Static task
static1
Behavioral task
behavioral1
Sample
87ec3db034e39e9f044c9d6067dd4b1499b4b0f72e021f907ccabc05e32f89a1.exe
Resource
win7-20220812-en
General
-
Target
87ec3db034e39e9f044c9d6067dd4b1499b4b0f72e021f907ccabc05e32f89a1
-
Size
486KB
-
MD5
6aa632abd43abd87a11d83722cb6a72b
-
SHA1
33d7a72d100886763de68c2186b2db946aae4c67
-
SHA256
87ec3db034e39e9f044c9d6067dd4b1499b4b0f72e021f907ccabc05e32f89a1
-
SHA512
8ffb52c1cdba419b7915ab002f924c63b2497e78f559ab9f28a6e8ed64e3020cafe272be7d984dba8ab4dd979ce44d6ec9039ce046482e7bb940f999741ae225
-
SSDEEP
6144:35RqpwjUvGtOBjyiToJv2W62yEvp1/oLf/OJ8wbAllCnwfzHRIBn:3Xq/vGt3ikJv2W62XvjwIBgxAn
Malware Config
Signatures
Files
-
87ec3db034e39e9f044c9d6067dd4b1499b4b0f72e021f907ccabc05e32f89a1.exe windows x86
d747ab05c0368d1cc2de99ba8d86acbf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
PropertySheetA
PropertySheetW
ImageList_ReplaceIcon
InitCommonControlsEx
CreateToolbarEx
CreateStatusWindowW
ord17
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
comdlg32
GetOpenFileNameA
GetOpenFileNameW
mpr
WNetOpenEnumA
WNetOpenEnumW
WNetCloseEnum
WNetEnumResourceA
WNetEnumResourceW
WNetGetResourceParentA
WNetGetResourceParentW
WNetGetResourceInformationA
WNetAddConnection2W
WNetAddConnection2A
WNetGetResourceInformationW
gdi32
DeleteObject
oleaut32
VariantCopy
VariantClear
SysAllocString
SysFreeString
SysAllocStringByteLen
SysStringByteLen
ole32
OleInitialize
OleUninitialize
CoTaskMemFree
RegisterDragDrop
CoInitialize
CoCreateInstance
ReleaseStgMedium
RevokeDragDrop
DoDragDrop
CoTaskMemAlloc
CoUninitialize
user32
GetDialogBaseUnits
SystemParametersInfoA
DialogBoxParamA
GetWindowTextLengthW
GetWindowTextW
GetWindowTextLengthA
GetWindowTextA
SetWindowTextW
SetWindowTextA
CreateWindowExW
RegisterClassW
RegisterClassA
SendMessageW
LoadStringW
LoadStringA
AppendMenuW
AppendMenuA
InsertMenuItemA
InsertMenuItemW
SetMenuItemInfoA
SetMenuItemInfoW
GetMenuItemInfoA
GetMenuItemInfoW
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
CharLowerW
CharUpperW
CharLowerA
CharUpperA
DestroyIcon
KillTimer
SetCursor
wsprintfA
SetDlgItemTextA
MapDialogRect
ClientToScreen
GetMenuItemCount
TrackPopupMenuEx
GetCursorPos
ScreenToClient
IsWindowEnabled
ChildWindowFromPointEx
WindowFromPoint
RegisterClipboardFormatA
PostMessageA
InvalidateRect
UpdateWindow
SetWindowLongW
SetTimer
CallWindowProcW
CallWindowProcA
MapVirtualKeyA
GetKeyState
EnableMenuItem
RemoveMenu
CheckMenuRadioItem
CheckMenuItem
GetMenu
LoadMenuA
SetMenu
DrawMenuBar
CreatePopupMenu
GetSubMenu
DestroyMenu
GetParent
IsDlgButtonChecked
CheckDlgButton
CheckRadioButton
GetDlgItem
GetWindowRect
MoveWindow
IsZoomed
GetClientRect
MessageBoxW
ReleaseCapture
SetCapture
GetCapture
DefWindowProcW
DefWindowProcA
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
DispatchMessageA
LoadIconA
LoadCursorA
GetWindowPlacement
SetWindowPlacement
PostQuitMessage
EndDialog
EnableWindow
ShowWindow
LoadBitmapA
CreateWindowExA
DestroyWindow
GetWindowLongA
SetWindowLongA
SetFocus
SendMessageA
DialogBoxParamW
GetClassInfoA
GetClassInfoW
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegSetValueExW
RegQueryValueExA
RegQueryValueExW
GetUserNameW
GetUserNameA
shell32
ShellExecuteA
SHGetSpecialFolderLocation
SHGetMalloc
ExtractIconExW
SHGetDesktopFolder
ShellExecuteExA
SHGetFileInfoA
SHChangeNotify
DragFinish
DragQueryFileA
SHGetPathFromIDListA
DragQueryFileW
SHBrowseForFolderA
SHFileOperationA
msvcrt
memcmp
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_controlfp
__set_app_type
_acmdln
exit
_XcptFilter
_exit
?terminate@@YAXXZ
_onexit
__dllonexit
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
strlen
rand
srand
free
__p__fmode
malloc
wcslen
__CxxFrameHandler
_CxxThrowException
__p__commode
_purecall
memset
memmove
memcpy
_wcsicmp
kernel32
GetStartupInfoA
InitializeCriticalSection
SetEvent
VirtualFree
VirtualAlloc
AreFileApisANSI
CreateEventA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetStdHandle
HeapAlloc
GetProcessHeap
HeapFree
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDriveTypeA
GetDriveTypeW
GetVolumeInformationA
GetVolumeInformationW
GetSystemTime
SystemTimeToFileTime
FileTimeToDosDateTime
FileTimeToSystemTime
CreateProcessA
CreateProcessW
SetEndOfFile
WriteFile
ReadFile
DeviceIoControl
SetFilePointer
GetFileSize
CreateFileA
GetLogicalDriveStringsA
GetLogicalDriveStringsW
FindFirstChangeNotificationA
FindFirstChangeNotificationW
FindCloseChangeNotification
FindNextFileA
FindNextFileW
FindFirstFileA
FindFirstFileW
FindClose
GetCurrentThreadId
GetCurrentProcessId
GetTempPathA
GetTempPathW
GetCurrentDirectoryW
GetFullPathNameA
GetFullPathNameW
DeleteFileA
DeleteFileW
CreateDirectoryA
CreateDirectoryW
MoveFileA
MoveFileW
RemoveDirectoryA
RemoveDirectoryW
SetFileAttributesA
SetFileAttributesW
SetLastError
CreateFileW
SetFileTime
GetWindowsDirectoryA
GetWindowsDirectoryW
FormatMessageA
FormatMessageW
LocalFree
GetModuleFileNameA
GetModuleFileNameW
LoadLibraryW
LoadLibraryExA
LoadLibraryExW
WideCharToMultiByte
MultiByteToWideChar
ExpandEnvironmentStringsW
GetCurrentProcess
SetPriorityClass
lstrcatA
lstrlenA
GetTickCount
Sleep
FileTimeToLocalFileTime
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenProcess
WaitForMultipleObjects
CloseHandle
CompareFileTime
GlobalAlloc
GlobalFree
GlobalSize
GlobalLock
GlobalUnlock
GetSystemDefaultLangID
GetUserDefaultLangID
GetModuleHandleW
CopyFileW
GetModuleHandleA
CopyFileA
WaitForSingleObject
FindNextChangeNotification
GetCompressedFileSizeW
LoadLibraryA
FreeLibrary
GetCommandLineW
GetVersionExA
GetProcAddress
DeleteCriticalSection
GetLastError
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
Sections
.text Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mrdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE