Static task
static1
Behavioral task
behavioral1
Sample
59bf0372134dcaa8b687a2b51c5bbd09fc17ee7808d591d3582809bc3d6bafe1.exe
Resource
win7-20220901-en
General
-
Target
59bf0372134dcaa8b687a2b51c5bbd09fc17ee7808d591d3582809bc3d6bafe1
-
Size
435KB
-
MD5
64eee7bb010678f523efae035529cc51
-
SHA1
41dc2e44ab5bf7d1e5d914bc9e27df8a0b67cbf9
-
SHA256
59bf0372134dcaa8b687a2b51c5bbd09fc17ee7808d591d3582809bc3d6bafe1
-
SHA512
b3abb3ac1ac589101fd8f4cdd0150d4636e23cb7ab670a4ff503e6790184335546d742c5f398b38ba44406ee4e56aad19440167903798f2e0012891f8a280402
-
SSDEEP
6144:swVGfqWXkqXhjnjLHoQ897nhd165Xy6blgFuA1h3RCoD+6mGZ4zytbLc:rqXhjnj189zhSl3GuA1Hp4zkw
Malware Config
Signatures
Files
-
59bf0372134dcaa8b687a2b51c5bbd09fc17ee7808d591d3582809bc3d6bafe1.exe windows x86
8640089761bd2bdd1167d4916fd61672
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
VirtualAlloc
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
SetUnhandledExceptionFilter
HeapSize
HeapReAlloc
RaiseException
CreateThread
ExitThread
ExitProcess
Sleep
HeapFree
HeapAlloc
RtlUnwind
GetStartupInfoW
GetProcessHeap
ExpandEnvironmentStringsA
LoadLibraryExW
SizeofResource
LockResource
LoadResource
FindResourceW
LoadLibraryW
GetCommandLineW
CloseHandle
GetExitCodeProcess
WaitForSingleObject
GetModuleFileNameW
CreateProcessW
GetProcAddress
GetModuleHandleW
GlobalAlloc
lstrcmpW
GlobalLock
InterlockedExchange
WideCharToMultiByte
MultiByteToWideChar
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
SetThreadPriority
ResumeThread
SetEvent
SuspendThread
CreateEventW
GlobalAddAtomW
SetLastError
GetLastError
GetCurrentProcessId
MulDiv
lstrlenW
LocalFree
FormatMessageW
GlobalUnlock
GlobalFree
FreeLibrary
InterlockedDecrement
GetFileAttributesW
SetFileAttributesW
SetErrorMode
lstrlenA
CreateFileW
GetCurrentProcess
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileW
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
GetVersionExA
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetPrivateProfileStringW
WritePrivateProfileStringW
GetModuleHandleA
FreeResource
GlobalFindAtomW
GetVersionExW
CompareStringW
LoadLibraryA
user32
DestroyMenu
UnregisterClassW
GetSysColorBrush
LoadCursorW
EndPaint
BeginPaint
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
ReleaseDC
GetDC
ShowWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetWindowTextW
GetForegroundWindow
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
SendMessageW
LoadIconW
LoadImageW
MessageBoxW
MapWindowPoints
SetMenu
SetForegroundWindow
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
DrawIcon
IsIconic
GetClientRect
SetTimer
EnableWindow
GetSystemMetrics
PostQuitMessage
PostMessageW
ValidateRect
GetCursorPos
PeekMessageW
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageW
LoadStringW
TranslateMessage
GetMessageW
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
CopyRect
PtInRect
GetMenu
SetWindowLongW
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
UnhookWindowsHookEx
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
SetWindowsHookExW
CallNextHookEx
gdi32
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetStockObject
SetMapMode
DeleteObject
RestoreDC
SaveDC
GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
DeleteDC
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
InitializeAcl
RegQueryValueExA
ImpersonateSelf
OpenThreadToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
RevertToSelf
FreeSid
OpenProcessToken
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExA
shell32
ShellExecuteW
comctl32
ord17
shlwapi
PathFindFileNameW
PathFindExtensionW
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.prdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE