Static task
static1
Behavioral task
behavioral1
Sample
d3b8f909ee5a58518a83f95c717a3a6adea58bed7f0625dd17de626756d4051e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d3b8f909ee5a58518a83f95c717a3a6adea58bed7f0625dd17de626756d4051e.exe
Resource
win10v2004-20220812-en
General
-
Target
d3b8f909ee5a58518a83f95c717a3a6adea58bed7f0625dd17de626756d4051e
-
Size
440KB
-
MD5
815b8ff8930a1b70db6d321aa5a62280
-
SHA1
96d3266dbec9a2bca662231211b640d3d49693b8
-
SHA256
d3b8f909ee5a58518a83f95c717a3a6adea58bed7f0625dd17de626756d4051e
-
SHA512
686cedf8654e365235323926cfa85de3dca3b6584f922e31dbef60aac96ef470f613b01477362d914ef3a18be203d39655de5c8341a0eddf8ea8aebd902442f3
-
SSDEEP
6144:9KGE1nsmUvJRdKP6vY+RI230j1fJIyyzPFhhnynkExaOpIi7jzspI6KY3VZ2:9KGEqtvJPKc30JeyfkdoIi7j4pI6X3V
Malware Config
Signatures
Files
-
d3b8f909ee5a58518a83f95c717a3a6adea58bed7f0625dd17de626756d4051e.exe windows x86
fc78cb9dc0bb5c02bf45c4cd44202c09
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
hid
HidD_GetAttributes
HidD_GetHidGuid
HidD_GetSerialNumberString
setupapi
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
kernel32
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
HeapAlloc
HeapFree
TerminateProcess
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileTime
GetFileSize
GetFileAttributesA
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetThreadLocale
FormatMessageA
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
GetProfileStringA
Sleep
GetUserDefaultLangID
CloseHandle
CreateFileA
ReadFile
WriteFile
lstrcpynA
GetLastError
CreateMutexA
LoadResource
FindResourceA
LockResource
GlobalFree
GlobalUnlock
GlobalLock
GetProcAddress
GetModuleHandleA
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
GetVersion
FreeLibrary
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
SetLastError
MulDiv
GetCurrentThread
lstrcmpA
GlobalAlloc
GetModuleFileNameA
GlobalFlags
SizeofResource
LocalAlloc
LocalFree
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
user32
SetRect
GetNextDlgGroupItem
MessageBeep
InvalidateRect
CharUpperA
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
PtInRect
GetClassNameA
DestroyMenu
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
LoadStringA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
CopyAcceleratorTableA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
LoadCursorA
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
CharNextA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetSysColorBrush
DefDlgProcA
IsWindowUnicode
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
SetForegroundWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
PostQuitMessage
GetSystemMenu
AppendMenuA
CreatePopupMenu
LoadIconA
EnableWindow
SendMessageA
GetDesktopWindow
CheckMenuItem
gdi32
GetTextExtentPointA
BitBlt
CreateCompatibleDC
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
PatBlt
GetMapMode
LPtoDP
DPtoLP
GetBkColor
GetTextColor
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateSolidBrush
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
DeleteObject
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
shell32
Shell_NotifyIconA
comctl32
ord17
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleUninitialize
olepro32
ord253
oleaut32
SysStringLen
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
Sections
.text Size: 136KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ