Static task
static1
Behavioral task
behavioral1
Sample
9ab68c1eeccb2c9489445bdd80b7b6a9c9cd744ed73a33f2f7a3d137f5e663f5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ab68c1eeccb2c9489445bdd80b7b6a9c9cd744ed73a33f2f7a3d137f5e663f5.exe
Resource
win10v2004-20220812-en
General
-
Target
9ab68c1eeccb2c9489445bdd80b7b6a9c9cd744ed73a33f2f7a3d137f5e663f5
-
Size
814KB
-
MD5
62258c2611a597bf9302350b6b350120
-
SHA1
61f7810b9d2966c26a2356a68e0106ecd5ff1f92
-
SHA256
9ab68c1eeccb2c9489445bdd80b7b6a9c9cd744ed73a33f2f7a3d137f5e663f5
-
SHA512
01e5e6a616364cb9b1d119c1dab17f9cdee0634d514378267b248578f649ae46a075626e95c338bf5f64ba489d964469c6146063126eaf38672ffa945de66068
-
SSDEEP
24576:sK/XeGKRfhXRkgtIut2UkOk2B446Oufv3oi7w0I1b5swRTwtK:sK/XBUQ3okw08TMA
Malware Config
Signatures
Files
-
9ab68c1eeccb2c9489445bdd80b7b6a9c9cd744ed73a33f2f7a3d137f5e663f5.exe windows x86
093e6b73336ede6025b7bc8bfbe1bc5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnmapViewOfFile
SetLastError
GetTickCount
GetCurrentProcessId
SetThreadPriority
CreateEventA
CreateProcessA
MapViewOfFile
CreateFileMappingA
GetSystemInfo
InterlockedIncrement
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
GetProcAddress
LoadLibraryA
IsBadReadPtr
GetModuleHandleA
GetPrivateProfileStringA
VirtualQuery
IsBadWritePtr
SetUnhandledExceptionFilter
FindClose
FindNextFileA
FindFirstFileA
GetCurrentDirectoryA
GetDriveTypeA
GetLogicalDriveStringsA
SetFilePointer
SetEndOfFile
GetFileSize
VirtualFree
VirtualAlloc
GetLocalTime
SetFileAttributesA
GetFileAttributesA
ReadFile
GetWindowsDirectoryA
GetDiskFreeSpaceA
GetComputerNameA
TerminateProcess
GetCurrentProcess
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcpynA
WriteFile
TlsSetValue
ExitThread
FormatMessageA
GetSystemTime
GetStartupInfoA
GetCommandLineA
GetVersion
TlsAlloc
TlsGetValue
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
HeapReAlloc
HeapAlloc
HeapSize
HeapFree
UnhandledExceptionFilter
RtlUnwind
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
RaiseException
FlushFileBuffers
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCurrentThread
CreateFileA
GetCurrentThreadId
CloseHandle
DeleteFileA
GetLastError
Sleep
ExitProcess
InterlockedDecrement
CreateThread
GetTimeZoneInformation
user32
wsprintfA
wvsprintfA
ShowCursor
ReleaseDC
GetDC
GetWindowRect
DialogBoxParamA
EndDialog
SetDlgItemTextA
SetCursorPos
PeekMessageA
ReleaseCapture
DispatchMessageA
TranslateMessage
DestroyWindow
InvalidateRect
GetWindowLongA
SetWindowLongA
PostQuitMessage
DefWindowProcA
GetClassNameA
PostMessageA
LoadIconA
LoadCursorA
LoadImageA
RegisterClassExA
CreateWindowExA
UpdateWindow
GetDesktopWindow
ShowWindow
GetSystemMetrics
SetCapture
WaitForInputIdle
GetForegroundWindow
GetWindow
GetWindowThreadProcessId
FindWindowA
GetLastActivePopup
GetTopWindow
SetFocus
MessageBoxA
SetWindowPos
SetForegroundWindow
gdi32
GetSystemPaletteEntries
GetStockObject
GdiSetBatchLimit
GetDeviceCaps
advapi32
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
GetUserNameA
shell32
SHGetSpecialFolderLocation
ShellExecuteA
SHGetPathFromIDListA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
diabloui
UiArtCallback
UiCreateGameCallback
UiDrawDescCallback
UiMessageBoxCallback
UiSelectGame
UiSoundCallback
UiAuthCallback
UiGetDataCallback
UiCategoryCallback
UiProfileDraw
UiSetupPlayerInfo
UiSelectProvider
UiProgressDialog
UiMainMenuDialog
UiCreditsDialog
UiSelHeroSingDialog
UiSelHeroMultDialog
UiValidPlayerName
UiAppActivate
UiCopyProtError
UiInitialize
UiTitleDialog
UiDestroy
UiCreatePlayerDescription
UiProfileCallback
UiProfileGetString
storm
ord456
ord421
ord454
ord260
ord453
ord458
ord465
ord501
ord354
ord270
ord266
ord422
ord252
ord301
ord258
ord267
ord255
ord257
ord253
ord344
ord351
ord423
ord426
ord352
ord119
ord102
ord462
ord401
ord403
ord424
ord463
ord110
ord106
ord134
ord127
ord121
ord131
ord123
ord107
ord129
ord346
ord101
ord117
ord120
ord271
ord264
ord261
ord451
ord256
ord128
ord268
ord265
ord269
ord357
ord114
ord122
ord115
Sections
.text Size: 481KB - Virtual size: 481KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 211KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.drdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE