Static task
static1
Behavioral task
behavioral1
Sample
8d7e5b86ed1ddf557f83cd0bf64fe86958b9ecae9c15cbc51b4e7b334c7a5f2f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8d7e5b86ed1ddf557f83cd0bf64fe86958b9ecae9c15cbc51b4e7b334c7a5f2f.exe
Resource
win10v2004-20220901-en
General
-
Target
8d7e5b86ed1ddf557f83cd0bf64fe86958b9ecae9c15cbc51b4e7b334c7a5f2f
-
Size
440KB
-
MD5
6da5ba619524750ce5313411f569293d
-
SHA1
236308023cde5c466bd3aed6d1de6325d3c163c4
-
SHA256
8d7e5b86ed1ddf557f83cd0bf64fe86958b9ecae9c15cbc51b4e7b334c7a5f2f
-
SHA512
35a44bb1b0c1ea4328a54cf4fce269245f53147b1b701b9c636db71848b718bc48942153e657a7fd23280dfe94d9aba8116d0534f512349a64c2ede8bb166e94
-
SSDEEP
6144:DFSLe8/HC45kgPM5LRwF9HtUPVQxiHzMq25ZmMVnSEUZGrI7eboF8qizR:DFSLeidHuL49HutQxiHzMq2dnSEbrI7
Malware Config
Signatures
Files
-
8d7e5b86ed1ddf557f83cd0bf64fe86958b9ecae9c15cbc51b4e7b334c7a5f2f.exe windows x86
1c01dd90aacb73b65574879e69bce5b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
HeapFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetCommandLineA
GetSystemTime
InterlockedIncrement
LCMapStringA
GetModuleHandleW
WideCharToMultiByte
GetCurrentProcessId
InitializeCriticalSection
GetCommandLineW
LeaveCriticalSection
GetModuleFileNameA
GetStringTypeW
GetCurrentThreadId
TerminateProcess
TlsGetValue
GetLocalTime
GetCPInfo
GetEnvironmentStrings
VirtualFree
FreeEnvironmentStringsW
ExitProcess
GetModuleFileNameW
GetModuleHandleA
SetHandleCount
WriteFile
SetLastError
TlsSetValue
CloseHandle
FatalAppExitA
HeapAlloc
SetStdHandle
GetTimeZoneInformation
GetProcAddress
GetStringTypeA
ReadFile
HeapReAlloc
InterlockedDecrement
GetFileType
MultiByteToWideChar
FreeEnvironmentStringsA
IsBadWritePtr
RtlUnwind
GetVersion
SetEnvironmentVariableA
HeapCreate
GetStartupInfoA
GetCurrentThread
QueryPerformanceCounter
InterlockedExchange
DeleteCriticalSection
CompareStringA
TlsFree
VirtualQuery
GetCurrentProcess
LoadLibraryA
FlushFileBuffers
CreateMutexW
TlsAlloc
UnhandledExceptionFilter
SetFilePointer
GetTickCount
GetLastError
EnterCriticalSection
GetEnvironmentStringsW
GetStdHandle
HeapDestroy
VirtualAlloc
user32
RegisterClassExW
SetFocus
PeekMessageW
GetActiveWindow
SetWindowLongW
CreateWindowExW
EnableWindow
DrawTextW
RegisterWindowMessageW
TrackPopupMenu
SetActiveWindow
MessageBoxW
KillTimer
MoveWindow
GetDesktopWindow
GetSystemMetrics
UpdateWindow
RedrawWindow
InvalidateRect
OpenClipboard
SetWindowPos
EnableMenuItem
SetPropW
CheckMenuItem
UnregisterClassA
GetMenu
RemovePropW
GetWindowRect
SetScrollInfo
SetDlgItemInt
GetDC
IsZoomed
UnionRect
SetCursor
GetMenuItemInfoW
FillRect
SetMenuItemBitmaps
ClientToScreen
ShowWindow
GetWindowTextLengthW
SendDlgItemMessageA
DestroyWindow
CheckDlgButton
RegisterClassW
OffsetRect
BeginDeferWindowPos
SendMessageW
ReleaseCapture
DestroyMenu
GetCapture
GetSysColorBrush
PtInRect
IsDialogMessageW
GetCursorPos
MapWindowPoints
DefWindowProcW
GetKeyState
GetPropW
GetSystemMenu
SetForegroundWindow
GetWindowTextA
TranslateMessage
SetCapture
IsMenu
PostThreadMessageW
IsWindowVisible
EndDeferWindowPos
GetScrollInfo
GetParent
IsClipboardFormatAvailable
GetWindow
MapDialogRect
IsIconic
WindowFromPoint
ole32
WriteFmtUserTypeStg
SetConvertStg
CoTreatAsClass
CoCreateInstance
OleLockRunning
CreateGenericComposite
OleInitialize
OleLoad
CreateFileMoniker
ReadFmtUserTypeStg
CoTaskMemFree
StgOpenStorageOnILockBytes
StringFromCLSID
OleSetContainedObject
CoGetClassObject
CoDisconnectObject
CoRevokeClassObject
OleDuplicateData
OleCreateStaticFromData
ReadClassStg
CreateOleAdviseHolder
oleaut32
LoadTypeLi
wsock32
WSACleanup
gdi32
GetTextExtentPointA
GetCharWidthA
OffsetViewportOrgEx
PtInRegion
CreatePalette
GetTextAlign
GetBkColor
EnumFontFamiliesExA
GetClipRgn
SetStretchBltMode
PtVisible
CreatePatternBrush
StretchBlt
GetPixel
CreateDIBSection
SelectObject
BitBlt
SetPaletteEntries
GetClipBox
CreateFontIndirectA
OffsetWindowOrgEx
ExtCreateRegion
SetViewportExtEx
Rectangle
LPtoDP
SetTextAlign
RectInRegion
DeleteObject
ScaleWindowExtEx
ExtFloodFill
CreateRectRgn
CreateEllipticRgn
SetBrushOrgEx
StartPage
SetTextColor
ExtCreatePen
SetWindowOrgEx
GetFontData
GetTextExtentPoint32A
FrameRgn
Polygon
CreateCompatibleDC
GetTextColor
CreatePen
RectVisible
GetMapMode
PatBlt
CreateDIBitmap
SetViewportOrgEx
SaveDC
EndDoc
FillPath
DeleteDC
SelectClipRgn
CreateSolidBrush
CopyMetaFileA
GetRegionData
GetTextFaceA
CreateBitmap
CreateHatchBrush
RealizePalette
CombineRgn
GetTextMetricsA
CreatePolygonRgn
SetWindowExtEx
SetPolyFillMode
SetDIBitsToDevice
GetWindowExtEx
SelectPalette
Polyline
EndPage
ExtTextOutA
ScaleViewportExtEx
SetPixel
GetCurrentObject
GetStockObject
TextOutA
CreateCompatibleBitmap
RestoreDC
GetRgnBox
FillRgn
MoveToEx
RoundRect
CreateDCA
GetNearestPaletteIndex
SetBkColor
Pie
StretchDIBits
GetObjectA
GetSystemPaletteEntries
comdlg32
GetFileTitleA
GetOpenFileNameA
shlwapi
StrFormatKBSizeW
StrStrIW
PathCanonicalizeW
StrFormatByteSizeW
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
advapi32
GetUserNameW
RegQueryValueExW
RegCloseKey
SetFileSecurityW
RegOpenKeyW
RegCreateKeyW
RegOpenKeyExW
RegQueryValueW
RegDeleteValueW
SetSecurityDescriptorDacl
RegQueryInfoKeyW
InitializeSecurityDescriptor
RegDeleteKeyW
GetFileSecurityW
OpenProcessToken
RegCreateKeyExW
RegEnumValueW
RegQueryValueExA
RegEnumKeyW
RegSetValueExW
RegOpenKeyExA
RegEnumKeyExW
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 248KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ