Static task
static1
Behavioral task
behavioral1
Sample
df61618d3719f8837f2d002f396e2ff8b637d446a921c8a5b4e0a035a6aed6cd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
df61618d3719f8837f2d002f396e2ff8b637d446a921c8a5b4e0a035a6aed6cd.exe
Resource
win10v2004-20220812-en
General
-
Target
df61618d3719f8837f2d002f396e2ff8b637d446a921c8a5b4e0a035a6aed6cd
-
Size
1.8MB
-
MD5
8cc3db2e6f06fc91e971ab79678b1c2a
-
SHA1
7339a7231e8d8dce57895d56e49425fd3e722f7b
-
SHA256
df61618d3719f8837f2d002f396e2ff8b637d446a921c8a5b4e0a035a6aed6cd
-
SHA512
cdc4d6235e2f75e193580204ec7fd246e722f32aff4f24d73387eb6d05e40e3bc2f1a468ba11701ed2105cc4d216eb31f96d82aed00887ba0ec0bf5efcd689ed
-
SSDEEP
49152:kHjp8/EkqDQLq/4GkTqU+anomnuxO6qf+Y:7RZk7q
Malware Config
Signatures
Files
-
df61618d3719f8837f2d002f396e2ff8b637d446a921c8a5b4e0a035a6aed6cd.exe windows x64
a01eaecce807648a60dea3f4f86a1fcb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateDirectoryA
MultiByteToWideChar
GetCurrentProcess
GetModuleHandleA
SetLastError
ExitThread
GetVersion
SetEndOfFile
SetFilePointerEx
CopyFileA
GetModuleFileNameA
ReadFile
WideCharToMultiByte
CreateEventA
GetSystemInfo
SetEvent
GetQueuedCompletionStatus
TerminateThread
CreateIoCompletionPort
GetSystemTime
SystemTimeToFileTime
WaitForMultipleObjects
PostQueuedCompletionStatus
lstrlenA
GetStdHandle
WriteConsoleA
GetProcessHeap
HeapAlloc
HeapFree
DeleteFileW
RemoveDirectoryW
GetFileAttributesW
MoveFileW
CreateDirectoryExW
CreateDirectoryW
GetComputerNameExA
GetDriveTypeW
GetLogicalDrives
FindClose
FindNextFileW
FindFirstFileExW
FindFirstFileW
GetFileSizeEx
FindFirstVolumeA
FindNextVolumeA
FindVolumeClose
GetDriveTypeA
FindFirstVolumeMountPointA
LocalLock
LocalUnlock
FlushViewOfFile
GlobalMemoryStatus
AreFileApisANSI
GetTempPathA
GetDiskFreeSpaceW
LoadLibraryW
LockFileEx
GetFullPathNameW
GetTempPathW
GetDiskFreeSpaceA
CreateFileW
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
GetACP
GetTimeZoneInformation
HeapCreate
HeapSetInformation
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
FlsAlloc
FlsFree
FlsSetValue
FlsGetValue
HeapSize
HeapReAlloc
GetCommandLineA
VirtualQuery
VirtualProtect
RtlPcToFileHeader
RaiseException
ExitProcess
RtlUnwindEx
RtlLookupFunctionEntry
GetFileTime
GetFileAttributesA
GetFullPathNameA
FindFirstFileA
DuplicateHandle
GetFileSize
UnlockFile
LockFile
FlushFileBuffers
DeleteFileA
GetCurrentDirectoryA
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryExA
GlobalFlags
GetThreadLocale
lstrcmpA
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetCurrentThreadId
FormatMessageA
MulDiv
TlsFree
GlobalFree
LocalReAlloc
TlsSetValue
GlobalAlloc
GlobalHandle
GlobalUnlock
GlobalReAlloc
GlobalLock
TlsAlloc
TlsGetValue
FindVolumeMountPointClose
GetVersionExA
QueryDosDeviceA
LoadLibraryA
GetProcAddress
FreeLibrary
GetDiskFreeSpaceExA
GetVolumeInformationA
CreateFileA
VirtualAlloc
DeviceIoControl
VirtualFree
CreateFileMappingA
MapViewOfFile
SetFilePointer
WriteFile
UnmapViewOfFile
CreateThread
GetLastError
Sleep
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
DeleteCriticalSection
CloseHandle
InitializeCriticalSection
LocalFree
LocalAlloc
GetCurrentProcessId
FindResourceA
LoadResource
LockResource
SizeofResource
OutputDebugStringA
CompareStringW
CompareStringA
ws2_32
bind
ntohs
listen
recvfrom
htons
WSASocketA
htonl
setsockopt
WSAGetLastError
gethostbyname
ntohl
inet_ntoa
closesocket
WSACleanup
WSARecv
WSASend
getpeername
WSAAccept
connect
send
recv
socket
sendto
WSAIoctl
gethostbyaddr
inet_addr
WSAStartup
gethostname
rpcrt4
RpcServerInqBindings
RpcEpRegisterA
RpcBindingVectorFree
RpcServerUseAllProtseqs
NdrServerCall2
RpcServerUseProtseqEpA
RpcServerRegisterIf
RpcServerListen
rpcns4
RpcNsBindingExportA
iphlpapi
SendARP
setupapi
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
eventlog
ReportLog
vixdisklib
VixDiskLib_CheckRepair
VixDiskLib_Write
VixDiskLib_Init
VixDiskLib_Open
VixDiskLib_GetInfo
VixDiskLib_Read
VixDiskLib_FreeInfo
VixDiskLib_Close
VixDiskLib_Connect
VixDiskLib_Create
user32
MapDialogRect
SetWindowContextHelpId
CharNextA
CopyAcceleratorTableA
GetProcessWindowStation
GetUserObjectInformationW
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetCursor
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
GetDesktopWindow
ClientToScreen
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
ReleaseCapture
IsChild
GetCapture
GetClassLongA
GetClassNameA
GetClassLongPtrA
IsRectEmpty
GetPropA
RemovePropA
IsWindow
SetFocus
GetWindowTextA
GetForegroundWindow
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrA
SetWindowLongPtrA
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetClientRect
GetMenu
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CopyRect
AdjustWindowRectEx
SetRect
EqualRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnregisterClassA
SetWindowsHookExA
InvalidateRect
InvalidateRgn
SetCapture
SetPropA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
UnhookWindowsHookEx
GetWindowThreadProcessId
SendMessageA
GetWindowLongA
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
CharUpperA
wsprintfA
wvsprintfA
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
WinHelpA
PostThreadMessageA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
OpenSCManagerA
OpenServiceA
StartServiceA
CloseServiceHandle
SetServiceStatus
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
ole32
CoInitialize
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
oleaut32
VariantClear
SysFreeString
VariantInit
VariantChangeType
SysAllocString
SafeArrayDestroy
SysStringLen
SysAllocStringByteLen
SysAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
VariantCopy
OleCreateFontIndirect
shlwapi
PathIsUNCA
PathFindFileNameA
PathFindExtensionA
PathStripToRootA
PathFileExistsA
netapi32
Netbios
oleacc
CreateStdAccessibleObject
LresultFromObject
gdi32
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
ExtTextOutA
SaveDC
RestoreDC
SetMapMode
GetViewportExtEx
GetWindowExtEx
PtVisible
GetDeviceCaps
DeleteObject
RectVisible
TextOutA
Escape
SelectObject
GetTextColor
GetBkColor
SetViewportOrgEx
GetMapMode
CreateRectRgnIndirect
GetStockObject
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
GetRgnBox
oledlg
ord8
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 322KB - Virtual size: 322KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ