Static task
static1
Behavioral task
behavioral1
Sample
8724c0b14fbe6ecd83de7947ff5c39d81a02cf559dd5127d339f49c3ed7af4b2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8724c0b14fbe6ecd83de7947ff5c39d81a02cf559dd5127d339f49c3ed7af4b2.exe
Resource
win10v2004-20220812-en
General
-
Target
8724c0b14fbe6ecd83de7947ff5c39d81a02cf559dd5127d339f49c3ed7af4b2
-
Size
300KB
-
MD5
3d37fb368d6c543c7c4219301355d396
-
SHA1
2cf1f841c0a84cc1d35633edb40c34d3241fa6db
-
SHA256
8724c0b14fbe6ecd83de7947ff5c39d81a02cf559dd5127d339f49c3ed7af4b2
-
SHA512
e7ab4cd22d6b91c13d7d286e036f0753606c2721cc2020b73d1b9e5d395a95eab352b4a6a04315f769b93f486fa5a7c466a6f50ae42d33f4ace884d4d2658351
-
SSDEEP
3072:D5IfFSJgmGX9H7+7C2cZ+5ZvMGkxtQqCPaxqev8NjJbD0kZq7sMhNL0vyUOGcksr:NIfFSJgN9GrcZaEVtMi0RopFG23UI
Malware Config
Signatures
Files
-
8724c0b14fbe6ecd83de7947ff5c39d81a02cf559dd5127d339f49c3ed7af4b2.exe windows x86
dbbad8c2061fe89bbf2bdc15e3b316a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
GetTickCount
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
TerminateProcess
CreateThread
ExitThread
GetACP
HeapSize
HeapReAlloc
SetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
WritePrivateProfileStringA
GetProfileStringA
GetFileSize
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
FindFirstFileA
FindClose
GetFileTime
GetFullPathNameA
GetFileAttributesA
SizeofResource
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GetThreadLocale
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
CloseHandle
GlobalAlloc
lstrcmpA
GetCurrentThread
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
lstrcpynA
EnterCriticalSection
GlobalFree
GlobalLock
GlobalUnlock
MulDiv
SetLastError
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetTempPathA
GetModuleFileNameA
CreateFileA
DeviceIoControl
CreateMutexA
GetLastError
ReleaseMutex
GetProcessHeap
HeapAlloc
HeapFree
lstrlenA
GetProcAddress
FormatMessageA
LocalFree
FreeLibrary
UnhandledExceptionFilter
LoadLibraryA
user32
GetSysColorBrush
CharUpperA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
IsDialogMessageA
SetDlgItemTextA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
SetFocus
ScreenToClient
CopyRect
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
LoadCursorA
TrackPopupMenu
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
SetWindowTextA
GetForegroundWindow
GetWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
AdjustWindowRectEx
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
GetCursorPos
GetWindowTextA
GetSubMenu
EnableMenuItem
GetWindowRect
EnableWindow
AnimateWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DestroyIcon
SetTimer
PostMessageA
IsIconic
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
LoadMenuA
LoadIconA
FindWindowA
IsWindow
SetForegroundWindow
SendMessageA
GetParent
ShowWindow
PtInRect
GetClassNameA
GetMenuItemID
KillTimer
GetSystemMetrics
DefDlgProcA
IsWindowUnicode
SetWindowPos
CharNextA
LoadStringA
MapDialogRect
SetWindowContextHelpId
DestroyMenu
GetMessageA
TranslateMessage
ValidateRect
SetCursor
PostQuitMessage
GetDesktopWindow
InvalidateRect
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
GetMessagePos
SetMenuItemBitmaps
CheckMenuItem
GetNextDlgTabItem
GetDlgItem
MoveWindow
gdi32
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
SetMapMode
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
LPtoDP
DPtoLP
GetTextColor
GetBkColor
GetMapMode
PatBlt
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCloseKey
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
shell32
Shell_NotifyIconA
ShellExecuteA
comctl32
ord17
oledlg
ord8
ole32
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromProgID
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
olepro32
ord253
oleaut32
SafeArrayAccessData
SysAllocStringLen
SysFreeString
VariantClear
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
VariantTimeToSystemTime
SysStringLen
SafeArrayUnaccessData
wsock32
ntohs
closesocket
WSAStartup
recvfrom
gethostbyname
WSACleanup
ioctlsocket
inet_addr
sendto
socket
htons
bind
recv
gethostname
ntohl
wininet
InternetGetLastResponseInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
iphlpapi
SendARP
GetAdaptersAddresses
GetIfEntry
GetIpForwardTable
DeleteIpNetEntry
CreateIpNetEntry
GetBestRoute
GetAdaptersInfo
ws2_32
WSAIoctl
winmm
PlaySoundA
Sections
.text Size: 204KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ