Static task
static1
Behavioral task
behavioral1
Sample
f2afcb662cc5ffc1198940d58afba540acfd4c439c16be168a67624791fbf6cb.exe
Resource
win7-20220901-en
General
-
Target
f2afcb662cc5ffc1198940d58afba540acfd4c439c16be168a67624791fbf6cb
-
Size
941KB
-
MD5
6d1ef15fdf8ca4615c10f1b58e62f910
-
SHA1
b9a02af153b32ec2052f3af33a531af4ee614bf4
-
SHA256
f2afcb662cc5ffc1198940d58afba540acfd4c439c16be168a67624791fbf6cb
-
SHA512
4f72654ceac9334cc4d79185e01f8b112b4873a155d5d506dc768614e68f9782ca933a4d0472151e63e3af18f04e7ccbdadec72596729a7200619c148056d848
-
SSDEEP
12288:iIXAr2TsG0mM2d3EOOu8Qc9sBJ6CUj8qFF3vwOI/J4kSIsw00uNkpGljXjh7:iZresG0mM2d3Jq7j84pYOI/JINk0L7
Malware Config
Signatures
Files
-
f2afcb662cc5ffc1198940d58afba540acfd4c439c16be168a67624791fbf6cb.exe windows x86
f9ed17a2f94bb8fdc888378fcc6da2b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
WaitForSingleObject
lstrlenA
MoveFileW
MoveFileExW
GetVersion
FreeLibrary
GetProcAddress
CreateThread
FindNextFileW
GetFileSize
GetFullPathNameW
LoadLibraryW
GetStdHandle
WriteConsoleW
VirtualQueryEx
SetUnhandledExceptionFilter
GetThreadSelectorEntry
CreateFileA
SetFilePointer
ReadProcessMemory
VirtualQuery
GetCurrentThread
GetModuleFileNameA
CreateEventW
SetEvent
lstrcpynW
DeviceIoControl
GetLogicalDrives
GetDriveTypeW
MapViewOfFileEx
OpenMutexW
GetCPInfo
IsDBCSLeadByte
GetFileSizeEx
SetEndOfFile
GetCurrentDirectoryW
GetFileType
CreateDirectoryW
GetACP
ReleaseMutex
FileTimeToSystemTime
FindFirstFileW
TerminateThread
IsBadReadPtr
OutputDebugStringW
ResetEvent
WriteFile
CompareStringW
CompareStringA
GetDriveTypeA
GetLocaleInfoW
SetStdHandle
GetConsoleOutputCP
WriteConsoleA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentDirectoryA
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
SetHandleCount
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetStringTypeW
GetStringTypeA
ExitProcess
GetModuleHandleA
LCMapStringW
LCMapStringA
RtlUnwind
GetStartupInfoA
GetCommandLineA
FileTimeToLocalFileTime
ExitThread
GetSystemTimeAsFileTime
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
HeapSize
HeapReAlloc
HeapDestroy
GetThreadLocale
GetLocaleInfoA
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetVersionExA
CopyFileW
GetFileAttributesW
SetFileAttributesW
MultiByteToWideChar
lstrcmpW
GetModuleFileNameW
MulDiv
GlobalLock
GlobalUnlock
CreateMutexW
GetPrivateProfileStringW
ProcessIdToSessionId
GetCurrentProcessId
ReadFile
UnmapViewOfFile
InterlockedIncrement
CloseHandle
RaiseException
GetCurrentProcess
GetTickCount
lstrlenW
MapViewOfFile
SystemTimeToFileTime
SetLastError
WritePrivateProfileStringW
GetLocalTime
CreateFileMappingW
GetLastError
OpenFileMappingW
DeleteFileW
InterlockedDecrement
FlushInstructionCache
CreateFileW
Sleep
FindResourceExW
WideCharToMultiByte
LoadResource
InitializeCriticalSection
LockResource
SizeofResource
GlobalFree
GetCommandLineW
GlobalAlloc
LocalFree
FindResourceW
DeleteCriticalSection
LeaveCriticalSection
GetTempFileNameW
GetTempPathW
EnterCriticalSection
GetPrivateProfileIntW
GetVersionExW
GetCurrentThreadId
SetEnvironmentVariableA
user32
TranslateMessage
GetCursorPos
GetMessageW
CreateDialogParamW
MonitorFromPoint
IsWindow
PeekMessageW
SetWindowLongW
GetMonitorInfoW
DispatchMessageW
DestroyIcon
DrawIconEx
DrawTextW
OpenInputDesktop
GetUserObjectInformationW
CloseDesktop
GetThreadDesktop
GetWindowTextW
GetGUIThreadInfo
SetWindowRgn
GetWindowThreadProcessId
SetCursor
SetForegroundWindow
ShowWindow
GetPropW
GetDesktopWindow
LoadBitmapW
DrawFocusRect
GetWindow
GetDlgCtrlID
UpdateWindow
GetCapture
EnableMenuItem
SystemParametersInfoW
GetClassNameW
ReleaseCapture
SetCapture
GetKeyState
GetAsyncKeyState
UnregisterClassA
LoadImageW
SetWindowPos
EndPaint
FillRect
GetWindowLongW
ReleaseDC
MoveWindow
BeginPaint
GetDC
DestroyWindow
ScreenToClient
DefWindowProcW
RegisterClassExW
GetParent
GetClassInfoExW
RedrawWindow
ClientToScreen
GetClientRect
SendMessageW
GetDlgItem
DestroyAcceleratorTable
InvalidateRect
LoadCursorW
CreateAcceleratorTableW
InvalidateRgn
CharNextW
TrackMouseEvent
UnregisterClassW
UpdateLayeredWindow
MessageBoxW
GetSystemMenu
PtInRect
IsWindowEnabled
AdjustWindowRectEx
GetMenu
DrawEdge
InflateRect
GetSystemMetrics
GetWindowRect
PostQuitMessage
SetTimer
EnableWindow
PostMessageW
IsWindowVisible
SetWindowTextW
KillTimer
IsDialogMessageW
GetSysColor
IsChild
CreateWindowExW
CallWindowProcW
GetFocus
SetFocus
gdi32
CreateFontW
StretchBlt
CreateRoundRectRgn
SetBkMode
BitBlt
PatBlt
Rectangle
CreateDIBSection
CreateFontIndirectW
DeleteDC
GetStockObject
GetObjectW
CreateCompatibleBitmap
CreateSolidBrush
DeleteObject
SetTextColor
GetDeviceCaps
SelectObject
CreateCompatibleDC
advapi32
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
ConvertSidToStringSidW
LookupAccountNameW
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityInfo
IsTextUnicode
GetSecurityDescriptorSacl
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyW
shell32
Shell_NotifyIconW
ShellExecuteW
SHGetFolderPathW
ShellExecuteExW
SHFileOperationW
SHGetSpecialFolderPathW
SHCreateDirectoryExW
ole32
CoTaskMemFree
CreateILockBytesOnHGlobal
StgOpenStorage
StgOpenStorageOnILockBytes
StgCreateDocfile
CoUninitialize
StringFromGUID2
CoCreateGuid
CreateStreamOnHGlobal
OleLockRunning
CoTaskMemAlloc
CLSIDFromProgID
CoGetClassObject
CoCreateInstance
OleUninitialize
CoInitialize
CoInitializeEx
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoLoadLibrary
CoFreeLibrary
OleInitialize
CLSIDFromString
oleaut32
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantInit
VariantClear
SysAllocStringLen
SysFreeString
SysAllocString
SysStringByteLen
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
SysStringLen
SysAllocStringByteLen
shlwapi
PathFileExistsW
wnsprintfW
comctl32
ImageList_GetIconSize
_TrackMouseEvent
ImageList_Create
ImageList_Draw
ImageList_ReplaceIcon
ord17
ImageList_Destroy
wtsapi32
WTSQuerySessionInformationW
WTSFreeMemory
wininet
InternetQueryOptionA
ws2_32
shutdown
sendto
connect
WSAAsyncSelect
socket
inet_addr
inet_ntoa
setsockopt
closesocket
WSACancelAsyncRequest
WSAGetLastError
WSACleanup
ntohs
recv
send
WSAAsyncGetHostByName
WSAStartup
htons
ntohl
htonl
gethostbyname
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
netapi32
Netbios
NetApiBufferFree
NetWkstaTransportEnum
Sections
.text Size: 608KB - Virtual size: 607KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 48KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE