Static task
static1
Behavioral task
behavioral1
Sample
71da8761db13eb2382ec007e539d563675da8cb4624796ba802f1309fb653a5e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
71da8761db13eb2382ec007e539d563675da8cb4624796ba802f1309fb653a5e.exe
Resource
win10v2004-20220812-en
General
-
Target
71da8761db13eb2382ec007e539d563675da8cb4624796ba802f1309fb653a5e
-
Size
834KB
-
MD5
727c0d499916af30f146aa39b9187cf0
-
SHA1
cd658f40f51280e477b150533e181936b072efec
-
SHA256
71da8761db13eb2382ec007e539d563675da8cb4624796ba802f1309fb653a5e
-
SHA512
db28796f05e80e2255bc0f30d19ebb7689b3446a2cf9844dbdc73e2cfe76ba1a81e5968518ca8cbe9e33cf62ecea98012056625b021832bd15fec1474c672d79
-
SSDEEP
12288:+WiB5YsmB7GylqgMuLK8SB1eSM57kiA5KXaZf6NerkZLnyM+fl:+l7NljM5TAwNLnKl
Malware Config
Signatures
Files
-
71da8761db13eb2382ec007e539d563675da8cb4624796ba802f1309fb653a5e.exe windows x64
97a8d127c8cef271fc4ea9aa229bd379
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
advapi32
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExA
RegOpenKeyExA
kernel32
GetTickCount
GetPrivateProfileStringW
GetTimeFormatW
lstrcmpW
Sleep
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
IsProcessorFeaturePresent
GetProcAddress
LoadLibraryA
GetModuleHandleA
OutputDebugStringA
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
FindResourceW
LoadResource
SizeofResource
LockResource
InitializeCriticalSection
DeleteCriticalSection
GetCommandLineW
MulDiv
QueryPerformanceFrequency
GlobalLock
GlobalAlloc
GlobalUnlock
lstrlenW
GetPrivateProfileIntW
GlobalFree
HeapSetInformation
GetWindowsDirectoryW
GetPrivateProfileSectionW
gdi32
GetStockObject
SelectObject
CreateDCW
CreateFontIndirectW
DeleteDC
SetTextColor
GetDeviceCaps
SetBkColor
DeleteObject
GetObjectW
GetGlyphOutlineW
GetOutlineTextMetricsW
CreateFontW
ExcludeClipRect
GetCurrentObject
user32
OffsetRect
IntersectRect
GetDlgItem
EndDialog
SendDlgItemMessageW
LoadStringW
IsDlgButtonChecked
CheckRadioButton
GetDlgItemTextW
SetDlgItemTextW
EnableWindow
DialogBoxParamW
CreateWindowExW
EndPaint
SetCursor
SetTimer
ScreenToClient
GetMessageW
PostQuitMessage
DispatchMessageW
EnumDisplaySettingsW
DefWindowProcW
SetWindowTextW
AdjustWindowRect
UpdateWindow
SendMessageW
GetSystemMetrics
RegisterClassW
SystemParametersInfoA
MessageBoxW
FillRect
CheckDlgButton
SetWindowPos
PeekMessageW
SystemParametersInfoW
GetWindowTextW
InvalidateRect
UnionRect
SetRect
LoadIconW
TranslateMessage
BeginPaint
SetRectEmpty
GetClientRect
LoadCursorW
KillTimer
DrawTextW
PostMessageW
msvcrt
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
rand
iswdigit
free
_finite
__C_specific_handler
qsort
_atoi64
_vsnwprintf
calloc
malloc
realloc
time
srand
_exit
__getmainargs
sinf
acosf
_XcptFilter
__setusermatherr
cosf
_ismbblead
_cexit
exit
_acmdln
_initterm
_amsg_exit
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
memcpy
memset
sqrtf
atan2f
comctl32
ord17
comdlg32
ChooseFontW
ChooseColorW
GetOpenFileNameW
ole32
CoUninitialize
CreateStreamOnHGlobal
CoInitializeEx
CoCreateInstance
usp10
ScriptStringAnalyse
ScriptStringFree
ScriptStringGetOrder
winbrand
BrandingFormatString
d3d9
Direct3DCreate9
winmm
timeGetTime
glu32
gluTessVertex
gluTessCallback
gluTessNormal
gluTessProperty
gluTessBeginContour
gluTessEndContour
gluTessEndPolygon
gluNewTess
gluTessBeginPolygon
gluDeleteTess
Sections
.text Size: 238KB - Virtual size: 238KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.vmp0 Size: 508KB - Virtual size: 1.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE