Static task
static1
Behavioral task
behavioral1
Sample
1716b74e7ee1ef094d24c7f2020d2b37a238365ea1cc883331d0a4a6f1dfc0ac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1716b74e7ee1ef094d24c7f2020d2b37a238365ea1cc883331d0a4a6f1dfc0ac.exe
Resource
win10v2004-20220812-en
General
-
Target
1716b74e7ee1ef094d24c7f2020d2b37a238365ea1cc883331d0a4a6f1dfc0ac
-
Size
848KB
-
MD5
4227df4af8e0fd545c2aec079f68ce50
-
SHA1
43757bfb9cf55bbb2426e71a26d54251b0374fa9
-
SHA256
1716b74e7ee1ef094d24c7f2020d2b37a238365ea1cc883331d0a4a6f1dfc0ac
-
SHA512
ecad8deb7caa57b0e5e61fccc83b981d83f205996d9c39f95bfb22a5dd4d5535a90a5cf24d1ccb93ce61f97e012fba0abcf43bc3be9a20a46f7a8bca76d5c9b5
-
SSDEEP
12288:6CMUE+Y47Z5+xdvT51Ow5+ffqz7NtW4xkNXAWeYrG7Watt4i2Fq0j1H03ekHjprl:m+Y3r5nWvNXAt7lf4ia1yFr2mSot
Malware Config
Signatures
Files
-
1716b74e7ee1ef094d24c7f2020d2b37a238365ea1cc883331d0a4a6f1dfc0ac.exe windows x86
b9042f09654dd37cc855d1837c9f07c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
ntohs
WSAStartup
htons
ntohl
htonl
WSACleanup
atl
ord20
ord32
ord30
ord58
ord21
ord16
ord17
ord57
ord23
ord18
kernel32
GetFullPathNameA
GetStringTypeExA
GetShortPathNameA
GetFileAttributesA
GetTempFileNameA
SetFileTime
GetFileTime
GetDiskFreeSpaceA
GetFileSize
LocalFileTimeToFileTime
SystemTimeToFileTime
IsBadWritePtr
IsBadReadPtr
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SizeofResource
WritePrivateProfileStringA
SetErrorMode
RtlUnwind
HeapFree
HeapReAlloc
GetStartupInfoA
ExitProcess
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
SetStdHandle
GetFileType
TerminateProcess
HeapSize
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
HeapDestroy
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
Sleep
IsBadCodePtr
IsValidLocale
GlobalFree
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
WideCharToMultiByte
DeleteFileA
GetCurrentDirectoryA
FindFirstFileA
FindClose
SetCurrentDirectoryA
FindResourceA
LoadResource
LockResource
EnterCriticalSection
LeaveCriticalSection
lstrlenW
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
HeapCreate
GetVersionExA
GetSystemInfo
HeapAlloc
GetCurrentThreadId
GetCommandLineA
lstrcmpiA
OpenMutexA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
lstrcpynA
GetTickCount
GlobalAlloc
lstrcmpA
GetCurrentThread
FileTimeToLocalFileTime
CreateMutexA
CreateEventA
CreateThread
WaitForSingleObject
CloseHandle
InterlockedDecrement
SetEvent
LoadLibraryA
GetPrivateProfileIntA
GetModuleFileNameA
GetPrivateProfileStringA
OutputDebugStringA
FileTimeToSystemTime
GetThreadLocale
MulDiv
SetLastError
FormatMessageA
LocalFree
lstrlenA
MultiByteToWideChar
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
InterlockedExchange
GetVolumeInformationA
GlobalLock
GlobalUnlock
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GetProfileStringA
user32
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
IsWindowVisible
DrawFocusRect
GetWindowLongA
SetCursor
ReleaseCapture
CreateWindowExA
DrawIconEx
LoadCursorA
CopyRect
GetSysColor
DrawTextA
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
ModifyMenuA
GetSysColorBrush
CheckMenuItem
EnableMenuItem
LoadMenuA
GetSubMenu
SetWindowPos
LoadStringA
ShowWindow
FillRect
RedrawWindow
GetCapture
SetCapture
OffsetRect
LoadBitmapA
CreatePopupMenu
InsertMenuItemA
GetDC
ReleaseDC
GetCursorPos
LoadIconA
UpdateWindow
IsWindow
GetWindowRect
SetMenu
CharNextA
PostThreadMessageA
ClientToScreen
WindowFromPoint
GetActiveWindow
SetTimer
KillTimer
InvalidateRect
PtInRect
PostMessageA
SetRect
GetSystemMetrics
GetClientRect
EnableWindow
SendMessageA
SetParent
LockWindowUpdate
GetParent
GetDCEx
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
RegisterWindowMessageA
SetWindowLongA
GetWindow
SetForegroundWindow
GetForegroundWindow
GetLastActivePopup
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
DestroyWindow
GetKeyState
GetDlgCtrlID
GetWindowTextA
GetWindowTextLengthA
GetDlgItem
SetWindowPlacement
TrackPopupMenu
GetMenu
RegisterClassA
GetClassInfoA
wsprintfA
WinHelpA
IsChild
MessageBoxA
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
SetFocus
SetActiveWindow
GetFocus
DispatchMessageA
PeekMessageA
MapWindowPoints
SendDlgItemMessageA
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
MoveWindow
IsWindowEnabled
GetNextDlgTabItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CreateDialogIndirectParamA
EndDialog
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
ValidateRect
TranslateMessage
GetMessageA
PostQuitMessage
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
DestroyMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
ShowOwnedPopups
CharUpperA
DestroyCursor
InflateRect
GetClassNameA
CopyAcceleratorTableA
DestroyIcon
GetNextDlgGroupItem
MessageBeep
FindWindowA
GetTabbedTextExtentA
advapi32
RegOpenKeyExA
RegSetValueA
RegOpenKeyA
RegQueryValueExA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
RegQueryValueA
RegSetValueExA
ole32
OleInitialize
OleUninitialize
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoCreateInstance
OleRun
CLSIDFromProgID
CoInitialize
CoUninitialize
CoTaskMemFree
CoGetClassObject
CLSIDFromString
CoRevokeClassObject
CoFreeUnusedLibraries
oleaut32
CreateErrorInfo
GetErrorInfo
VariantInit
SysAllocStringLen
VariantChangeType
SysAllocString
VariantTimeToSystemTime
VariantCopy
SysFreeString
QueryPathOfRegTypeLi
LoadRegTypeLi
SysStringLen
VariantClear
SysAllocStringByteLen
SysStringByteLen
gdi32
GetTextFaceA
GetROP2
GetBkMode
GetTextAlign
GetPolyFillMode
GetStretchBltMode
GetNearestColor
LPtoDP
GetTextMetricsA
CreateFontIndirectA
CombineRgn
SetRectRgn
GetMapMode
CreateRectRgnIndirect
CreateDCA
SetAbortProc
StartPage
EndPage
EndDoc
AbortDoc
GetViewportOrgEx
DPtoLP
Rectangle
GetCharWidthA
GetBkColor
Escape
ExtTextOutA
TextOutA
RectVisible
GetWindowOrgEx
GetWindowExtEx
GetDeviceCaps
CreateRectRgn
GetCurrentPositionEx
SetTextAlign
LineTo
MoveToEx
IntersectClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
GetStockObject
RestoreDC
SaveDC
StartDocA
GetViewportExtEx
PtVisible
GetTextExtentPointA
CreateDIBitmap
PatBlt
DeleteDC
SetBkColor
GetClipBox
CreatePen
CreateBitmap
StretchBlt
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetObjectA
SetTextColor
SetBkMode
SelectObject
CreatePatternBrush
CreateSolidBrush
GetTextExtentPoint32A
DeleteObject
CreateFontA
GetTextColor
comdlg32
GetSaveFileNameA
GetOpenFileNameA
PrintDlgA
CommDlgExtendedError
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
shell32
DragQueryFileA
SHGetFileInfoA
ExtractIconA
DragFinish
ShellExecuteA
comctl32
ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
ord17
_TrackMouseEvent
oledlg
ord8
gdiplus
GdipGetImageWidth
GdipGetImageHeight
GdiplusStartup
GdiplusShutdown
GdipCloneBitmapAreaI
GdipCreateBitmapFromFile
GdipDrawImageRectI
GdipDisposeImage
GdipImageSelectActiveFrame
GdipCloneImage
GdipDeleteGraphics
GdipDrawImagePointsI
GdipCreateFromHDC
GdipAlloc
GdipFree
GdipLoadImageFromFile
GdipLoadImageFromFileICM
olepro32
ord253
Sections
.text Size: 620KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ