Static task
static1
Behavioral task
behavioral1
Sample
f0205d66175e4513b62aa5a923594b8db9c303f5cc189a52959529097a4e5dda.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f0205d66175e4513b62aa5a923594b8db9c303f5cc189a52959529097a4e5dda.exe
Resource
win10v2004-20220812-en
General
-
Target
f0205d66175e4513b62aa5a923594b8db9c303f5cc189a52959529097a4e5dda
-
Size
908KB
-
MD5
7ba6f4739764885e3f5e9ace54413d50
-
SHA1
e7e8e33ad1614f56ca7debd74ac3e60eaa229ce1
-
SHA256
f0205d66175e4513b62aa5a923594b8db9c303f5cc189a52959529097a4e5dda
-
SHA512
e09d783d189f4cf1274067e1cecf25eb1eb173aa0c032783d93e6653c75b1493a7aba1d5f2653a75da5ec9442fd146876460af0f4dee6c9e0f3f2d3369316e40
-
SSDEEP
24576:+OYM8+85oWcQVHfwYPnmWl8T6aPRUefBH6Sok:/N8+ufV/wYPnBajBek
Malware Config
Signatures
Files
-
f0205d66175e4513b62aa5a923594b8db9c303f5cc189a52959529097a4e5dda.exe windows x86
4f06d0e7e1887319c05010a8be789efb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
PlaySoundA
ws2_32
ntohl
WSACleanup
WSAStartup
htons
ntohs
htonl
atl
ord16
ord18
ord20
ord21
ord57
ord32
ord30
ord58
ord17
ord23
kernel32
FindFirstFileA
MultiByteToWideChar
GetModuleFileNameA
LoadLibraryA
FindClose
lstrlenA
SetCurrentDirectoryA
GetPrivateProfileStringA
GetCurrentDirectoryA
GetPrivateProfileIntA
FindResourceA
LockResource
LoadResource
CloseHandle
SetEvent
InterlockedDecrement
CreateEventA
WaitForSingleObject
CreateThread
lstrcmpiA
CreateMutexA
OpenMutexA
DeleteFileA
WideCharToMultiByte
lstrlenW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
InterlockedIncrement
DeleteCriticalSection
GetSystemInfo
FreeLibrary
HeapCreate
GetCommandLineA
HeapAlloc
GetCurrentThreadId
CreateFileA
GetProfileStringA
TlsSetValue
MoveFileA
GlobalReAlloc
UnlockFile
LockFile
SetEndOfFile
InterlockedExchange
GetLocaleInfoW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetVersionExA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
SetStdHandle
IsBadCodePtr
Sleep
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetACP
HeapSize
TerminateProcess
RaiseException
GetLocalTime
GetSystemTime
GetTimeZoneInformation
ExitProcess
GetStartupInfoA
HeapReAlloc
HeapFree
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
TlsGetValue
LocalReAlloc
GlobalFree
FormatMessageA
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
SizeofResource
GlobalFlags
GetProcessVersion
IsBadReadPtr
IsBadWritePtr
GetTickCount
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
GetFileAttributesA
GetShortPathNameA
GetStringTypeExA
GetFullPathNameA
GetThreadLocale
LocalFree
SetFilePointer
FlushFileBuffers
GlobalUnlock
GlobalLock
GetProcAddress
GetModuleHandleA
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcatA
GetVersion
SetLastError
MulDiv
lstrcpynA
lstrcmpA
GetCurrentThread
GlobalAlloc
GetLastError
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
ReadFile
WriteFile
user32
DrawFocusRect
DrawIconEx
GetSysColor
CopyRect
GetWindowLongA
GetSysColorBrush
DrawEdge
WindowFromPoint
GetActiveWindow
GetParent
IsWindow
ShowWindow
LoadStringA
GetSubMenu
ClientToScreen
EnableMenuItem
ModifyMenuA
GetMenuStringA
CharNextA
GetMenuItemCount
DrawTextA
LoadCursorA
OffsetRect
SetRect
ReleaseCapture
SetCapture
GetCapture
SetCursor
RedrawWindow
PostThreadMessageA
GetMenuState
ReleaseDC
CheckMenuItem
SetWindowPos
LoadMenuA
GetMenuItemID
GetDlgItem
SendDlgItemMessageA
SetDlgItemTextA
CreatePopupMenu
IsDialogMessageA
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
GetDlgCtrlID
SetWindowLongA
MoveWindow
IsWindowEnabled
SetFocus
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
EndDialog
GetNextDlgTabItem
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
GetDC
InsertMenuItemA
GetCursorPos
GetLastActivePopup
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
InvalidateRect
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
DefWindowProcA
GetKeyState
SetWindowPlacement
TrackPopupMenu
GetMenu
RegisterClassA
GetClassInfoA
wsprintfA
WinHelpA
IsChild
MessageBoxA
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
SetPropA
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
IsWindowVisible
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
GetFocus
DispatchMessageA
PeekMessageA
MapWindowPoints
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
ValidateRect
TranslateMessage
GetMessageA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
DestroyMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
PostQuitMessage
ShowOwnedPopups
CharUpperA
DestroyCursor
InflateRect
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
CopyAcceleratorTableA
GetClassNameA
DestroyIcon
FindWindowA
GetTabbedTextExtentA
GetNextDlgGroupItem
MessageBeep
GetDCEx
LockWindowUpdate
SetParent
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
RegisterWindowMessageA
LoadIconA
LoadBitmapA
SetWindowRgn
EnableWindow
PostMessageA
UpdateWindow
FillRect
GetWindowRect
SetTimer
GetSystemMetrics
KillTimer
SetMenu
SendMessageA
GetClientRect
PtInRect
SetForegroundWindow
GetForegroundWindow
GetWindow
GetScrollRange
UnregisterClassA
advapi32
RegOpenKeyExA
RegQueryValueA
RegSetValueExA
RegCreateKeyExA
GetFileSecurityA
SetFileSecurityA
RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegSetValueA
RegQueryValueExA
ole32
CLSIDFromString
StgOpenStorageOnILockBytes
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoGetClassObject
CoRevokeClassObject
CoInitialize
CoUninitialize
CoTaskMemFree
CLSIDFromProgID
StgCreateDocfileOnILockBytes
OleFlushClipboard
CoRegisterMessageFilter
OleIsCurrentClipboard
CoTaskMemAlloc
CreateILockBytesOnHGlobal
oleaut32
VariantClear
SysFreeString
SysStringLen
UnRegisterTypeLi
LoadRegTypeLi
VariantInit
CreateErrorInfo
VariantChangeType
SysAllocString
VariantTimeToSystemTime
VariantCopy
SysAllocStringByteLen
SysAllocStringLen
QueryPathOfRegTypeLi
GetErrorInfo
gdi32
CreateDIBitmap
GetTextExtentPointA
CreateDCA
LineTo
MoveToEx
SetTextAlign
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
SelectClipRgn
SetWindowOrgEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetViewportExtEx
SetStretchBltMode
SetROP2
SetMapMode
RestoreDC
SetPolyFillMode
StartDocA
DeleteDC
SaveDC
GetClipBox
SetBkColor
GetDeviceCaps
GetBkColor
GetWindowOrgEx
GetCharWidthA
GetTextFaceA
GetROP2
GetBkMode
GetTextAlign
GetPolyFillMode
GetStretchBltMode
GetNearestColor
GetTextMetricsA
LPtoDP
CreateFontIndirectA
CreateRectRgnIndirect
CombineRgn
SetRectRgn
GetMapMode
SetAbortProc
StartPage
EndPage
EndDoc
AbortDoc
GetViewportOrgEx
DPtoLP
Rectangle
PatBlt
Escape
ExtTextOutA
RectVisible
PtVisible
CreatePen
GetWindowExtEx
GetViewportExtEx
GetCurrentPositionEx
GetStockObject
CreateBitmap
StretchBlt
GetTextColor
SetTextColor
CreateRectRgn
CreateSolidBrush
SetBkMode
CreateCompatibleBitmap
CreateRoundRectRgn
GetObjectA
BitBlt
CreateCompatibleDC
GetTextExtentPoint32A
DeleteObject
TextOutA
CreatePatternBrush
CreateFontA
SelectObject
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
PrintDlgA
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
shell32
DragFinish
DragQueryFileA
ShellExecuteA
ExtractIconA
SHGetFileInfoA
comctl32
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Create
_TrackMouseEvent
ord17
oledlg
ord8
olepro32
ord253
Sections
.text Size: 508KB - Virtual size: 505KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 272KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ