Static task
static1
Behavioral task
behavioral1
Sample
c7d3d3e8a81cc6abc73b58220bc79e149160560315bc8863c2a60227c5a3bf90.exe
Resource
win7-20220812-en
General
-
Target
c7d3d3e8a81cc6abc73b58220bc79e149160560315bc8863c2a60227c5a3bf90
-
Size
251KB
-
MD5
7a4e0b6b58dff0a1fc0c3e694e868f2c
-
SHA1
969fadf1bf0a32f7d2235664d52e2ced44b178ce
-
SHA256
c7d3d3e8a81cc6abc73b58220bc79e149160560315bc8863c2a60227c5a3bf90
-
SHA512
5eb20af0be3db0767cd4ee02e664f703339f326b85802241907030b6f7287160987cd6a9b83e63080b2f4d381246e69556d24d0409906709ec9a3f2bd7fe75ee
-
SSDEEP
6144:JTOLm+ENnjzo3oq/NLuFmVLFsa0Ye+lR0y3r/y:Jv+AnMBVdlbjy
Malware Config
Signatures
Files
-
c7d3d3e8a81cc6abc73b58220bc79e149160560315bc8863c2a60227c5a3bf90.exe windows x86
7fb662b61e4b6217c006a696c4c3a15e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawEdge
MessageBeep
DrawStateW
ShowCursor
DefFrameProcW
TranslateMDISysAccel
DefMDIChildProcW
GetMenuStringW
ChangeDisplaySettingsW
EnumDisplaySettingsW
UnregisterHotKey
MsgWaitForMultipleObjects
MapWindowPoints
LoadKeyboardLayoutW
CharPrevW
DlgDirSelectExW
GetCaretBlinkTime
ImpersonateDdeClientWindow
EnumDesktopsA
CopyImage
DragDetect
GetMessageW
SendMessageW
SetFocus
GetDlgItem
TranslateMessage
DispatchMessageW
CharUpperW
PostThreadMessageW
CharNextW
CopyRect
ShowWindow
EnableWindow
IsWindow
SetWindowTextW
LoadIconW
GetClassInfoExW
UnregisterClassW
SetRect
AdjustWindowRect
IsZoomed
PeekMessageW
DdeFreeStringHandle
DdeQueryStringW
DdeUninitialize
LoadCursorW
SetCursor
AppendMenuW
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
CreateWindowExW
LoadAcceleratorsW
DialogBoxParamW
CreateDialogParamW
MessageBoxW
AllowSetForegroundWindow
KillTimer
SetTimer
RegisterClassExW
DefWindowProcW
DestroyWindow
SetForegroundWindow
IsChild
TranslateAcceleratorW
IsDialogMessageW
SystemParametersInfoW
GetClassInfoW
GetWindowLongW
SetWindowLongW
IsDlgButtonChecked
DefDlgProcW
RegisterClassW
SetDlgItemTextW
CheckDlgButton
EndDialog
PostMessageW
PtInRect
IsRectEmpty
MonitorFromWindow
GetMonitorInfoW
LoadStringW
UnregisterClassA
EqualRect
InsertMenuW
CreateMenu
ModifyMenuW
GetSystemMenu
MoveWindow
GetClientRect
SetWindowPos
SetWindowPlacement
EnableMenuItem
UpdateWindow
InvalidateRect
LockWindowUpdate
IsWindowVisible
PostQuitMessage
AdjustWindowRectEx
CharLowerW
FillRect
CheckRadioButton
GetCursorPos
GetWindowDC
DrawIconEx
GetFocus
MapDialogRect
ScreenToClient
GetWindow
DrawTextW
EnumDisplayMonitors
GetDesktopWindow
CreateDialogIndirectParamW
GetDlgItemTextW
GetCapture
BeginPaint
DrawIcon
EndPaint
SendDlgItemMessageW
GetDC
ReleaseDC
DestroyIcon
GetMenu
LoadImageW
IsWindowEnabled
RedrawWindow
ShowWindowAsync
FindWindowExA
EnumThreadWindows
SetScrollPos
SetScrollInfo
SetClassLongA
GetScrollRange
ScrollWindowEx
WaitForInputIdle
GetDlgItemInt
SetDlgItemInt
FlashWindow
GetMenuStringA
GetNextDlgTabItem
GetAsyncKeyState
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
SetParent
GetDCEx
LoadBitmapA
RegisterWindowMessageA
GetMessagePos
WindowFromPoint
GetSysColorBrush
FrameRect
DrawFrameControl
GetWindowThreadProcessId
GetActiveWindow
GetMenuItemID
CharUpperBuffA
IsCharAlphaNumericA
SetWindowsHookExA
UnhookWindowsHookEx
DialogBoxParamA
SetDlgItemTextA
InflateRect
UnionRect
ValidateRect
CreateAcceleratorTableW
DestroyAcceleratorTable
GetUpdateRect
SetMenu
DestroyCursor
RegisterClipboardFormatW
InsertMenuItemW
GetSubMenu
RemoveMenu
DestroyMenu
CreatePopupMenu
SetMenuItemInfoW
CheckMenuRadioItem
CheckMenuItem
GetMenuState
ChildWindowFromPoint
HideCaret
OpenClipboard
IsClipboardFormatAvailable
CloseClipboard
keybd_event
GetWindowTextLengthW
GetWindowTextW
GetClassNameW
CreateIconIndirect
GetIconInfo
LoadBitmapW
GetForegroundWindow
DrawFocusRect
SetWindowRgn
DrawMenuBar
BringWindowToTop
GetUpdateRgn
GetSysColor
SetWindowsHookExW
TrackPopupMenu
RegisterHotKey
CallNextHookEx
GetMenuItemCount
GetMenuItemInfoW
GetMessageTime
CallWindowProcW
ClientToScreen
SetClipboardData
GetParent
ScrollWindow
GetScrollInfo
SetCursorPos
ReleaseCapture
SetCapture
GetKeyState
VkKeyScanW
DdePostAdvise
DdeConnect
DdeNameService
DdeCreateStringHandleW
DdeClientTransaction
DdeDisconnect
DdeInitializeW
DdeGetLastError
DdeCreateDataHandle
DdeGetData
DdeFreeDataHandle
comdlg32
CommDlgExtendedError
GetSaveFileNameW
ChooseColorW
ChooseFontW
PrintDlgW
PageSetupDlgW
GetOpenFileNameW
shell32
ShellExecuteExW
DragQueryFileW
ExtractIconExW
ExtractIconW
DragFinish
DragQueryPoint
DragAcceptFiles
SHFileOperationA
ShellExecuteA
ShellExecuteW
ole32
RegisterDragDrop
OleGetClipboard
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleInitialize
OleUninitialize
RevokeDragDrop
CoLockObjectExternal
CoCreateInstance
DoDragDrop
ReleaseStgMedium
advapi32
RegEnumValueW
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegEnumKeyW
RegCreateKeyW
RegOpenKeyExW
RegCloseKey
gdi32
LineTo
CreateBitmap
CreateCompatibleBitmap
DeleteDC
CreateCompatibleDC
GetPaletteEntries
GetObjectW
CreateSolidBrush
CreatePen
SetBkMode
SetTextColor
SetBkColor
GetRegionData
ExtCreateRegion
OffsetRgn
GetDeviceCaps
DeleteObject
CreateFontIndirectW
ExcludeClipRect
GetTextMetricsW
SelectObject
GdiFlush
RealizePalette
SelectPalette
GetTextExtentPoint32W
CreateRectRgn
GetStockObject
Rectangle
SetStretchBltMode
MoveToEx
ExtSelectClipRgn
ExtFloodFill
GetPixel
SetPixel
Polyline
PolyBezier
PolyPolygon
RoundRect
Ellipse
MaskBlt
StretchBlt
StretchDIBits
GetRgnBox
EqualRgn
PtInRegion
GetNearestPaletteIndex
CreatePalette
RestoreDC
SaveDC
CreateHatchBrush
ExtCreatePen
PatBlt
CreateICW
CreateDIBSection
GetDIBits
CreateDIBitmap
GetDIBColorTable
EnumFontFamiliesExW
GetEnhMetaFileW
CopyEnhMetaFileW
SelectClipRgn
CombineRgn
CreateRectRgnIndirect
RectInRegion
SetTextAlign
SetBrushOrgEx
GetClipBox
CreatePatternBrush
DeleteEnhMetaFile
GetSystemPaletteEntries
SetAbortProc
EndDoc
StartPage
EndPage
StartDocW
CreateDCW
ColorMatchToTarget
CreateColorSpaceA
CloseFigure
CreateBrushIndirect
CreateBitmapIndirect
TextOutW
SetROP2
GetCharABCWidthsW
GetTextExtentExPointW
SetWindowOrgEx
SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
SetMapMode
GetBkColor
GetTextColor
Arc
Pie
Polygon
BitBlt
SetPolyFillMode
comctl32
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ImageList_GetIconSize
ImageList_DragLeave
ImageList_ReplaceIcon
ImageList_Add
ImageList_EndDrag
ImageList_DragMove
ImageList_DragEnter
ImageList_SetDragCursorImage
ImageList_BeginDrag
CreateStatusWindowW
ImageList_Draw
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
TlsAlloc
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
InitializeCriticalSection
GetFullPathNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetStringTypeA
GetStringTypeW
HeapSize
SetUnhandledExceptionFilter
SetEnvironmentVariableA
SetEnvironmentVariableW
VirtualProtect
GetSystemInfo
VirtualQuery
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
CompareStringA
CompareStringW
IsBadReadPtr
IsBadCodePtr
GetFileInformationByHandle
GetVolumeInformationA
TlsFree
GetProcessHeap
OutputDebugStringW
ExpandEnvironmentStringsW
DuplicateHandle
CreateProcessW
SetNamedPipeHandleState
CreatePipe
GetExitCodeProcess
GetModuleFileNameW
IsValidCodePage
GetVersionExW
GetEnvironmentVariableW
GetExitCodeThread
ResumeThread
TerminateThread
ReleaseSemaphore
CreateSemaphoreW
CreateMutexW
LoadLibraryW
FormatMessageW
FindNextFileW
GetTempFileNameW
FindFirstFileW
GetTempPathW
GetThreadLocale
CreateFileW
GetWindowsDirectoryW
SetCurrentDirectoryW
CopyFileW
GetCommandLineW
GetDateFormatW
GetFileAttributesW
GetUserDefaultLCID
GetLocaleInfoW
SetThreadLocale
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
GetDateFormatA
GetTimeFormatA
RaiseException
GetCPInfo
GetOEMCP
GetACP
SetConsoleCtrlHandler
FileTimeToLocalFileTime
FileTimeToSystemTime
HeapReAlloc
LeaveCriticalSection
LockResource
LoadResource
FindResourceA
GetTickCount
MultiByteToWideChar
CloseHandle
WideCharToMultiByte
Sleep
SetEvent
SetThreadPriority
GetCurrentThread
FreeLibrary
GetProcAddress
LoadLibraryA
WaitForSingleObject
CreateEventA
GetSystemDefaultLangID
ExitProcess
GetModuleHandleA
TerminateProcess
HeapAlloc
HeapFree
RtlUnwind
ExitThread
TlsSetValue
TlsGetValue
CreateThread
GetSystemTimeAsFileTime
SetStdHandle
EnterCriticalSection
GetTempPathA
SetLastError
MoveFileA
CopyFileA
LocalFree
LocalReAlloc
LocalAlloc
GetTimeZoneInformation
ReleaseMutex
GetFileTime
CompareFileTime
GetShortPathNameA
GetEnvironmentVariableA
FindFirstChangeNotificationA
WaitForMultipleObjects
FindNextChangeNotification
FindCloseChangeNotification
SetErrorMode
CreateMutexA
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
GetCurrentThreadId
GetLocalTime
RemoveDirectoryA
GetPrivateProfileStringA
WritePrivateProfileStringA
SetFileAttributesA
GetLogicalDriveStringsA
GetDriveTypeA
GetLocaleInfoA
DeleteFileA
CreateDirectoryA
FlushFileBuffers
ReadFile
SetFilePointer
GetLastError
MulDiv
GlobalSize
WriteFile
FindFirstFileA
FindNextFileA
FindClose
WinExec
GetFileAttributesA
GetFileType
QueryDosDeviceA
GetCurrentProcess
GetDiskFreeSpaceA
LoadLibraryExA
EnumResourceTypesA
EnumResourceNamesA
CreateFileA
QueryPerformanceFrequency
QueryPerformanceCounter
GetVersionExA
lstrcpyW
lstrlenW
lstrcatW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
GetModuleFileNameA
SetEndOfFile
GetWindowsDirectoryA
GetSystemDefaultLCID
GlobalUnWire
ConvertDefaultLocale
WritePrivateProfileStringW
GetModuleHandleW
DecodePointer
HeapSetInformation
GetStartupInfoW
EncodePointer
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
WriteConsoleW
IsProcessorFeaturePresent
PeekNamedPipe
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE