Static task
static1
Behavioral task
behavioral1
Sample
9b21eebadf08ea26cbd53df65d7a889c97ef1154d57b909b6ab93b2b41c37ec9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9b21eebadf08ea26cbd53df65d7a889c97ef1154d57b909b6ab93b2b41c37ec9.exe
Resource
win10v2004-20220812-en
General
-
Target
9b21eebadf08ea26cbd53df65d7a889c97ef1154d57b909b6ab93b2b41c37ec9
-
Size
291KB
-
MD5
ec5f5fa29d6c3433692704d898157b3c
-
SHA1
35cd5a8ff407eeb2a304b435cfddca8447ebd843
-
SHA256
9b21eebadf08ea26cbd53df65d7a889c97ef1154d57b909b6ab93b2b41c37ec9
-
SHA512
8ff31977b81e98c7049427c427d94dd892ab44dcc3509cd53782521c9784275c9fd8c5eea05970e51bd71f0a88dae6d33a1b6132cc72aa27df7c9e9abbb980ad
-
SSDEEP
3072:If11mm6svAsuIxPOXAgYcAg0FuA12YQo+FuUSHXsS3Y0FWxB6tX:If11mm0Ax2AOA3FHXsSVcnAX
Malware Config
Signatures
Files
-
9b21eebadf08ea26cbd53df65d7a889c97ef1154d57b909b6ab93b2b41c37ec9.exe windows x86
d667cb18d9862c210463f3698da51bb5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharUpperBuffA
CharToOemA
AdjustWindowRectEx
GetLastActivePopup
CharLowerA
GetKeyboardType
RegisterClassW
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MessageBoxW
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyW
MapVirtualKeyA
LoadStringA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsChild
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextLengthW
GetWindowTextW
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMessagePos
GetMenuStringW
GetMenuStringA
GetMenuState
GetMenuItemInfoW
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
ActivateKeyboardLayout
GetKeyboardState
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameW
GetClassNameA
GetClassLongA
GetClassInfoW
GetClassInfoA
GetCapture
GetActiveWindow
FrameRect
FindWindowA
FillRect
ExitWindowsEx
EqualRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefWindowProcA
DefMDIChildProcW
DefMDIChildProcA
DefFrameProcW
DefFrameProcA
CreatePopupMenu
CreateMenu
CreateMDIWindowW
CreateIcon
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharUpperBuffW
CharPrevW
CharNextW
CharLowerBuffW
CallWindowProcW
CallWindowProcA
CallNextHookEx
BringWindowToTop
BeginPaint
AttachThreadInput
CharPrevA
CharNextA
CharLowerBuffA
shell32
ShellExecuteW
SHGetDesktopFolder
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderPathW
SHBrowseForFolderA
ShellExecuteA
wininet
InternetOpenW
InternetOpenUrlW
InternetReadFile
InternetCloseHandle
comctl32
ImageList_Draw
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
ord17
ImageList_DragShowNolock
ImageList_GetDragImage
ImageList_Read
ImageList_Write
ImageList_GetIconSize
ImageList_SetIconSize
_TrackMouseEvent
ImageList_DragMove
kernel32
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
HeapAlloc
GetTimeZoneInformation
HeapFree
TlsFree
TlsAlloc
GetModuleHandleW
IsValidCodePage
GetOEMCP
IsDebuggerPresent
TerminateProcess
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
GetTimeFormatA
Sleep
VirtualFree
lstrlenA
lstrcpynA
LoadLibraryExA
GetStartupInfoA
GetCommandLineA
ExitProcess
ExitThread
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetFileSize
GetFileType
TlsSetValue
TlsGetValue
LocalAlloc
lstrlenW
lstrcpyA
lstrcmpA
WritePrivateProfileStringA
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualAlloc
SizeofResource
SetThreadLocale
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReleaseMutex
ReadFile
MultiByteToWideChar
MulDiv
LockResource
LocalFree
LoadResource
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
HeapSize
GlobalGetAtomNameA
GlobalFree
GlobalDeleteAtom
GlobalAddAtomA
GetVersionExA
GetVersion
GetUserDefaultLangID
GetTickCount
GetThreadLocale
GetTempPathW
GetTempPathA
GetStringTypeExW
GetStringTypeExA
GetStdHandle
GetProcAddress
GetPrivateProfileStringA
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileAttributesW
GetFileAttributesA
GetExitCodeThread
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
GetComputerNameA
GetCommandLineW
GetCPInfo
GetACP
FreeResource
FreeLibrary
FormatMessageW
FormatMessageA
FindResourceA
FindFirstFileW
FindFirstFileA
FindClose
EnumCalendarInfoA
EnterCriticalSection
DeleteFileW
DeleteFileA
DeleteCriticalSection
CreateThread
CreateMutexA
CreateFileW
CreateFileA
CreateEventA
CreateDirectoryW
CreateDirectoryA
CompareStringW
CompareStringA
LocalHandle
GetDriveTypeW
GlobalAlloc
GetDriveTypeA
SetUnhandledExceptionFilter
GlobalFindAtomA
GetCurrentProcessId
OpenProcess
VirtualAllocEx
CloseHandle
HeapReAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
QueryPerformanceCounter
LCMapStringA
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
GlobalLock
Sections
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ