Static task
static1
Behavioral task
behavioral1
Sample
2f1bdfdd23ec5e2b02fb8c4110247b2944ec73f3d49248c7059a9defbe3ceec7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2f1bdfdd23ec5e2b02fb8c4110247b2944ec73f3d49248c7059a9defbe3ceec7.exe
Resource
win10v2004-20220812-en
General
-
Target
2f1bdfdd23ec5e2b02fb8c4110247b2944ec73f3d49248c7059a9defbe3ceec7
-
Size
433KB
-
MD5
7671735e743d78566e6f584df7ee2d30
-
SHA1
37566bbe4b77e19e4e3092d585277fe558aa3d7f
-
SHA256
2f1bdfdd23ec5e2b02fb8c4110247b2944ec73f3d49248c7059a9defbe3ceec7
-
SHA512
d7d84dd3bc9db08201622b38e81aa2eec71009ab335e28ed6598320b5441aba38b6af6711d097e0f32616f7d02584fbb0c331ae11e92f1bcd234aa4ffd5b3846
-
SSDEEP
12288:oII4SRZsFXaJckMjIvEdhScqQfZ809Myc8pgY1d/lRFWPd4BDBK:6shaJck6ORfQhQupgIhlq43K
Malware Config
Signatures
Files
-
2f1bdfdd23ec5e2b02fb8c4110247b2944ec73f3d49248c7059a9defbe3ceec7.exe windows x86
dac32a498333193839b89b18b7f47bb5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
lstrcmpiW
FlushInstructionCache
GlobalAlloc
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
lstrcmpW
MulDiv
GetModuleFileNameW
GlobalUnlock
GlobalLock
SetLastError
FreeLibrary
LoadLibraryExW
CreateThread
GlobalHandle
lstrlenA
CreateMutexW
ReleaseMutex
WaitForSingleObject
Sleep
CreateEventW
SetEvent
ExitProcess
LocalFree
GetCommandLineW
lstrcpyW
FreeResource
WaitForMultipleObjects
GetExitCodeProcess
TerminateProcess
GetProcessId
CreateDirectoryW
CreateSemaphoreW
ReleaseSemaphore
InitializeCriticalSection
OutputDebugStringA
ReadFile
MoveFileW
DeleteFileW
WritePrivateProfileStringW
GetTempPathW
GetPrivateProfileStringW
LoadLibraryW
FindClose
FindFirstFileW
ExpandEnvironmentStringsW
SetEndOfFile
WriteConsoleW
GetProcAddress
FlushFileBuffers
SetStdHandle
LCMapStringW
GetStringTypeW
GetConsoleMode
GetConsoleCP
SetFilePointer
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
HeapSize
GetStdHandle
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStartupInfoW
HeapSetInformation
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
RtlUnwind
InterlockedPopEntrySList
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedPushEntrySList
InterlockedCompareExchange
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
GetTempFileNameW
CreateFileW
WriteFile
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GlobalFree
GetCurrentThreadId
GetTickCount
GetLastError
CloseHandle
CreateFileA
user32
GetDesktopWindow
GetForegroundWindow
GetActiveWindow
IsWindowUnicode
GetWindowThreadProcessId
GetCursor
GetSystemMetrics
CharNextW
GetWindowLongW
SendMessageW
PostMessageW
SetWindowTextW
GetClientRect
ScreenToClient
GetShellWindow
IsWindowVisible
SetWindowLongW
EndDialog
CreateWindowExW
PtInRect
CreateAcceleratorTableW
RegisterWindowMessageW
DialogBoxIndirectParamW
LoadIconW
MapDialogRect
SendDlgItemMessageW
SetWindowContextHelpId
PostThreadMessageW
TranslateMessage
DispatchMessageW
GetMessageW
CheckDlgButton
IsDlgButtonChecked
KillTimer
SetActiveWindow
GetWindow
GetDlgItem
IsWindow
UnregisterClassA
MessageBoxW
InvalidateRect
DestroyWindow
MoveWindow
wsprintfW
DefWindowProcW
GetWindowTextW
GetWindowTextLengthW
GetSysColor
SetWindowPos
ClientToScreen
GetDC
ReleaseDC
InvalidateRgn
RegisterClassExW
LoadCursorW
GetClassInfoExW
SetFocus
GetFocus
DestroyAcceleratorTable
BeginPaint
EndPaint
CallWindowProcW
FillRect
ReleaseCapture
GetClassNameW
GetParent
IsChild
SetCapture
RedrawWindow
gdi32
GetObjectW
CreateSolidBrush
GetDeviceCaps
GetStockObject
SelectObject
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
BitBlt
advapi32
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
shell32
SHBrowseForFolderW
ShellExecuteExW
CommandLineToArgvW
SHGetSpecialFolderPathW
ExtractIconW
SHGetPathFromIDListW
ole32
CoAddRefServerProcess
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
CoInitialize
ProgIDFromCLSID
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
CLSIDFromString
CoGetClassObject
OleLockRunning
StringFromGUID2
CoTaskMemFree
CLSIDFromProgID
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoReleaseServerProcess
oleaut32
VariantCopy
RegisterTypeLi
UnRegisterTypeLi
DispCallFunc
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
VarUI4FromStr
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayCopy
SysAllocString
SafeArrayGetVartype
VariantClear
SysStringLen
SysAllocStringLen
SysFreeString
VariantInit
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
shlwapi
StrStrIW
winhttp
WinHttpQueryDataAvailable
WinHttpGetProxyForUrl
WinHttpCrackUrl
WinHttpConnect
WinHttpReadData
WinHttpSendRequest
WinHttpOpen
WinHttpSetOption
WinHttpGetIEProxyConfigForCurrentUser
WinHttpSetStatusCallback
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpOpenRequest
WinHttpCloseHandle
Sections
.text Size: 231KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE