Static task
static1
Behavioral task
behavioral1
Sample
b468ff2e6504f0572822bdf0d0f8d753cadfd883a1418fb61bd65e0cf2cddbd1.exe
Resource
win7-20220812-en
General
-
Target
b468ff2e6504f0572822bdf0d0f8d753cadfd883a1418fb61bd65e0cf2cddbd1
-
Size
416KB
-
MD5
628f997fc3900842954e0d7fb0fcb340
-
SHA1
140f1bf07a4d2abedae51af11ab7c2dd0a167c74
-
SHA256
b468ff2e6504f0572822bdf0d0f8d753cadfd883a1418fb61bd65e0cf2cddbd1
-
SHA512
6ddf2c6ce811f293f5e8f1ceba4351bad7a23bbc68c67374c9ca8b13832ace37c36a2a9de2a7dd5cbd9223b9fc902f5a7e1329567dd1032756dfa507601b87d0
-
SSDEEP
6144:26DHzY67LSIbetMHz+Ij0fh8a0yEZW9kKLSqOLoIn5tifXQft8Rhga+QZj91+cbB:NDHnSIbetMTRjKNFkKWyRbuqPjH9
Malware Config
Signatures
Files
-
b468ff2e6504f0572822bdf0d0f8d753cadfd883a1418fb61bd65e0cf2cddbd1.exe windows x86
ef926251558ec3ec7988b4bc948a4da5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
ExitThread
CreateThread
TerminateProcess
GetCommandLineA
HeapReAlloc
HeapSize
GetCurrentProcessId
GetTimeZoneInformation
VirtualFree
IsBadWritePtr
UnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
VirtualAlloc
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
GetVersionExA
VirtualProtect
RtlUnwind
ExitProcess
GetOEMCP
GetCPInfo
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
InterlockedIncrement
GetCurrentDirectoryA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GlobalFlags
ReleaseMutex
InterlockedDecrement
LocalAlloc
LocalLock
LocalUnlock
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
GetShortPathNameA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
MoveFileA
GlobalAddAtomA
MulDiv
lstrcpynA
LocalFree
GetCurrentThread
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadLibraryA
lstrcmpA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetModuleFileNameA
GetLocalTime
HeapCreate
HeapAlloc
HeapFree
HeapDestroy
FormatMessageA
SetLastError
GetStartupInfoA
CreateProcessA
Sleep
CreateEventA
CreateFileMappingA
MapViewOfFile
SetEvent
WaitForSingleObject
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
GetWindowsDirectoryW
RaiseException
DeleteCriticalSection
InitializeCriticalSection
LoadResource
LockResource
SizeofResource
FindResourceA
CloseHandle
GetCurrentThreadId
DeleteFileA
CreateMutexA
GetLastError
lstrlenA
lstrcmpiA
GetStringTypeExA
WideCharToMultiByte
CompareStringA
CompareStringW
MultiByteToWideChar
GetVersion
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
SetHandleCount
user32
CopyAcceleratorTableA
SetCapture
SetWindowRgn
DrawIcon
GetMenuItemInfoA
InflateRect
DestroyIcon
GetSysColorBrush
WindowFromPoint
KillTimer
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
IsZoomed
LoadMenuA
DestroyMenu
UnpackDDElParam
ReuseDDElParam
ReleaseCapture
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
SetMenu
TranslateAcceleratorA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
LoadCursorA
DestroyCursor
GetDC
ReleaseDC
InvalidateRect
GetTabbedTextExtentA
SetRect
MessageBeep
IsClipboardFormatAvailable
ShowWindow
IsDialogMessageA
SetDlgItemTextA
RegisterWindowMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
CreateMenu
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetMenu
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
PtInRect
GetWindow
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
MessageBoxA
GetLastActivePopup
ShowOwnedPopups
SetCursor
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
RegisterClipboardFormatA
LockWindowUpdate
GetActiveWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
LoadIconA
SetTimer
GetDCEx
BeginDeferWindowPos
PostThreadMessageA
GetDesktopWindow
PostMessageA
PostQuitMessage
wsprintfA
GetClassInfoA
GetParent
GetFocus
UpdateWindow
GetClientRect
GetWindowRect
CreateWindowExA
SetWindowTextA
SetWindowLongA
SetWindowPos
DestroyWindow
UnregisterClassA
EnableWindow
BringWindowToTop
FindWindowA
wvsprintfA
SendMessageA
CharUpperA
EndDeferWindowPos
gdi32
CreatePatternBrush
CreateCompatibleDC
CreateSolidBrush
CreateCompatibleBitmap
StretchDIBits
CreateFontA
GetTextExtentPoint32A
GetBkColor
CreateEllipticRgn
LPtoDP
Ellipse
GetNearestColor
GetBkMode
GetPolyFillMode
GetStretchBltMode
GetTextColor
GetTextAlign
GetTextFaceA
GetWindowOrgEx
CreateRectRgnIndirect
SetRectRgn
CombineRgn
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
GetROP2
GetDeviceCaps
DeleteDC
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
StartDocA
PatBlt
Rectangle
GetViewportOrgEx
CreatePen
GetStockObject
CreateFontIndirectA
GetCharWidthA
GetTextMetricsA
DPtoLP
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
CreateDCA
comdlg32
FindTextA
ReplaceTextA
PrintDlgA
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
GetJobA
advapi32
GetFileSecurityA
RegOpenKeyExA
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegSetValueExA
RegSetValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegCreateKeyA
RegDeleteValueA
RegCloseKey
SetFileSecurityA
RegQueryValueA
shell32
SHGetFileInfoA
DragFinish
DragQueryFileA
ExtractIconA
ShellExecuteA
comctl32
ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy
shlwapi
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
ole32
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
oleaut32
VariantClear
SysAllocStringLen
VariantInit
VariantChangeType
Sections
.text Size: 228KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.trdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE