Static task
static1
Behavioral task
behavioral1
Sample
5095aee942510caa65046f038e8278fd4eebe4c4327af8ab43b5e908df7c77c6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5095aee942510caa65046f038e8278fd4eebe4c4327af8ab43b5e908df7c77c6.exe
Resource
win10v2004-20220812-en
General
-
Target
5095aee942510caa65046f038e8278fd4eebe4c4327af8ab43b5e908df7c77c6
-
Size
361KB
-
MD5
62cab2c674af44e0797bc645549a2cf0
-
SHA1
e886a175a8da2b3f98ee6341b5f92ca32a95113c
-
SHA256
5095aee942510caa65046f038e8278fd4eebe4c4327af8ab43b5e908df7c77c6
-
SHA512
52351cd4de4c9dd21057032d253a5c9455264b791fc45d87800632cdc1fed418bb4961853cfd18979644cbadb5787ffb46e044d870ff78f94b5094e61566e60e
-
SSDEEP
6144:THPuYnUYu3vtoY17RU7hafalEHwQSZb5I7yLBGzZcM3BJ880mD21IhW5qoADW:TvuYUYKvNtUdB0rub54Rz2ikmD21r5qY
Malware Config
Signatures
Files
-
5095aee942510caa65046f038e8278fd4eebe4c4327af8ab43b5e908df7c77c6.exe windows x86
6cb770457ef14184e6c8edaf203c4a0b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsWindowUnicode
AdjustWindowRect
UnregisterClassW
GetKeyboardLayoutList
GetOpenClipboardWindow
GetUpdateRgn
PostMessageW
GetWindowThreadProcessId
SetActiveWindow
SetForegroundWindow
SetTimer
GetSystemMenu
EnableMenuItem
GetClassNameW
GetClassInfoExW
IsDialogMessageA
CheckMenuItem
GetWindowTextLengthA
SetMenuInfo
SetWindowLongA
PeekMessageA
MsgWaitForMultipleObjects
LoadStringA
DispatchMessageA
DestroyWindow
CreateWindowExA
CallWindowProcA
CharPrevA
MessageBoxA
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatW
PostThreadMessageW
GetDC
ReleaseDC
MapDialogRect
LoadIconW
LoadStringW
IsWindow
GetWindowDC
GetDesktopWindow
GetForegroundWindow
DispatchMessageW
TranslateMessage
PeekMessageW
LoadBitmapW
GetSysColorBrush
GetNextDlgTabItem
GetAsyncKeyState
DrawFocusRect
EqualRect
NotifyWinEvent
DestroyCursor
SetRectEmpty
RedrawWindow
GetParent
IsWindowVisible
SetWindowPos
SetParent
ClientToScreen
AppendMenuW
CreatePopupMenu
KillTimer
GetFocus
SetCapture
ReleaseCapture
SetCursor
ScreenToClient
GetCursorPos
ExitWindowsEx
OffsetRect
EnumChildWindows
FindWindowW
SetWindowTextW
GetWindowLongW
DdeGetData
shell32
ShellExecuteW
ShellExecuteExW
SHGetDesktopFolder
SHGetMalloc
oledlg
OleUIBusyW
ole32
CoTaskMemAlloc
CoTaskMemFree
CoCreateGuid
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
advapi32
RegEnumValueW
QueryServiceStatus
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
LookupPrivilegeValueA
RegQueryValueW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegEnumKeyExA
RegEnumKeyW
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
OpenThreadToken
RegDeleteKeyW
RegDeleteValueW
OpenSCManagerW
gdi32
SetBitmapBits
GetBitmapBits
GetTextColor
SetTextColor
CreateRectRgn
EnumFontFamiliesW
DPtoLP
GetBkColor
LPtoDP
GetMapMode
GetCurrentObject
DeleteObject
SetDIBits
GetDIBits
CreateCompatibleBitmap
DeleteDC
Rectangle
GetDeviceCaps
GetStockObject
CreateFontIndirectW
GetTextMetricsW
GetTextExtentPoint32W
Ellipse
ExtTextOutW
BitBlt
SelectObject
CreateCompatibleDC
CreateSolidBrush
GetObjectW
GetPixel
CreateBitmap
Escape
GetClipBox
GetViewportExtEx
GetWindowExtEx
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
ExtSelectClipRgn
SetBkMode
SetMapMode
MoveToEx
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
GetRgnBox
SetBkColor
CreatePen
GetTextExtentExPointW
CreateDIBSection
comctl32
InitCommonControlsEx
ord17
shlwapi
PathIsRootW
PathIsUNCW
PathAppendW
PathFindFileNameW
PathFileExistsW
PathStripToRootW
PathFindExtensionW
PathAddBackslashW
kernel32
SetFileTime
SetFileAttributesW
GetFileTime
FlushFileBuffers
GetShortPathNameW
GetTempFileNameW
GetTempPathW
IsDBCSLeadByte
DeleteFileW
GetFileSize
SetFilePointer
SetEndOfFile
WriteFile
FindNextFileA
SetEnvironmentVariableA
ReadConsoleW
RemoveDirectoryA
ExitThread
GetSystemInfo
GetDateFormatA
GetStartupInfoA
IsDebuggerPresent
InterlockedIncrement
InterlockedDecrement
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
HeapCreate
InitializeCriticalSectionAndSpinCount
GetStringTypeA
LCMapStringA
WriteConsoleA
GetConsoleOutputCP
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
EnterCriticalSection
lstrcmpW
LeaveCriticalSection
DeleteCriticalSection
LoadLibraryW
FreeLibrary
GetProcAddress
FindResourceExW
MoveFileExW
GetWindowsDirectoryW
GetPrivateProfileSectionW
WritePrivateProfileSectionW
FindFirstFileA
SetErrorMode
GetVersion
LocalFree
FreeResource
GetVersionExW
ExpandEnvironmentStringsW
GetCurrentThreadId
VirtualAlloc
OpenProcess
DuplicateHandle
GetModuleHandleA
lstrcmpA
GetPrivateProfileStringW
GetLocaleInfoW
GetTimeZoneInformation
GetModuleFileNameW
LoadLibraryExW
GetUserDefaultLCID
GlobalAddAtomW
LoadLibraryA
GlobalDeleteAtom
GetModuleHandleW
GetSystemDirectoryW
OutputDebugStringA
CloseHandle
CreateFileA
GetSystemTime
GetCommandLineA
VirtualFree
CreateDirectoryA
CreateProcessA
DeleteFileA
FindResourceA
FormatMessageA
GetEnvironmentVariableA
GetFileAttributesA
GetFullPathNameA
GetLocaleInfoA
GetModuleFileNameA
GetSystemDefaultLCID
GetUserDefaultLangID
GetVersionExA
GetTimeFormatA
GetWindowsDirectoryA
CompareStringA
MoveFileW
DisableThreadLibraryCalls
WriteConsoleW
SetStdHandle
OutputDebugStringW
GetConsoleMode
GetConsoleCP
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
LocalAlloc
GlobalCompact
GlobalFree
GetQueuedCompletionStatus
SetCommTimeouts
FatalExit
EnumLanguageGroupLocalesW
LoadLibraryExA
HeapReAlloc
RaiseException
ExitProcess
RtlUnwind
IsProcessorFeaturePresent
GetACP
GetModuleHandleExW
HeapSize
VirtualProtect
VirtualQuery
GetStdHandle
GetProcessHeap
FormatMessageW
HeapAlloc
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetEnvironmentStringsW
HeapFree
GetCommandLineW
GetFileAttributesExW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
CompareStringW
GlobalFlags
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetThreadLocale
UnlockFile
LockFile
GetVolumeInformationW
GlobalFindAtomW
SwitchToThread
WaitForSingleObject
GetTickCount
GetCurrentProcessId
GetPrivateProfileIntW
WritePrivateProfileStringW
SizeofResource
LockResource
LoadResource
FindResourceW
GetExitCodeProcess
GetCurrentProcess
CreateMutexW
TerminateThread
Sleep
MultiByteToWideChar
WideCharToMultiByte
SetLastError
GetFileAttributesW
GetFullPathNameW
lstrlenW
lstrcpynW
GetLastError
lstrlenA
InitializeCriticalSection
GetCurrentThread
DosDateTimeToFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
FindFirstFileW
FindNextFileW
FindClose
RemoveDirectoryW
CreateDirectoryW
SetEvent
ResetEvent
WaitForMultipleObjects
ReadFile
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsValidCodePage
GetOEMCP
GetCPInfo
GetStringTypeW
GetDateFormatW
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ