Static task
static1
Behavioral task
behavioral1
Sample
f38b8013fee4865614006549a7d139eacefafacf6074151333961ef7c76c9af2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f38b8013fee4865614006549a7d139eacefafacf6074151333961ef7c76c9af2.exe
Resource
win10v2004-20220901-en
General
-
Target
f38b8013fee4865614006549a7d139eacefafacf6074151333961ef7c76c9af2
-
Size
268KB
-
MD5
74489627c9ebba0ce2e344fd2baa0a1d
-
SHA1
6e11b5c59e925faaee813e7fb2562c6f19d5bcfa
-
SHA256
f38b8013fee4865614006549a7d139eacefafacf6074151333961ef7c76c9af2
-
SHA512
f6a1b7ce97c8e51aca72e56f11b1bece498160aa6d93fc80bac17d5b0d0b35064953282d0b886ee36f986dc05317304360db3c9a40ace37197151afb57ab4d14
-
SSDEEP
6144:XMMFA3ozua5szNUjaZM8U2glixYCjJ1I+7Zp1:cWzua5szsaq8UdRap
Malware Config
Signatures
Files
-
f38b8013fee4865614006549a7d139eacefafacf6074151333961ef7c76c9af2.exe windows x86
97e07677ce6619dfd73124e91d71ea27
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
GetFileAttributesA
GetFileTime
GetCPInfo
WritePrivateProfileStringA
SizeofResource
SetErrorMode
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
ExitProcess
HeapAlloc
HeapFree
CreateThread
GetTickCount
TerminateProcess
RaiseException
SetStdHandle
GetFileType
HeapSize
HeapReAlloc
GetCommandLineA
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
WideCharToMultiByte
GetStartupInfoA
ExitThread
FormatMessageA
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
TlsGetValue
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalFlags
GetProcessVersion
EnterCriticalSection
LocalReAlloc
TlsSetValue
TlsFree
GlobalReAlloc
LeaveCriticalSection
TlsAlloc
GlobalHandle
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
GetFullPathNameA
GetThreadLocale
FindFirstFileA
lstrcpynA
GetVolumeInformationA
FindClose
LockFile
SetEndOfFile
UnlockFile
DuplicateHandle
SetFilePointer
GetCurrentProcess
GetACP
GetTimeZoneInformation
MulDiv
LocalFree
CommConfigDialogA
GetDefaultCommConfigA
PurgeComm
ResetEvent
SetEvent
CreateFileA
GetLastError
SetLastError
SetupComm
CloseHandle
GetCommState
SetCommState
SetCommMask
SetCommTimeouts
MultiByteToWideChar
FreeEnvironmentStringsA
InterlockedIncrement
GetProfileStringA
lstrlenA
InterlockedDecrement
GetVersion
LoadLibraryA
FreeLibrary
GlobalAddAtomA
lstrcatA
GlobalGetAtomNameA
GetModuleHandleA
GlobalFindAtomA
lstrcpyA
GlobalFree
GetProcAddress
GlobalUnlock
LoadResource
LockResource
FindResourceA
GlobalAlloc
GetModuleFileNameA
GlobalLock
lstrcmpiA
GlobalDeleteAtom
lstrcmpA
GetCurrentThreadId
GetCurrentThread
SuspendThread
SetThreadPriority
ResumeThread
CreateEventA
Sleep
ClearCommBreak
WaitCommEvent
ClearCommError
WriteFile
BuildCommDCBA
GetFileSize
ReadFile
GetOverlappedResult
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStrings
WaitForSingleObject
GetEnvironmentStringsW
IsBadReadPtr
user32
SetRect
GetNextDlgGroupItem
MessageBeep
InvalidateRect
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
GetClassNameA
GetDesktopWindow
GetSysColorBrush
LoadCursorA
DestroyMenu
CharUpperA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
LoadStringA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
CharNextA
CopyAcceleratorTableA
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpA
PtInRect
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
AdjustWindowRectEx
wsprintfA
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
PostQuitMessage
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
PostMessageA
LoadIconA
EnableWindow
GetClientRect
IsIconic
GetSystemMenu
SendMessageA
AppendMenuA
DrawIcon
GetSystemMetrics
MessageBoxA
ScreenToClient
DrawFocusRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
gdi32
DeleteObject
GetViewportExtEx
GetWindowExtEx
GetDeviceCaps
CreateSolidBrush
RectVisible
TextOutA
PtVisible
ExtTextOutA
Escape
GetTextColor
GetBkColor
LPtoDP
GetMapMode
DPtoLP
PatBlt
CreateDIBitmap
CreateCompatibleDC
GetTextExtentPointA
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetViewportExtEx
SetMapMode
SetBkMode
SelectObject
RestoreDC
GetStockObject
DeleteDC
SaveDC
SetBkColor
SetTextColor
GetObjectA
BitBlt
GetClipBox
CreateBitmap
comdlg32
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
comctl32
ord17
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc
olepro32
ord253
oleaut32
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantChangeType
SysAllocString
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
Sections
.text Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yvejlqf Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE