Static task
static1
Behavioral task
behavioral1
Sample
9086b2ab73d5db2c06d44a6e46712a84a13721861593bb78cae1ddebcbc8942c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9086b2ab73d5db2c06d44a6e46712a84a13721861593bb78cae1ddebcbc8942c.exe
Resource
win10v2004-20220812-en
General
-
Target
9086b2ab73d5db2c06d44a6e46712a84a13721861593bb78cae1ddebcbc8942c
-
Size
452KB
-
MD5
6209ef447b7f499805177f3688367340
-
SHA1
4e2cf1184b823fec27ea0902ace158872f4e8a12
-
SHA256
9086b2ab73d5db2c06d44a6e46712a84a13721861593bb78cae1ddebcbc8942c
-
SHA512
d02ca93218106ee7c1d4c34c9f803cda1e6c78fec7fc338c9ddef16e7a72816e2b9d20eac8ae2dabffcfb5473d82fe25c54463990f6c1c83a25e2aed2ec92e9a
-
SSDEEP
12288:rexW7hiK/c/ulz1Ah4QcxC98pq6yO+4opZ59WTRWSDPaGZ:imNQcxO8pq63+4oH5kTo2PaGZ
Malware Config
Signatures
Files
-
9086b2ab73d5db2c06d44a6e46712a84a13721861593bb78cae1ddebcbc8942c.exe windows x86
acd460fe5853bbd5515a819b5293fdad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
GetTickCount
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapFree
HeapReAlloc
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcessHeap
GetStartupInfoA
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
HeapSize
SetStdHandle
GetFileType
VirtualFree
HeapDestroy
GetStdHandle
GetConsoleCP
GetConsoleMode
Sleep
GetACP
IsValidCodePage
SetHandleCount
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetFileTime
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToSystemTime
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
LoadLibraryA
lstrcmpW
GetModuleHandleA
GetProcAddress
GetVersionExA
WaitForSingleObject
GetCurrentThreadId
SetLastError
GlobalFree
FormatMessageA
LocalFree
FindFirstFileA
CreateFileA
FindClose
FileTimeToLocalFileTime
MulDiv
GlobalAlloc
GlobalUnlock
FreeResource
GlobalLock
SetCurrentDirectoryA
CreateProcessA
GetFileAttributesA
SizeofResource
GetPrivateProfileIntA
LockResource
GetPrivateProfileStringA
GetCommandLineA
FindResourceA
GetModuleFileNameA
LoadResource
CloseHandle
CreateMutexA
WritePrivateProfileStringA
CompareStringA
MultiByteToWideChar
InterlockedExchange
GetVersion
CompareStringW
WideCharToMultiByte
lstrlenA
GetLastError
HeapCreate
user32
RegisterClipboardFormatA
PostThreadMessageA
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetForegroundWindow
UpdateWindow
GetMenu
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
CopyRect
GetSysColorBrush
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetActiveWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
MessageBoxExA
LoadBitmapA
WindowFromPoint
UnpackDDElParam
GrayStringA
ReuseDDElParam
GetParent
SetCursor
EnableWindow
InvalidateRect
SendMessageA
LoadIconA
SetCapture
LoadImageA
ReleaseCapture
GetWindowRect
GetClientRect
SetWindowRgn
GetDesktopWindow
MessageBoxA
CharUpperA
UnregisterClassA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableA
GetMenuItemInfoA
InflateRect
LoadCursorA
LoadMenuA
DestroyMenu
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorA
CharNextA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GetWindowThreadProcessId
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
PtInRect
CheckMenuItem
gdi32
SetMapMode
DeleteObject
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
GetStockObject
CreateSolidBrush
GetBkColor
GetTextColor
GetTextExtentPoint32A
CreateFontIndirectA
CreateRectRgnIndirect
GetRgnBox
GetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
CreateBitmap
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateDCA
DeleteDC
GetDIBits
GetObjectA
ExtCreateRegion
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
shell32
DragFinish
DragQueryFileA
comctl32
InitCommonControlsEx
_TrackMouseEvent
shlwapi
PathFindExtensionA
PathAddBackslashA
PathRemoveFileSpecA
PathFindFileNameA
PathStripToRootA
PathAppendA
PathIsUNCA
oledlg
ord8
ole32
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
StgOpenStorageOnILockBytes
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemFree
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
oleaut32
VariantClear
SysFreeString
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
OleLoadPicture
wininet
InternetCloseHandle
ws2_32
WSACleanup
closesocket
WSAStartup
Sections
.text Size: 292KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ