
RevokeDragDrop
OleIsCurrentClipboard
OleGetClipboard
StringFromGUID2
CoInitializeEx
CoFreeUnusedLibraries
StgCreateDocfileOnILockBytes
RegisterDragDrop
CoUninitialize
CoCreateInstance
CoGetClassObject
CoRegisterMessageFilter
CoRevokeClassObject
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
ReleaseStgMedium
CoTaskMemAlloc
CoLockObjectExternal
OleFlushClipboard
StringFromCLSID
CoTaskMemFree
OleDuplicateData
CreateStreamOnHGlobal
CoInitialize
oleaut32
SysAllocString
SysFreeString
SysAllocStringByteLen
VariantCopy
SysAllocStringLen
SafeArrayDestroy
VarBstrFromDate
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
VariantInit
VariantChangeType
VariantClear
SysStringLen
oledlg
ord8
gdiplus
GdipCreateBitmapFromStream
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipCreateBitmapFromStreamICM
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipFree
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageWidth
GdipCreateBitmapFromHBITMAP
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmGetOpenStatus
ImmGetContext
ImmReleaseContext
winmm
PlaySoundA
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 564KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 308KB - Virtual size: 339KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 246KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ