Static task
static1
Behavioral task
behavioral1
Sample
de9004ca0ce0c1eba06c36d2fe1e467247f687241741f5eb56a3d00c141c5574.exe
Resource
win10-20220901-en
General
-
Target
de9004ca0ce0c1eba06c36d2fe1e467247f687241741f5eb56a3d00c141c5574
-
Size
2.6MB
-
MD5
81875e206b8a7c5165734bd9974a3556
-
SHA1
19756c0b95c069545d06aff1e1dd6fe1ea39a00a
-
SHA256
de9004ca0ce0c1eba06c36d2fe1e467247f687241741f5eb56a3d00c141c5574
-
SHA512
45ee2eb42fc38a600552ce3e3958da748af00100036924f561fcb676134ab9c1a8410f7c6bc56611cc84ef4af0ff862e0b363d7cc45ed30d5cdfaca4bd33d9d4
-
SSDEEP
12288:DL6TVNvxaMWDzvLpwBFygtmbCum1LJm3Toh6C0uhXAxRF6fa90ofMjj2K:/6TTvxaOygGdyQTQ6xxdMjj
Malware Config
Signatures
Files
-
de9004ca0ce0c1eba06c36d2fe1e467247f687241741f5eb56a3d00c141c5574.exe windows x86
10117ff68eb9bbbff33bae47452c9036
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
UuidFromStringW
RpcStringFreeW
UuidToStringW
kernel32
VirtualProtect
Sleep
DisableThreadLibraryCalls
DecodePointer
EncodePointer
LockResource
GlobalUnlock
GlobalLock
GlobalAlloc
HeapFree
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetStringTypeW
SetConsoleCtrlHandler
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetStdHandle
GetFullPathNameW
GetCurrentDirectoryW
SetCurrentDirectoryW
VirtualAlloc
QueryPerformanceFrequency
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapReAlloc
HeapSize
GetCurrentThread
GetStdHandle
GetModuleHandleExW
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
VirtualQuery
GetSystemInfo
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RtlUnwind
LocalFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryExA
VirtualFree
IsProcessorFeaturePresent
FlushInstructionCache
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
GetModuleHandleW
GetProcAddress
FreeLibrary
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
SetLastError
WriteFile
WideCharToMultiByte
CloseHandle
EnumSystemLocalesW
CreateFileW
lstrlenW
GetProcessHeap
MulDiv
MultiByteToWideChar
lstrcmpiW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
QueryPerformanceCounter
GetLastError
RaiseException
WriteConsoleW
HeapAlloc
OutputDebugStringW
GetUserDefaultLCID
GetCurrentProcess
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
IsDebuggerPresent
user32
InvalidateRect
DestroyWindow
LoadMenuW
ClientToScreen
ReleaseDC
GetDC
UnregisterClassW
wsprintfW
SendMessageW
GetSubMenu
EndDialog
EnableWindow
IsDlgButtonChecked
CheckDlgButton
GetDlgItem
GetWindowTextLengthW
GetWindowTextW
SetDlgItemInt
SetDlgItemTextW
GetParent
SetFocus
CreateDialogParamW
GetKeyState
PtInRect
UnionRect
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
GetDialogBaseUnits
ShowWindow
MoveWindow
WinHelpW
IsDialogMessageW
MessageBoxA
GetDlgItemInt
SendDlgItemMessageW
SetWindowPos
IsChild
GetFocus
BeginPaint
GetClientRect
EndPaint
CharNextW
CallWindowProcW
GetWindowLongW
SetWindowLongW
RegisterClassExW
GetClassInfoExW
DefWindowProcW
CreateWindowExW
DialogBoxParamW
GetMenuStringW
SetCursor
LoadCursorW
InsertMenuW
RemoveMenu
IsWindow
MessageBoxW
GetActiveWindow
LoadIconW
CheckMenuItem
ModifyMenuW
GetWindowRect
TrackPopupMenu
gdi32
CreateRectRgnIndirect
CreateMetaFileW
SetWindowExtEx
CloseMetaFile
DeleteMetaFile
GetTextMetricsW
GetTextExtentPointW
SelectObject
SaveDC
SetWindowOrgEx
SetTextAlign
TextOutW
RestoreDC
CreateFontIndirectW
DeleteObject
GetDeviceCaps
comdlg32
GetSaveFileNameW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
LookupAccountSidW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
shell32
ShellAboutW
SHGetFolderPathW
ShellExecuteW
ole32
CoTaskMemFree
CoCreateGuid
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CreateDataAdviseHolder
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
StringFromIID
oleaut32
SetErrorInfo
GetErrorInfo
CreateErrorInfo
LoadRegTypeLi
VariantChangeType
UnRegisterTypeLi
LoadTypeLi
RegisterTypeLi
VarUI4FromStr
OleCreatePropertyFrame
VarBstrCat
VariantInit
VariantClear
SysAllocString
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SysStringLen
Sections
.text Size: 464KB - Virtual size: 464KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ