Static task
static1
Behavioral task
behavioral1
Sample
358894dea32b3ad2dd56d658eb24ab200f357dd8b30fa9e5c19d064e67f86193.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
358894dea32b3ad2dd56d658eb24ab200f357dd8b30fa9e5c19d064e67f86193.exe
Resource
win10v2004-20220812-en
General
-
Target
358894dea32b3ad2dd56d658eb24ab200f357dd8b30fa9e5c19d064e67f86193
-
Size
3.8MB
-
MD5
ae7b7e93bdcac7262c6c1f41508bdab7
-
SHA1
ef506b705d594c82fcf55a381faf819d421881b6
-
SHA256
358894dea32b3ad2dd56d658eb24ab200f357dd8b30fa9e5c19d064e67f86193
-
SHA512
eb1979369eb65d2b1da4c34bfa08fe1b5b80ee489db34b201e26b62f136da004f5a1a5d6645c6e4f4953c223f04a194bf4552477617427ce6e7dfe8516ad3029
-
SSDEEP
98304:UPxBho603JCmPYTsolJIkk64sQt1JWBq3B33I33KqmvwwTtE:UJBWRJgTKkk64sQt1JWBq3B33I33KqmF
Malware Config
Signatures
Files
-
358894dea32b3ad2dd56d658eb24ab200f357dd8b30fa9e5c19d064e67f86193.exe windows x86
3f23880c2f57492b198da9ac7454f34f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
msvfw32
DrawDibOpen
DrawDibSetPalette
DrawDibRealize
DrawDibClose
DrawDibDraw
mpr
WNetDisconnectDialog1A
WNetOpenEnumA
WNetEnumResourceA
WNetCloseEnum
WNetCancelConnection2A
WNetAddConnection2A
kernel32
GetCommandLineA
RaiseException
GetACP
TerminateProcess
HeapReAlloc
HeapSize
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
GetStartupInfoA
LCMapStringW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
EnumResourceTypesA
EnumResourceNamesA
EnumResourceLanguagesA
GetPrivateProfileSectionNamesA
InterlockedExchange
GetSystemTimeAsFileTime
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetCurrentDirectoryA
FindResourceExA
GetShortPathNameA
GetStringTypeExA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
GetDiskFreeSpaceA
GetFileTime
GetFullPathNameA
GetTempFileNameA
lstrcmpA
GetCurrentThread
FileTimeToLocalFileTime
FileTimeToSystemTime
GetThreadLocale
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringA
GetPrivateProfileIntA
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LockResource
GlobalFree
FindNextFileA
SetFileTime
GetFileAttributesA
SetFileAttributesA
ExpandEnvironmentStringsA
ReadFile
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateMutexA
ReleaseMutex
InterlockedDecrement
InterlockedIncrement
CreateFileA
CreateDirectoryA
GetFileSize
MoveFileA
SetFilePointer
WriteFile
GetExitCodeProcess
CopyFileA
MoveFileExA
GetModuleHandleA
GetVersionExA
OpenProcess
GetProcessHeap
HeapAlloc
HeapFree
FormatMessageA
lstrlenW
lstrcpyW
lstrcatW
ResetEvent
GetModuleFileNameA
GetCurrentProcessId
ExitProcess
CreateProcessA
LoadLibraryExA
GetSystemDirectoryA
WritePrivateProfileStringA
GetCurrentThreadId
FindFirstFileA
FindClose
MulDiv
GlobalSize
GetTempPathA
DeleteFileA
FindResourceA
SizeofResource
LoadResource
lstrcpynA
lstrcmpiA
GetTickCount
GetComputerNameA
GlobalAlloc
GlobalLock
GlobalUnlock
LocalAlloc
LocalFree
lstrlenA
CreateEventA
CreateThread
SetThreadPriority
GetCurrentProcess
DuplicateHandle
ResumeThread
GetExitCodeThread
SetEvent
TerminateThread
lstrcatA
GetLastError
SetLastError
LoadLibraryA
GetProcAddress
lstrcpyA
WaitForSingleObject
FreeLibrary
CloseHandle
Sleep
ExitThread
LCMapStringA
user32
InsertMenuA
CopyAcceleratorTableA
GetSysColorBrush
GetDialogBaseUnits
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
MapDialogRect
WindowFromPoint
GetWindowThreadProcessId
WaitMessage
SetCapture
IsRectEmpty
GetMessageA
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
TranslateAcceleratorA
LoadAcceleratorsA
SetRect
CharNextA
GrayStringA
TabbedTextOutA
GetWindowDC
ClientToScreen
wvsprintfA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemTextA
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
InvertRect
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
IntersectRect
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
IsWindowEnabled
DrawFrameControl
FillRect
InflateRect
BeginPaint
EndPaint
CreateWindowExA
DestroyWindow
RegisterClassExA
GetParent
LoadImageA
UnregisterClassA
DefWindowProcA
MoveWindow
GetDlgItem
DrawIcon
GetSysColor
LoadIconA
EnumWindows
GetClassNameA
PeekMessageA
TranslateMessage
DispatchMessageA
GetSystemMenu
CallNextHookEx
GetWindow
SetWindowsHookExA
UnhookWindowsHookEx
wsprintfW
FindWindowA
LoadStringA
DrawEdge
ReleaseCapture
LockWindowUpdate
SetRectEmpty
IsIconic
GetDesktopWindow
BringWindowToTop
SetForegroundWindow
GetLastActivePopup
RedrawWindow
CallWindowProcA
IsWindowVisible
SetCursorPos
GetWindowLongA
SetWindowLongA
LoadBitmapA
DrawTextA
SetWindowPos
ShowWindow
IsClipboardFormatAvailable
GetDC
ReleaseDC
CreatePopupMenu
AppendMenuA
SetParent
GetDCEx
PostThreadMessageA
GetNextDlgGroupItem
DestroyIcon
DeleteMenu
CharUpperA
GetTabbedTextExtentA
SetWindowPlacement
GetMenuStringA
GetFocus
GetKeyState
ToAsciiEx
ToAscii
GetKeyboardState
ScreenToClient
GetKeyboardLayout
GetKeyboardLayoutList
LoadKeyboardLayoutA
ActivateKeyboardLayout
OffsetRect
DrawMenuBar
TranslateMDISysAccel
DefFrameProcA
GetDoubleClickTime
GetClipboardFormatNameA
UnionRect
GetCursor
IsWindowUnicode
GetWindowLongW
SetWindowLongW
GetMenuStringW
LookupIconIdFromDirectoryEx
SendMessageTimeoutA
SetWindowRgn
IsZoomed
CreateIconIndirect
GetIconInfo
DrawStateA
GetAsyncKeyState
GetCursorPos
PtInRect
LoadCursorA
SetCursor
InvalidateRect
CreateCursor
CreateIcon
ValidateRect
EqualRect
GetForegroundWindow
FlashWindow
MessageBeep
ChangeClipboardChain
UnloadKeyboardLayout
DestroyCursor
SetClipboardViewer
RegisterClipboardFormatA
DrawIconEx
GetClipboardOwner
GetPriorityClipboardFormat
GetClipboardData
wsprintfA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
MessageBoxA
GetKeyboardLayoutNameA
GetSystemMetrics
CopyRect
SystemParametersInfoA
SetTimer
SetFocus
UpdateWindow
KillTimer
CreateIconFromResourceEx
CreateAcceleratorTableA
MapVirtualKeyExA
GetKeyNameTextA
IsCharLowerA
DestroyAcceleratorTable
GetWindowRgn
HideCaret
ShowCaret
MapVirtualKeyA
IsMenu
GetMenuDefaultItem
GetMenuItemInfoA
CopyIcon
DrawFocusRect
PostMessageA
GetClientRect
GetWindowRect
IsWindow
SendMessageA
RegisterWindowMessageA
EnableWindow
GetCapture
gdi32
GetViewportExtEx
GetWindowExtEx
CreatePen
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
Rectangle
DPtoLP
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
CreateDCA
LPtoDP
CreateRectRgnIndirect
SetRectRgn
CombineRgn
CreateFontIndirectA
GetTextMetricsA
CopyMetaFileA
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetCharWidthA
GetWindowOrgEx
EnumFontFamiliesExA
RoundRect
CreatePolygonRgn
GetRgnBox
Ellipse
ExtSelectClipRgn
SetTextColor
GetTextExtentPoint32A
CreateFontA
DeleteDC
CreateDIBSection
CreateCompatibleDC
SelectObject
PatBlt
GetDeviceCaps
CreateHalftonePalette
RealizePalette
SetBrushOrgEx
StretchDIBits
CreatePalette
DeleteObject
BitBlt
GetStockObject
GetMapMode
CreateSolidBrush
ExtFloodFill
GetBitmapBits
ExtCreateRegion
GetDIBits
CreateCompatibleBitmap
PtInRegion
StretchBlt
GetCurrentObject
GetPixel
SetPixel
Polygon
GetCurrentPositionEx
SetTextAlign
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SelectPalette
RestoreDC
SaveDC
StartDocA
CreateBitmap
GetObjectA
SetBkColor
GetClipBox
SetBkMode
CreateRectRgn
comdlg32
CommDlgExtendedError
GetOpenFileNameA
ChooseColorA
PrintDlgA
GetFileTitleA
GetSaveFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegDeleteValueA
RegSetValueExA
RegDeleteKeyA
OpenSCManagerA
OpenServiceA
StartServiceA
CloseServiceHandle
ControlService
OpenProcessToken
GetTokenInformation
LookupAccountSidA
RegCreateKeyExA
RegConnectRegistryA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetUserNameA
RegCreateKeyA
shell32
SHGetFileInfoA
DragFinish
DragAcceptFiles
ShellExecuteExA
SHGetMalloc
SHGetPathFromIDListA
DragQueryFileA
ShellExecuteA
SHGetSpecialFolderLocation
ExtractIconA
oledlg
ord1
ord8
ole32
OleDuplicateData
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CoGetClassObject
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoCreateInstance
ReleaseStgMedium
OleGetClipboard
oleaut32
VariantCopy
SysAllocStringByteLen
SysStringByteLen
VarDateFromStr
VarBstrFromDate
SafeArrayGetDim
VariantTimeToSystemTime
SysStringLen
LoadTypeLi
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringLen
SysAllocString
VariantClear
SysFreeString
VariantChangeType
VariantChangeTypeEx
OleLoadPicturePath
wsock32
accept
listen
connect
htons
ioctlsocket
htonl
bind
shutdown
getpeername
socket
setsockopt
WSACleanup
WSAStartup
gethostname
gethostbyname
inet_addr
WSASetLastError
send
recv
WSAGetLastError
getsockname
inet_ntoa
closesocket
winmm
PlaySoundA
Sections
.code Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 243KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0002E72F Size: 186KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE