Static task
static1
Behavioral task
behavioral1
Sample
c83a21c9032e6f4f8cf33ab63dfbaee572eb1fbcea1b881169e622d442feef20.exe
Resource
win7-20220901-en
General
-
Target
c83a21c9032e6f4f8cf33ab63dfbaee572eb1fbcea1b881169e622d442feef20
-
Size
758KB
-
MD5
760ca4262466be905d38c76556034612
-
SHA1
2e3d0cfa808099b4385fb0441a8d66e10e984277
-
SHA256
c83a21c9032e6f4f8cf33ab63dfbaee572eb1fbcea1b881169e622d442feef20
-
SHA512
836ffc1558d40eb489ca4c8a7abca23b56d7cf4b3dd5d1dd4499dd17ada5499f423c24a9128587e0bd27081107ee566f738a432906fb79c31691b77b35144fec
-
SSDEEP
12288:zcgjyQWmkcoQR6INEcfuGQ2FODd9auJob2wRObvYODkDn9yen1XXXXXXXXXXXXXl:8QhR6ITFqd9auyObvYwkDUenWxqN8C
Malware Config
Signatures
Files
-
c83a21c9032e6f4f8cf33ab63dfbaee572eb1fbcea1b881169e622d442feef20.exe windows x86
78f9ec7d002aee13616ef002a94a8c86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalReAlloc
TlsFree
GlobalFlags
GetFileSizeEx
SetErrorMode
GetStartupInfoW
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
CreateThread
HeapFree
HeapAlloc
HeapReAlloc
RtlUnwind
RaiseException
ExitProcess
VirtualProtect
VirtualQuery
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
TlsSetValue
GetFileType
GetStartupInfoA
HeapCreate
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
LCMapStringA
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
lstrlenA
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
UnlockFile
LockFile
FlushFileBuffers
GetModuleHandleA
GetCurrentProcessId
WritePrivateProfileStringW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryExW
CompareStringA
InterlockedExchange
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryW
CompareStringW
LoadLibraryA
FreeLibrary
lstrcmpW
GetVersionExA
GetThreadLocale
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
LocalFree
GetProcAddress
GetVersionExW
FreeConsole
GetModuleHandleW
AllocConsole
DeviceIoControl
VirtualAlloc
VirtualFree
SetFileAttributesW
MoveFileW
SetEndOfFile
SetFilePointerEx
GetFileAttributesW
GlobalMemoryStatusEx
GetSystemInfo
GetSystemDefaultLangID
GetTempFileNameW
GetTempPathW
CreateMutexW
ReleaseMutex
GetPrivateProfileIntW
CreateProcessW
CopyFileW
LockResource
SizeofResource
LoadResource
FindResourceW
Sleep
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
WaitForMultipleObjects
MultiByteToWideChar
WideCharToMultiByte
CreateEventW
WaitForSingleObject
GetLastError
InterlockedIncrement
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
GetTickCount
SetEvent
GetFileSize
DeleteFileW
FindClose
FindNextFileW
FindFirstFileW
SetFilePointer
CreateFileW
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
CreateDirectoryW
DeleteCriticalSection
InitializeCriticalSection
CloseHandle
ReadFile
WriteFile
FormatMessageW
lstrlenW
LocalAlloc
InterlockedDecrement
SetHandleCount
user32
RegisterClipboardFormatW
UnregisterClassW
MessageBeep
GetNextDlgGroupItem
DestroyMenu
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableW
GetSysColorBrush
CharUpperW
TranslateMessage
GetCursorPos
ValidateRect
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
EnableWindow
LoadIconW
SendMessageW
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetMenu
IsWindowVisible
UpdateWindow
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
PostThreadMessageW
AdjustWindowRectEx
GetMenuCheckMarkDimensions
PostMessageW
GetMessageW
LoadBitmapW
SetWindowRgn
SetTimer
GetClientRect
SetCapture
ReleaseCapture
PtInRect
GetWindowRect
LoadCursorW
SetCursor
KillTimer
GetDC
ReleaseDC
GetMonitorInfoW
MonitorFromWindow
CopyRect
InvalidateRect
IsIconic
SetForegroundWindow
FlashWindowEx
GetSystemMetrics
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
CharNextW
GetWindow
GetDlgCtrlID
OffsetRect
GetParent
EqualRect
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
IsWindow
GetDlgItem
GetWindowLongW
gdi32
GetMapMode
GetRgnBox
CreateRectRgnIndirect
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
GetObjectW
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetTextColor
GetBkColor
GetStockObject
GetDeviceCaps
CreateCompatibleBitmap
ExtCreateRegion
DeleteDC
GetDIBits
CreateICW
BitBlt
CreateCompatibleDC
ScaleViewportExtEx
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
CryptAcquireContextW
RegQueryValueW
RegEnumKeyW
CryptHashData
CryptCreateHash
RegQueryInfoKeyW
CryptReleaseContext
RegOpenKeyW
CryptGetHashParam
RegEnumValueW
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegCloseKey
RegCreateKeyExW
shell32
SHGetSpecialFolderPathW
ShellExecuteW
SHBrowseForFolderW
SHGetMalloc
SHGetPathFromIDListW
SHFileOperationW
comctl32
InitCommonControlsEx
shlwapi
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
oledlg
OleUIBusyW
ole32
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoTaskMemFree
CoCreateInstance
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
oleaut32
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VariantChangeType
OleCreateFontIndirect
SysAllocStringLen
SysStringLen
SysAllocString
VariantClear
VariantInit
VariantCopy
SysAllocStringByteLen
SysStringByteLen
SysFreeString
wsock32
socket
WSAAsyncSelect
inet_ntoa
WSAStartup
connect
ntohs
accept
bind
htons
listen
setsockopt
WSAGetLastError
closesocket
ioctlsocket
gethostbyname
recvfrom
htonl
WSASetLastError
sendto
recv
select
__WSAFDIsSet
send
WSACleanup
gdiplus
GdipDisposeImage
GdipDrawImageRectI
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdiplusStartup
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipFree
GdipAlloc
ws2_32
WSASend
WSARecv
WSACloseEvent
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSAEventSelect
WSACreateEvent
WSASocketW
winmm
timeGetTime
odbc32
ord15
ord14
ord9
ord16
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
Sections
.text Size: 395KB - Virtual size: 395KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE