Static task
static1
Behavioral task
behavioral1
Sample
c88316657508f1d438db6e48db1d971a3fb704f35ec026881cf50c4dafd1f75d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c88316657508f1d438db6e48db1d971a3fb704f35ec026881cf50c4dafd1f75d.exe
Resource
win10v2004-20220812-en
General
-
Target
c88316657508f1d438db6e48db1d971a3fb704f35ec026881cf50c4dafd1f75d
-
Size
656KB
-
MD5
806040defe294f52f9405d3890cbabd0
-
SHA1
4320f6311e47e18b1fef42f90dec370cae0355cf
-
SHA256
c88316657508f1d438db6e48db1d971a3fb704f35ec026881cf50c4dafd1f75d
-
SHA512
bdc7e475cba077474bb9ff895f3450d04f6b8f8567f0d615df0e2fa6423c3fd7daaa8a94c2ca83c65c0b2bdf88b7087a9067dc0a84937187a6c3bb44331da144
-
SSDEEP
12288:AGdMNbs9ZozeNfI9938wRtpC3y+f18WRcgU:YNbMZocQ7swRtpCCWLc
Malware Config
Signatures
Files
-
c88316657508f1d438db6e48db1d971a3fb704f35ec026881cf50c4dafd1f75d.exe windows x86
605152454270bc4e52ec4e087298fe00
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
gethostname
inet_addr
WSAStartup
WSACleanup
recv
__WSAFDIsSet
send
WSAGetLastError
getsockname
getpeername
select
accept
listen
ioctlsocket
connect
inet_ntoa
htons
htonl
bind
shutdown
closesocket
socket
setsockopt
gethostbyname
kernel32
GetVersionExA
GlobalUnlock
GlobalLock
GlobalAlloc
LockResource
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenProcess
GetModuleFileNameA
Sleep
SetProcessShutdownParameters
GetEnvironmentVariableA
SetLastError
ExitThread
CreateThread
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
TerminateProcess
ExitProcess
RaiseException
InterlockedIncrement
InterlockedDecrement
GetLocalTime
GetTimeZoneInformation
GlobalDeleteAtom
HeapAlloc
RtlUnwind
InterlockedExchange
TlsGetValue
ResumeThread
TlsAlloc
GetCurrentProcess
GetCurrentThread
DuplicateHandle
TlsSetValue
SetThreadPriority
CreateSemaphoreA
ReleaseSemaphore
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
WideCharToMultiByte
MultiByteToWideChar
GlobalAddAtomA
GetSystemTime
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
SetHandleCount
SystemTimeToFileTime
ReadFile
GetComputerNameA
SetErrorMode
GetLogicalDriveStringsA
FindFirstFileA
FindNextFileA
FindClose
SetFileTime
CreateDirectoryA
GetCurrentProcessId
GetCurrentThreadId
LoadLibraryA
GetProcAddress
FreeLibrary
UnmapViewOfFile
GetLastError
OutputDebugStringA
GetStdHandle
WriteConsoleA
WriteFile
CloseHandle
DeleteFileA
MoveFileA
CreateFileA
SetFilePointer
SetEndOfFile
AllocConsole
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
HeapDestroy
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
FlushFileBuffers
GetACP
GetOEMCP
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
HeapFree
user32
DestroyMenu
EnableMenuItem
LoadStringA
GetMenuItemID
TrackPopupMenu
SetMenuDefaultItem
GetSubMenu
CheckMenuItem
GetMenuState
MapWindowPoints
CreateDialogParamA
ExitWindowsEx
GetUserObjectInformationA
GetProcessWindowStation
TranslateMessage
GetMessageA
VkKeyScanA
GetAsyncKeyState
MapVirtualKeyA
GetClipboardOwner
GetClipboardData
PostQuitMessage
EnumWindows
GetPropA
IsWindowVisible
SetPropA
RemovePropA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DrawIconEx
LoadIconA
SetClipboardViewer
ChangeDisplaySettingsA
OpenDesktopA
EnumDesktopWindows
SystemParametersInfoA
FindWindowA
ChangeClipboardChain
PeekMessageA
WaitMessage
DispatchMessageA
RegisterWindowMessageA
GetCursorPos
IntersectRect
mouse_event
GetKeyboardState
keybd_event
SetTimer
GetForegroundWindow
GetWindowThreadProcessId
SetActiveWindow
MessageBeep
FlashWindow
SetForegroundWindow
EndDialog
DialogBoxParamA
EnumDisplaySettingsA
GetThreadDesktop
OpenInputDesktop
SetThreadDesktop
CloseDesktop
GetDC
GetWindowTextA
GetClassNameA
GetWindowDC
ReleaseDC
LoadImageA
DestroyCursor
GetIconInfo
LoadMenuA
CallWindowProcA
GetParent
WindowFromPoint
IsChild
GetSystemMetrics
LoadBitmapA
SetWindowTextA
GetDesktopWindow
EqualRect
IsRectEmpty
GetWindowPlacement
SetWindowRgn
InflateRect
PtInRect
GetWindowRgn
InvalidateRgn
ShowWindow
GetWindowLongA
GetCapture
ClientToScreen
GetWindowRect
SetWindowPos
UpdateWindow
LoadCursorA
SetCursor
BeginPaint
OffsetRect
FillRect
SetRect
EndPaint
SetCapture
ClipCursor
PostMessageA
DefWindowProcA
ReleaseCapture
DestroyWindow
RegisterClassExA
CreateWindowExA
SetWindowLongA
GetDlgItemTextA
SetDlgItemInt
MessageBoxA
GetDlgItemInt
SetDlgItemTextA
GetFocus
SetFocus
SendMessageA
SendDlgItemMessageA
GetDlgItem
EnableWindow
KillTimer
gdi32
GetRegionData
GetObjectA
GetBitmapBits
GdiFlush
SelectObject
BitBlt
CreateDIBSection
GetStockObject
CreatePalette
SelectPalette
RealizePalette
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
GetDIBits
CreateDCA
ExtEscape
DeleteDC
GetSystemPaletteEntries
SetROP2
FrameRgn
CreateRectRgnIndirect
CombineRgn
CreateRectRgn
CreateHatchBrush
DeleteObject
CreateSolidBrush
advapi32
RegCloseKey
RegSetValueExA
OpenProcessToken
ImpersonateLoggedOnUser
RevertToSelf
GetUserNameA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegCreateKeyA
shell32
Shell_NotifyIconA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
comctl32
ord17
vnchooks
SetKeyboardPriorityHook
SetMousePriorityHook
SetKeyboardPriorityLLHook
SetMousePriorityLLHook
UnSetHook
SetHook
SetKeyboardFilterHook
SetMouseFilterHook
Sections
.text Size: 240KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 300KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�dңu� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE