Static task
static1
Behavioral task
behavioral1
Sample
d4e01f7ce871d8966f87cfaebd69c9a9d0f5888338392d368536cff2eaf8556b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4e01f7ce871d8966f87cfaebd69c9a9d0f5888338392d368536cff2eaf8556b.exe
Resource
win10v2004-20220812-en
General
-
Target
d4e01f7ce871d8966f87cfaebd69c9a9d0f5888338392d368536cff2eaf8556b
-
Size
135KB
-
MD5
6ead2e8b47015f5755996cd516f05e2c
-
SHA1
75a02c748912ae5ba7a10d0b361e1cd030896224
-
SHA256
d4e01f7ce871d8966f87cfaebd69c9a9d0f5888338392d368536cff2eaf8556b
-
SHA512
f71f903c7ff2a1145397dfb4851c891c55f2195790746b07497eaf3a55ffe6cc0e68e695d75f35aeb713595e4ccd69036bc76101c615c7f48f9b5b316d25245d
-
SSDEEP
3072:oBTI43NbVtzA2LvMnaeP97IoReCq2Z2hB8pe7aEoiNPPLHnmJ:oBTIiJA2LvqaeP9FICBZ2hBw6aMPDHm
Malware Config
Signatures
Files
-
d4e01f7ce871d8966f87cfaebd69c9a9d0f5888338392d368536cff2eaf8556b.exe windows x86
9539cc16af8715f874724a2b2f75e0e3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GlobalHandle
SetStdHandle
LockResource
GetVersionExA
Sleep
MultiByteToWideChar
lstrcpynA
ReadFile
CreateThread
GetFileSize
SetFilePointer
CreateMutexA
InterlockedDecrement
GetOEMCP
HeapDestroy
GetVersion
GetFileTime
GlobalGetAtomNameA
GetPrivateProfileStringA
SetHandleCount
GlobalFindAtomA
InitializeCriticalSection
CreateEventA
LCMapStringW
LocalFree
GetCurrentThread
HeapAlloc
VirtualAlloc
GlobalDeleteAtom
GetFileAttributesA
SetThreadPriority
lstrlenA
UnhandledExceptionFilter
TlsAlloc
GetFileType
GlobalFlags
SizeofResource
ExitThread
lstrcatA
CreateFileA
GetCPInfo
IsBadWritePtr
GlobalFree
TerminateProcess
CloseHandle
FileTimeToSystemTime
RtlUnwind
SetEnvironmentVariableA
MulDiv
LocalAlloc
VirtualFree
HeapReAlloc
CompareStringA
ResumeThread
GetStringTypeW
TlsGetValue
GlobalLock
SetLastError
GetCurrentThreadId
LCMapStringA
SetEvent
TlsFree
ExitProcess
SetErrorMode
WriteFile
ActivateActCtx
GetProcAddress
LoadLibraryA
VirtualProtect
GetLastError
GetVolumeInformationA
LockFile
FreeEnvironmentStringsA
GetEnvironmentStringsW
DeleteCriticalSection
LocalReAlloc
InterlockedIncrement
EnterCriticalSection
SuspendThread
GetTimeZoneInformation
UnlockFile
GetFullPathNameA
GlobalAlloc
GetEnvironmentStrings
GlobalReAlloc
WideCharToMultiByte
FileTimeToLocalFileTime
LeaveCriticalSection
lstrcmpA
LoadResource
FindResourceA
GetLocalTime
FlushFileBuffers
IsBadCodePtr
GetSystemDefaultLangID
GetModuleFileNameA
TlsSetValue
WaitForSingleObject
SetEndOfFile
GlobalUnlock
GetTickCount
GetModuleHandleA
FormatMessageA
WritePrivateProfileStringA
lstrcmpiA
GetThreadLocale
SetUnhandledExceptionFilter
GetProfileStringA
lstrcpyA
GetACP
GetStringTypeA
DuplicateHandle
GlobalAddAtomA
GetProcessVersion
CompareStringW
GetStdHandle
GetCommandLineA
HeapSize
IsBadReadPtr
HeapCreate
RaiseException
GetStartupInfoA
WinExec
FreeEnvironmentStringsW
HeapFree
GetSystemDirectoryA
user32
IntersectRect
IsWindow
GetMenu
GetClientRect
DispatchMessageA
ShowWindow
GetCursorPos
InvalidateRect
DrawFocusRect
GetMessageA
GetSysColor
MapDialogRect
LoadStringA
CreateDialogIndirectParamA
EnableMenuItem
PostThreadMessageA
LoadBitmapA
GetLastActivePopup
HideCaret
GetDesktopWindow
ValidateRect
DestroyMenu
IsChild
SetWindowRgn
MoveWindow
SetForegroundWindow
GetWindowTextLengthA
SetWindowTextA
GetMenuItemID
PeekMessageA
SetRect
ModifyMenuA
GetKeyState
SendMessageA
GetMessageTime
GetClassNameA
GetDlgCtrlID
GetWindowRect
CallNextHookEx
SendDlgItemMessageA
SetMenuItemBitmaps
GetNextDlgTabItem
SetMenuDefaultItem
AdjustWindowRectEx
GrayStringA
GetSubMenu
IsWindowVisible
MessageBeep
UpdateWindow
PostQuitMessage
RegisterWindowMessageA
DefWindowProcA
IsDialogMessageA
TranslateMessage
BeginPaint
ReleaseCapture
GetWindowTextA
GetMenuState
DestroyWindow
GetMessagePos
EndPaint
RegisterClassA
WinHelpA
OffsetRect
SetWindowsHookExA
CopyAcceleratorTableA
GetClassInfoA
ScreenToClient
SetActiveWindow
CallWindowProcA
SetTimer
GetPropA
GetMenuItemCount
EnableWindow
GetClassLongA
GetFocus
GetWindowDC
RemovePropA
GetForegroundWindow
PostMessageA
CreateWindowExA
TrackPopupMenu
EndDialog
TabbedTextOutA
GetParent
MessageBoxA
IsWindowEnabled
GetWindowLongA
wsprintfA
MapWindowPoints
DrawIcon
DefDlgProcA
GetDC
GetCapture
InflateRect
SetCapture
ReleaseDC
IsIconic
SetWindowLongA
UnregisterClassA
ExcludeUpdateRgn
CheckMenuItem
GetActiveWindow
GetSystemMetrics
ShowCaret
DrawTextA
UnhookWindowsHookEx
SetWindowPos
GetWindowPlacement
GetDlgItem
SetWindowContextHelpId
SetFocus
SetCursor
ClientToScreen
SystemParametersInfoA
RegisterClipboardFormatA
CopyRect
CharNextA
KillTimer
IsWindowUnicode
LoadIconA
CharUpperA
GetMenuCheckMarkDimensions
GetNextDlgGroupItem
GetTopWindow
SetPropA
GetSysColorBrush
GetWindow
PtInRect
LoadCursorA
gdi32
SaveDC
GetMapMode
GetDeviceCaps
SetViewportExtEx
GetClipBox
GetViewportExtEx
SetMapMode
OffsetViewportOrgEx
SetBkMode
ScaleViewportExtEx
CreateSolidBrush
GetStockObject
SelectObject
DeleteObject
CreateBitmap
DPtoLP
GetObjectA
SetViewportOrgEx
ExtCreateRegion
LPtoDP
DeleteDC
SetTextColor
ExtTextOutA
SetWindowExtEx
CombineRgn
IntersectClipRect
SetBkColor
PatBlt
BitBlt
GetBkColor
Escape
CreateCompatibleDC
ScaleWindowExtEx
CreateDIBitmap
GetWindowExtEx
TextOutA
PtVisible
CreateCompatibleBitmap
CreateDIBSection
GetTextExtentPointA
RectVisible
RestoreDC
GetTextColor
advapi32
OpenServiceA
StartServiceA
QueryServiceStatus
RegCloseKey
ControlService
RegSetValueExA
OpenSCManagerA
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
CloseServiceHandle
RegCreateKeyExA
oleaut32
SysFreeString
VariantTimeToSystemTime
SysAllocStringLen
VariantCopy
SysStringLen
SysAllocString
VariantClear
VariantChangeType
OleCreateFontIndirect
SysAllocStringByteLen
oledlg
ord8
Sections
.text Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ