Static task
static1
Behavioral task
behavioral1
Sample
935ddf52101f0cffb7c0727ce8eaac8ed75d2c68d72bb7aa3ca2362a86fce621.exe
Resource
win7-20220812-en
General
-
Target
935ddf52101f0cffb7c0727ce8eaac8ed75d2c68d72bb7aa3ca2362a86fce621
-
Size
448KB
-
MD5
8031996708f8f4ca9fbce16bb4087460
-
SHA1
19fa1270c2bc54dd18ad84cb69b6e3d83175b506
-
SHA256
935ddf52101f0cffb7c0727ce8eaac8ed75d2c68d72bb7aa3ca2362a86fce621
-
SHA512
e3c63e4e0c6fdf7c57c81b98e17924fafb33811ee67f986405baf7a0873797256c28a9cb3411bccc8e6c03fb2e849798f9d2014021a24922303e959864ab6e4e
-
SSDEEP
6144:wQUbXCRs/8eFcsGBO56vsN7IrPsx0f9xfs4svy3Ncua+GbKmRfW7hWbNjn4rnUcZ:wQUbXJz56vsNKTfs4s6GJ+GS8j4TN
Malware Config
Signatures
Files
-
935ddf52101f0cffb7c0727ce8eaac8ed75d2c68d72bb7aa3ca2362a86fce621.exe windows x86
01773a18855c59e65a03e7a5a1428e6a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemInfo
VirtualQuery
HeapReAlloc
Sleep
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
VirtualFree
HeapCreate
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
VirtualAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
VirtualProtect
RaiseException
GetStartupInfoA
GetCommandLineA
HeapFree
HeapAlloc
RtlUnwind
GetTickCount
GetFileTime
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
SetErrorMode
FileTimeToSystemTime
GetModuleHandleW
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
DeleteCriticalSection
InitializeCriticalSection
GlobalFlags
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
WritePrivateProfileStringA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
FormatMessageA
LocalFree
GetCurrentProcessId
GetModuleFileNameA
InterlockedDecrement
GetModuleFileNameW
lstrlenA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
CompareStringA
LoadLibraryA
MultiByteToWideChar
lstrcmpW
GetVersionExA
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleA
GetProcAddress
SetLastError
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
GlobalAlloc
GlobalFree
CloseHandle
CreateMutexA
GetLastError
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
GetFileType
FindResourceA
user32
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
CharUpperA
SetWindowContextHelpId
MapDialogRect
GetMessageA
TranslateMessage
ValidateRect
CreateDialogIndirectParamA
EndDialog
GetWindowThreadProcessId
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetNextDlgGroupItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
SetMenu
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
IntersectRect
SystemParametersInfoA
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetKeyState
GetCursorPos
SetWindowPos
IsWindow
IsWindowEnabled
EndPaint
BeginPaint
GetWindowDC
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadIconA
LoadCursorA
OpenClipboard
IsIconic
GetSystemMenu
AppendMenuA
DrawIcon
LoadBitmapA
EmptyClipboard
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
SetClipboardData
CloseClipboard
PtInRect
ReleaseCapture
SetCapture
UnregisterClassA
GetDlgItem
GetSysColorBrush
GetDesktopWindow
GetWindowPlacement
PostQuitMessage
GetSystemMetrics
SetWindowLongA
MessageBoxA
GetWindowLongA
EnableWindow
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
DrawFocusRect
DrawStateA
FrameRect
OffsetRect
InflateRect
CopyRect
LoadMenuA
LoadImageA
GetIconInfo
CreateIconIndirect
GetDC
ReleaseDC
GetSysColor
FillRect
GetSubMenu
SendMessageA
TrackPopupMenuEx
PostMessageA
SetCursor
DestroyIcon
DestroyCursor
DestroyMenu
gdi32
ExtSelectClipRgn
GetDeviceCaps
CreatePen
CreateSolidBrush
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
CreateRectRgnIndirect
GetWindowExtEx
GetViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
DeleteObject
MoveToEx
LineTo
GetClipBox
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateDIBSection
GetDIBits
GetObjectA
GetPixel
SetPixel
CreateCompatibleBitmap
CreateBitmap
CreateCompatibleDC
SelectObject
SetBkColor
BitBlt
SetTextColor
DeleteDC
GetStockObject
PtVisible
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
advapi32
RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
shell32
ShellExecuteExA
comctl32
_TrackMouseEvent
ord17
shlwapi
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW
oledlg
ord8
ole32
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitializeEx
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoUninitialize
oleaut32
SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
gdiplus
GdiplusShutdown
Sections
.text Size: 246KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE