Static task
static1
Behavioral task
behavioral1
Sample
7634e9819179edc8eada1fc52b2562a9854a11d8baf6cfc84daa47fa6aeb3778.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7634e9819179edc8eada1fc52b2562a9854a11d8baf6cfc84daa47fa6aeb3778.exe
Resource
win10v2004-20220812-en
General
-
Target
7634e9819179edc8eada1fc52b2562a9854a11d8baf6cfc84daa47fa6aeb3778
-
Size
4.5MB
-
MD5
55927e3495c7ef365cb8194ccd88b735
-
SHA1
0653f3e19ba1fc964652d95b5127dea0eacc596b
-
SHA256
7634e9819179edc8eada1fc52b2562a9854a11d8baf6cfc84daa47fa6aeb3778
-
SHA512
c99f4422857321879ce2e09d0568a3871f136a90f293edc486f73f8f8a5b6464faad4fd1e75320ec2c9e18d0e606c7af266568da555805bbc53a6cf74f69888c
-
SSDEEP
49152:FQZ6HbRIh9UG9F51ccbALBN619tKt2X8S/i53JrDFsTC4qNk7NnVo:FQeIh9gcbHtJsH3/smfNk78
Malware Config
Signatures
Files
-
7634e9819179edc8eada1fc52b2562a9854a11d8baf6cfc84daa47fa6aeb3778.exe windows x86
eaa2f754fee16e0c67e269eacdd1cf9a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesW
SetErrorMode
lstrcatW
GetCurrentDirectoryW
GlobalFindAtomW
GlobalAddAtomW
LockResource
GetProcessVersion
GetStartupInfoW
RtlUnwind
CreateThread
ExitThread
SetStdHandle
GetFileType
HeapAlloc
HeapFree
GetSystemTime
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
FreeLibrary
GetProcAddress
LoadLibraryW
InterlockedIncrement
LocalAlloc
lstrlenW
FormatMessageW
QueryPerformanceCounter
GlobalMemoryStatus
GetCurrencyFormatW
CreateEventW
WaitForMultipleObjects
GetCurrentThreadId
GetPrivateProfileSectionW
CreateSemaphoreW
InterlockedExchange
InterlockedCompareExchange
ReleaseSemaphore
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
GetCurrentThread
CloseHandle
SetEvent
ReadFile
CreateFileW
GetModuleFileNameW
LoadLibraryA
GetDriveTypeA
SetCurrentDirectoryW
SetEnvironmentVariableW
SetVolumeLabelW
CreateFileMappingW
GetThreadContext
GetExitCodeThread
TerminateThread
GetDiskFreeSpaceW
QueryDosDeviceW
GetComputerNameA
OpenSemaphoreW
OpenMutexW
DeviceIoControl
CreateFileA
GetComputerNameW
LoadLibraryExW
LoadLibraryExA
EnumResourceLanguagesW
GetSystemDirectoryW
GetWindowsDirectoryW
GetCurrentDirectoryA
FindResourceExW
FormatMessageA
GetTickCount
GetProcessTimes
GetCurrentProcess
GetSystemInfo
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
GetStdHandle
GetTimeZoneInformation
GetLastError
CreateMutexW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
GetDiskFreeSpaceExW
InterlockedExchangeAdd
ReleaseMutex
GetFileAttributesW
OutputDebugStringW
Sleep
ResetEvent
CreateDirectoryW
GetCurrentProcessId
SetThreadAffinityMask
ExitProcess
RaiseException
WriteProfileStringW
GetProfileStringW
SetLastError
SignalObjectAndWait
GetVersionExW
OpenProcess
SizeofResource
LoadResource
FindResourceW
OpenEventW
GetModuleHandleW
HeapUnlock
HeapWalk
HeapLock
GetProcessHeaps
SetProcessWorkingSetSize
GetProcessWorkingSetSize
MoveFileW
FreeConsole
SetConsoleCursorPosition
FillConsoleOutputCharacterW
FillConsoleOutputAttribute
ReadConsoleA
SetConsoleWindowInfo
SetConsoleScreenBufferSize
SetConsoleCtrlHandler
SetConsoleMode
GetConsoleMode
AllocConsole
IsBadReadPtr
SetPriorityClass
GetProcessHeap
SetUnhandledExceptionFilter
SetProcessShutdownParameters
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
LocalFree
GetModuleHandleA
GetLocalTime
GetVolumeInformationW
GetDriveTypeW
GetLogicalDrives
GetPrivateProfileStringW
GetPrivateProfileIntW
GlobalFree
TlsAlloc
GetVersion
SuspendThread
SetThreadPriority
ResumeThread
lstrcmpW
GlobalAlloc
GlobalDeleteAtom
lstrcmpiW
GetFullPathNameW
lstrcpyW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
DuplicateHandle
lstrcpynW
FileTimeToLocalFileTime
GlobalLock
GlobalUnlock
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
MoveFileExW
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
GetACP
CreateProcessW
TerminateProcess
GetThreadTimes
FileTimeToSystemTime
WritePrivateProfileStringW
InterlockedDecrement
user32
SystemParametersInfoW
IsIconic
GetWindowPlacement
ShowWindow
SetWindowPos
SetWindowLongW
GetDlgItem
SetFocus
RegisterWindowMessageW
SetForegroundWindow
GetDesktopWindow
SetWindowTextW
wsprintfW
DeleteMenu
GetSystemMenu
GetWindowTextW
CharUpperW
MessageBoxA
GetProcessWindowStation
GetSystemMetrics
PostQuitMessage
GetForegroundWindow
GetSysColorBrush
LoadCursorW
LoadIconW
PostMessageW
SendMessageW
SetCursor
EnableWindow
GetMessageTime
DefWindowProcW
RemovePropW
CallWindowProcW
GetPropW
SetPropW
CreateWindowExW
DestroyWindow
GetMenu
RegisterClassW
GetClassInfoW
MessageBoxW
GetWindowLongW
IsWindowEnabled
GetLastActivePopup
GetParent
SetWindowsHookExW
WinHelpW
GetCapture
GetTopWindow
CopyRect
GetClientRect
DestroyMenu
GetMessagePos
GetCursorPos
PeekMessageW
IsWindowVisible
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
DispatchMessageW
TranslateMessage
GetMessageW
UnregisterClassW
CharToOemBuffA
OemToCharBuffA
PostThreadMessageW
AdjustWindowRectEx
GetSysColor
MapWindowPoints
GetUserObjectInformationW
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuW
GetMenuState
LoadBitmapW
GetMenuCheckMarkDimensions
UnhookWindowsHookEx
ClientToScreen
GetDC
ReleaseDC
TabbedTextOutW
DrawTextW
GrayStringW
LoadStringW
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetClassNameW
GetMenuItemCount
GetSubMenu
GetMenuItemID
gdi32
GetObjectW
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetDeviceCaps
DeleteObject
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
RegisterEventSourceA
ReportEventA
RegCloseKey
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
CloseServiceHandle
RegQueryInfoKeyW
RegEnumKeyW
GetAce
LookupAccountNameW
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
ControlService
StartServiceW
QueryServiceStatus
DeleteService
LockServiceDatabase
CreateServiceW
RegCreateKeyW
UnlockServiceDatabase
SetServiceStatus
GetUserNameW
ChangeServiceConfigW
QueryServiceConfigW
RegDeleteKeyW
SetFileSecurityW
AdjustTokenPrivileges
LookupPrivilegeValueW
GetFileSecurityW
MapGenericMask
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
DuplicateToken
AccessCheck
AllocateAndInitializeSid
EqualSid
FreeSid
OpenProcessToken
GetTokenInformation
LookupAccountSidW
GetLengthSid
CopySid
RegisterEventSourceW
ReportEventW
DeregisterEventSource
OpenSCManagerW
OpenServiceW
RegCreateKeyExW
comctl32
ord17
ole32
CoInitialize
CoInitializeEx
CoUninitialize
CoCreateGuid
CoCreateInstance
OleRun
oleaut32
GetErrorInfo
SysAllocString
VariantClear
SysStringLen
VariantCopy
SysStringByteLen
VariantInit
VariantChangeType
SafeArrayAccessData
SafeArrayUnaccessData
SysFreeString
winmm
timeGetTime
timeEndPeriod
timeBeginPeriod
timeGetDevCaps
wininet
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetReadFile
InternetOpenW
InternetConnectW
HttpOpenRequestW
InternetSetOptionExW
HttpAddRequestHeadersW
HttpSendRequestW
HttpQueryInfoW
InternetCloseHandle
rpcrt4
RpcStringFreeA
UuidToStringA
UuidCreate
ws2_32
socket
WSAGetLastError
WSAEventSelect
WSAEnumNetworkEvents
WSAStartup
WSACleanup
WSARecv
ioctlsocket
WSASend
recv
shutdown
inet_addr
ntohl
htonl
setsockopt
accept
bind
htons
WSAIoctl
connect
closesocket
listen
ntohs
getpeername
getsockname
getsockopt
send
sendto
recvfrom
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
Sections
.text Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 480KB - Virtual size: 477KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 676KB - Virtual size: 709KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 380KB - Virtual size: 377KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ