Static task
static1
Behavioral task
behavioral1
Sample
f7476e5b7fe7e1982e4b9c8b3693f08c0bfa4f436158ffaa6ca720c12e9197b1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f7476e5b7fe7e1982e4b9c8b3693f08c0bfa4f436158ffaa6ca720c12e9197b1.exe
Resource
win10v2004-20220812-en
General
-
Target
f7476e5b7fe7e1982e4b9c8b3693f08c0bfa4f436158ffaa6ca720c12e9197b1
-
Size
368KB
-
MD5
9401d6b18ac074f5beae0130012fd742
-
SHA1
df1b7b900015b4011b6740d0eac12fee335710dc
-
SHA256
f7476e5b7fe7e1982e4b9c8b3693f08c0bfa4f436158ffaa6ca720c12e9197b1
-
SHA512
5c19b115c69dc2bebfb6f760799b45a6a2cd12a65ab0dcb9c99f7fcbc0430ccf6ad1e87b1cb96fc5b30ace456482d1b455789cad560bde6b3b01bc3c3b511570
-
SSDEEP
6144:0FZ+k4M5ZAIHAOZIWaf9keNfwEc6tcH//eCuqTk4cnspHr2:0FQLMgIHXINIXVHOVUk4NL2
Malware Config
Signatures
Files
-
f7476e5b7fe7e1982e4b9c8b3693f08c0bfa4f436158ffaa6ca720c12e9197b1.exe windows x86
97df9b108da70249ecd8ec18ed684edf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharNextA
GetClassInfoA
CreateWindowExA
SystemParametersInfoA
RegisterClassA
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
LoadCursorA
SetCursor
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
CreateDialogParamA
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
LoadImageA
GetDC
EnableWindow
PeekMessageA
DispatchMessageA
ExitWindowsEx
InvalidateRect
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
PostQuitMessage
SendMessageA
SetTimer
KillTimer
DialogBoxParamA
SetWindowLongA
GetWindowLongA
SetWindowTextW
SetWindowTextA
LoadIconA
LoadStringW
LoadStringA
CharUpperW
CharUpperA
DestroyWindow
EndDialog
PostMessageA
ShowWindow
MessageBoxW
GetDlgItem
DialogBoxParamW
DrawIconEx
ShowScrollBar
RegisterDeviceNotificationA
GetUpdateRect
GetClassInfoW
GetWindowModuleFileNameA
GetWindowModuleFileNameW
SetSystemCursor
AppendMenuW
LoadCursorFromFileW
DrawMenuBar
IsWindowVisible
CheckRadioButton
shell32
ShellExecuteA
SHChangeNotify
ShellExecuteExA
SHGetMalloc
advapi32
CreateServiceA
RegQueryValueExA
RegEnumValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
OpenProcessToken
StartServiceA
RegSetValueExA
AdjustTokenPrivileges
CloseServiceHandle
ControlService
RegSetValueA
DeleteService
GetTokenInformation
LookupPrivilegeValueA
OpenSCManagerA
OpenServiceA
RegCloseKey
RegCreateKeyA
RegFlushKey
RegOpenKeyExA
RegQueryValueA
gdi32
CreateFontIndirectA
BitBlt
ChoosePixelFormat
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontA
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
LineTo
MoveToEx
Polygon
SelectObject
SetBkColor
SetBkMode
SetPixelFormat
SetTextColor
SwapBuffers
TextOutA
CreateBrushIndirect
SetTextAlign
GetDeviceCaps
comctl32
ImageList_LoadImageA
ord17
kernel32
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
SetErrorMode
GetExitCodeProcess
ExpandEnvironmentStringsA
GetEnvironmentVariableA
GetFileAttributesA
CompareFileTime
SearchPathA
GetShortPathNameA
MoveFileA
lstrcpynA
GetDiskFreeSpaceA
WritePrivateProfileStringA
GetPrivateProfileStringA
MulDiv
GetCPInfo
SetPriorityClass
SetProcessAffinityMask
SetThreadAffinityMask
SetThreadPriority
TerminateProcess
TerminateThread
UnmapViewOfFile
GetTickCount
lstrcatA
lstrcmpiA
lstrcpyA
HeapCreate
GetSystemInfo
GetSystemDirectoryA
GetProcAddress
GetPriorityClass
GetLocalTime
GetCurrentThreadId
GetACP
GetOEMCP
IsValidCodePage
RaiseException
GetConsoleCP
GetConsoleMode
HeapSize
GetLocaleInfoA
LCMapStringA
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetFileType
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetThreadPriority
SetEnvironmentVariableA
CopyFileA
MultiByteToWideChar
GlobalLock
GetOverlappedResult
EnumResourceNamesW
CreateSemaphoreW
LCMapStringW
LockResource
PeekNamedPipe
DeleteFileA
GetCommConfig
QueryInformationJobObject
HeapReAlloc
InitAtomTable
ReadConsoleA
CancelWaitableTimer
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
SetCurrentDirectoryA
CreateProcessA
CloseHandle
WaitForSingleObject
DeleteCriticalSection
WideCharToMultiByte
GetLastError
AreFileApisANSI
GetModuleFileNameA
GetModuleFileNameW
LocalFree
FormatMessageA
FormatMessageW
GetWindowsDirectoryA
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
RemoveDirectoryA
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryA
CreateDirectoryW
DeleteFileW
lstrlenA
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryA
GetTempPathA
GetTempFileNameA
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
CreateFileA
GetFileSize
SetFilePointer
ReadFile
WriteFile
SetEndOfFile
GetStdHandle
WaitForMultipleObjects
Sleep
VirtualAlloc
VirtualFree
CreateEventA
SetEvent
ResetEvent
InitializeCriticalSection
GetModuleHandleA
GetStartupInfoA
GetCommandLineW
GetUserDefaultLangID
GetVersion
GlobalAlloc
GlobalFree
GlobalMemoryStatusEx
AllocateUserPhysicalPages
GlobalUnlock
LoadLibraryA
LoadResource
MapUserPhysicalPages
MapViewOfFile
OpenFileMappingA
OpenProcess
QueryPerformanceCounter
QueryPerformanceFrequency
CreateFileMappingA
CreateThread
DeviceIoControl
ExitProcess
ExitThread
FindResourceA
FreeLibrary
FreeUserPhysicalPages
GetCommandLineA
GetCurrentProcess
GetCurrentThread
Sections
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 211KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ