Static task
static1
Behavioral task
behavioral1
Sample
2235b4da8ef51a94144a83038f76785a3b6f06d601a02a16a9a0a23a7e3cbc8c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2235b4da8ef51a94144a83038f76785a3b6f06d601a02a16a9a0a23a7e3cbc8c.exe
Resource
win10v2004-20220901-en
General
-
Target
2235b4da8ef51a94144a83038f76785a3b6f06d601a02a16a9a0a23a7e3cbc8c
-
Size
228KB
-
MD5
9113e0251d27f0b1afe87e7f2c5d6716
-
SHA1
6669f287113e879a7df9e0bd4a0367dece00adf4
-
SHA256
2235b4da8ef51a94144a83038f76785a3b6f06d601a02a16a9a0a23a7e3cbc8c
-
SHA512
7ba9d15977b32a69b1b85430d11878040e71ec6ca6f7e875bc0f8e853f2d5d94a1d25be0ee0f4ca2082f6c7a52c584f9bce575936d80d5c493e0b5820205d5e9
-
SSDEEP
3072:4ZxNzZuTNYNIwS3c1MHpI0GybjILKd4x9luF0T1z3yq5xR1jzrIqQak2oiNrTIui:47JZ3NIwS3y0dILK4uCx5xRxLTIu
Malware Config
Signatures
Files
-
2235b4da8ef51a94144a83038f76785a3b6f06d601a02a16a9a0a23a7e3cbc8c.exe windows x86
aa5b595af0a27b0b3bff500e2621be98
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
ExitProcess
RaiseException
GetCommandLineA
GetStartupInfoA
GetFileType
TerminateProcess
HeapAlloc
RtlUnwind
HeapFree
HeapSize
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetTickCount
GetTimeZoneInformation
GetACP
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
FlushFileBuffers
HeapReAlloc
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
SetErrorMode
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
SizeofResource
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetFileTime
GetFileSize
GetFileAttributesA
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
GetEnvironmentStringsW
GetEnvironmentStrings
UnlockFile
LoadLibraryA
FreeLibrary
DeleteFileA
GetVersionExA
GetWindowsDirectoryA
lstrcatA
GetModuleFileNameA
CopyFileA
lstrlenA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
WritePrivateProfileStringA
GetPrivateProfileStringA
FindFirstFileA
LockFile
GetStringTypeA
ReadFile
GetProfileStringA
SetFilePointer
WriteFile
DuplicateHandle
CreateFileA
GetCurrentProcess
EnterCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GlobalGetAtomNameA
MulDiv
GetVersion
GetModuleHandleA
GlobalAddAtomA
GlobalFindAtomA
FindResourceA
GetProcAddress
LockResource
LoadResource
GlobalDeleteAtom
CloseHandle
GetCurrentThread
lstrcmpA
lstrcmpiA
GetCurrentThreadId
lstrcpynA
SetLastError
lstrcpyA
GetLastError
MultiByteToWideChar
FormatMessageA
LocalFree
InterlockedIncrement
WideCharToMultiByte
InterlockedDecrement
GetStringTypeW
CreateProcessA
SetHandleCount
GetStdHandle
FindClose
user32
SetRect
GetNextDlgGroupItem
DestroyMenu
CopyAcceleratorTableA
RegisterClipboardFormatA
PostThreadMessageA
GetDesktopWindow
CharUpperA
LoadStringA
WindowFromPoint
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
CharNextA
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
DefWindowProcA
CreateWindowExA
GetClassNameA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetSysColorBrush
GetClassLongA
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
PostQuitMessage
PostMessageA
LoadCursorA
CopyIcon
GetWindowRect
GetParent
GetDC
ReleaseDC
InflateRect
InvalidateRect
IsWindow
SetWindowLongA
SetCursor
PtInRect
ReleaseCapture
RedrawWindow
SetCapture
MessageBeep
DestroyCursor
GetSysColor
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
LoadIconA
SendMessageA
GetDlgCtrlID
GetWindowTextA
DrawFocusRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
gdi32
DeleteObject
GetDeviceCaps
GetWindowExtEx
GetViewportExtEx
CreateSolidBrush
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
GetTextColor
GetBkColor
LPtoDP
GetMapMode
DPtoLP
PatBlt
CreateDIBitmap
CreateCompatibleDC
GetTextExtentPointA
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
SelectObject
RestoreDC
SaveDC
DeleteDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetTextExtentPoint32A
GetObjectA
CreateFontIndirectA
GetStockObject
AddFontResourceA
BitBlt
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegQueryValueA
RegCloseKey
RegSetValueExA
RegOpenKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteValueA
RegQueryValueExA
RegCreateKeyExA
shell32
ShellExecuteA
comctl32
ord17
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc
olepro32
ord253
oleaut32
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantChangeType
SysAllocString
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
Sections
.text Size: 152KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ