Static task
static1
Behavioral task
behavioral1
Sample
fb67d4b668757601ab1f7f001b6da0579a3bc068cbba2f434b128b4d28be62c2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fb67d4b668757601ab1f7f001b6da0579a3bc068cbba2f434b128b4d28be62c2.exe
Resource
win10v2004-20220901-en
General
-
Target
fb67d4b668757601ab1f7f001b6da0579a3bc068cbba2f434b128b4d28be62c2
-
Size
688KB
-
MD5
81789680c4a3474b2bc58ea6900c808a
-
SHA1
519d8e7d19d4182e4cea4e815b679cf0ed24d18b
-
SHA256
fb67d4b668757601ab1f7f001b6da0579a3bc068cbba2f434b128b4d28be62c2
-
SHA512
fd2e137541e4e50b46dbbd53df1412c18efbb180570f2b1d26337a3c0c33b5f7ee572830513abac0e07cc15e335718615d61003fec6e0750ef6f302c53cac6c1
-
SSDEEP
12288:LTZGufPjefnSN4HlV40QRB0QuvQHrxbumcloY0DoF8s170xoNas+Km52vhdhXtP:LTU8Cfa4HxQT/uvgxbDfD87+yn+R52vH
Malware Config
Signatures
Files
-
fb67d4b668757601ab1f7f001b6da0579a3bc068cbba2f434b128b4d28be62c2.exe windows x86
c3dc8436e2ebcccf4d2d94e03fcf4f57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextMetricsW
SelectObject
DPtoLP
BitBlt
SetMapMode
CombineRgn
PatBlt
GetWindowExtEx
GetBkMode
RoundRect
CreateCompatibleBitmap
MoveToEx
CreateRoundRectRgn
CreateRectRgnIndirect
GetBkColor
ExcludeClipRect
GetClipBox
SetBkMode
CreateDIBitmap
EqualRgn
FillRgn
RestoreDC
GetRgnBox
StretchDIBits
CreateFontIndirectA
ExtTextOutA
DeleteDC
CreateSolidBrush
GetDeviceCaps
ExtCreateRegion
CreateCompatibleDC
GetNearestPaletteIndex
TextOutW
GetTextColor
CreatePolygonRgn
CreateDIBSection
SaveDC
StretchBlt
DeleteObject
GetObjectA
CreateBitmap
CreatePalette
EnumFontFamiliesExA
CreateDCA
StartDocA
SetViewportExtEx
GetDIBColorTable
SetTextAlign
SelectClipRgn
Rectangle
GetPixel
GetSystemPaletteEntries
OffsetViewportOrgEx
shell32
ShellExecuteA
DragFinish
SHGetPathFromIDListA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetMalloc
DragAcceptFiles
ord155
DragQueryFileA
kernel32
WideCharToMultiByte
FindFirstFileA
LeaveCriticalSection
LockResource
GetUserDefaultLCID
GlobalHandle
SetErrorMode
TlsSetValue
IsBadWritePtr
GetCurrentProcess
GetEnvironmentStringsW
WriteConsoleA
GetTimeZoneInformation
TlsGetValue
DeleteFileA
MulDiv
FileTimeToSystemTime
GetModuleHandleA
CreateThread
FreeResource
GetFileType
InitializeCriticalSection
SystemTimeToFileTime
HeapSize
LocalReAlloc
SetEnvironmentVariableA
GetSystemTime
SetHandleCount
FormatMessageA
SetFilePointer
ReadFile
Sleep
GetCurrentThread
FreeEnvironmentStringsA
LocalFileTimeToFileTime
MoveFileA
GetTimeFormatA
GetFullPathNameA
GlobalReAlloc
RtlUnwind
GetSystemDirectoryA
HeapCreate
GetTickCount
GetEnvironmentVariableW
GlobalSize
CloseHandle
GetCurrentDirectoryA
GetTempFileNameA
TlsFree
GetVolumeInformationA
VirtualAlloc
FlushFileBuffers
LocalFree
IsValidCodePage
lstrcpynW
lstrlenA
FindResourceA
GetSystemInfo
CompareStringA
IsBadCodePtr
GlobalFree
lstrcpynA
CreateMutexA
HeapAlloc
GetExitCodeProcess
GlobalAddAtomA
GetSystemTimeAsFileTime
GetLocaleInfoW
GetDateFormatA
HeapFree
GetVersionExA
HeapReAlloc
FatalAppExitA
LocalAlloc
CreateFileA
SetThreadPriority
MultiByteToWideChar
LoadLibraryA
WriteFile
GetStringTypeW
DeleteCriticalSection
IsBadReadPtr
VirtualFree
GetFileAttributesA
GetACP
RaiseException
GlobalLock
GlobalAlloc
TlsAlloc
GetCurrentProcessId
TerminateProcess
LCMapStringW
GetProcAddress
GetLocaleInfoA
SetConsoleCtrlHandler
GetEnvironmentStrings
GetOEMCP
FreeEnvironmentStringsW
GetFullPathNameW
InterlockedDecrement
GetThreadLocale
HeapDestroy
InterlockedExchange
GetModuleFileNameA
GetStringTypeA
VirtualQuery
GetLastError
LCMapStringA
EnumSystemLocalesA
GetLocalTime
GetFileSize
CompareStringW
SetUnhandledExceptionFilter
InterlockedIncrement
GetDriveTypeA
ConvertDefaultLocale
SetStdHandle
QueryPerformanceCounter
SetLastError
FindClose
VirtualProtect
UnhandledExceptionFilter
GetStartupInfoA
ExitProcess
GetStdHandle
GetCommandLineA
GetCurrentThreadId
EnterCriticalSection
GetCPInfo
IsValidLocale
oleaut32
LoadTypeLi
user32
RegisterClassExA
GetDlgItem
DispatchMessageA
DeleteMenu
GetSubMenu
FillRect
SetRect
GetCapture
LoadIconA
DestroyCursor
OpenClipboard
SetWindowTextA
MessageBeep
SetWindowPos
IsMenu
MoveWindow
GetAsyncKeyState
IsDialogMessageA
TabbedTextOutA
SetCapture
MapWindowPoints
RegisterWindowMessageA
ReleaseDC
FindWindowA
UpdateWindow
GetMenu
RegisterClassA
SetTimer
GrayStringA
TranslateMessage
SetMenuItemInfoA
DrawStateA
SetWindowLongA
AppendMenuA
GetMenuItemCount
GetWindowTextA
IsChild
RemoveMenu
RemovePropA
IntersectRect
GetFocus
GetSystemMenu
PeekMessageA
IsClipboardFormatAvailable
CreatePopupMenu
wsprintfA
CreateAcceleratorTableA
GetDesktopWindow
GetClassNameA
CreateDialogParamA
ShowWindow
BeginPaint
GetScrollInfo
WinHelpA
GetParent
DefWindowProcA
CreateWindowExA
GetMenuState
DrawEdge
InvalidateRect
IsWindow
IsRectEmpty
SystemParametersInfoA
GetMenuItemID
GetClientRect
InsertMenuA
SetWindowContextHelpId
ShowCaret
LoadCursorA
SendMessageA
GetDlgCtrlID
PostQuitMessage
GetWindow
GetWindowLongA
EnableWindow
SetFocus
WaitMessage
CallNextHookEx
keybd_event
EndDialog
DestroyWindow
SetForegroundWindow
DestroyMenu
OffsetRect
EndPaint
TranslateAcceleratorA
KillTimer
DeferWindowPos
UnpackDDElParam
MessageBoxA
PtInRect
GetSysColor
GetCursorPos
ReleaseCapture
ModifyMenuA
GetDC
DestroyIcon
InflateRect
DrawFocusRect
LockWindowUpdate
DefDlgProcA
FrameRect
GetActiveWindow
GetLastActivePopup
GetSystemMetrics
DrawTextA
EnableMenuItem
LoadImageA
GetKeyState
GetMessageA
IsWindowEnabled
CopyRect
advapi32
IsValidSecurityDescriptor
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExA
DuplicateToken
AccessCheck
RegEnumKeyA
RegCloseKey
winmm
mixerGetLineControlsA
mmioOpenA
mixerGetLineInfoA
mixerGetControlDetailsA
mmioAscend
PlaySoundW
waveOutReset
mixerGetNumDevs
mmioClose
waveOutGetNumDevs
comctl32
InitCommonControlsEx
ImageList_Add
ImageList_GetIconSize
ImageList_AddMasked
CreatePropertySheetPageA
ole32
CoFreeUnusedLibraries
OleCreateMenuDescriptor
CoUninitialize
CLSIDFromString
CoGetMalloc
StgOpenStorage
OleIsCurrentClipboard
CoTaskMemAlloc
OleInitialize
IsAccelerator
RegisterDragDrop
CoCreateInstance
CoTaskMemFree
CreateItemMoniker
CoLockObjectExternal
StringFromGUID2
OleDestroyMenuDescriptor
OleTranslateAccelerator
CoRevokeClassObject
OleLockRunning
Sections
.text Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 460KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ