Static task
static1
Behavioral task
behavioral1
Sample
cb0bd2c5c15d66f70298e7db485fa6263738a3db0fca0862f16863780d751e9e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cb0bd2c5c15d66f70298e7db485fa6263738a3db0fca0862f16863780d751e9e.exe
Resource
win10v2004-20220901-en
General
-
Target
cb0bd2c5c15d66f70298e7db485fa6263738a3db0fca0862f16863780d751e9e
-
Size
829KB
-
MD5
01c86076f1fc2d06e9e44dac04e805c0
-
SHA1
f7497bb4bb99126f5489c219ae24106c72fc074e
-
SHA256
cb0bd2c5c15d66f70298e7db485fa6263738a3db0fca0862f16863780d751e9e
-
SHA512
baa4235edb1896f883fe7b5a2c627b40d4b75534240505596d2c14679963a034a2adad7600d01f328002049e50d88c170e35203c17c950d1fabeadc95791fc72
-
SSDEEP
12288:TtEFeq7ZvZ+L52x7N0h6DjfPRlHIw1m9x5dQmg6wZL/PeJaF8n/vacm:TaFeqRZhEWjx9Iw16ir8JO4va/
Malware Config
Signatures
Files
-
cb0bd2c5c15d66f70298e7db485fa6263738a3db0fca0862f16863780d751e9e.exe windows x86
09914d035f20e022cbee4f78c4947960
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wimgapi
WIMCreateFile
WIMGetAttributes
WIMUnregisterMessageCallback
WIMRegisterMessageCallback
WIMSplitFile
WIMCloseHandle
gdiplus
GdipCreateHBITMAPFromBitmap
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipCreateFromHDC
GdipDrawImageRectI
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipDisposeImage
GdipImageRotateFlip
GdipDrawImageRectRect
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipGetImageBounds
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
harddisk
QSFormatEx
GetMainDiskIndexbyLocation
DetectDriveType
IsRemovalDevice
HPGetDiskLength
QueryDiskLengthInfo
DrvLetter2DiskPosSorted
GetPartitionInfo
QueryDiskInfo
DskPos2LogDskLetter
kernel32
FreeResource
MulDiv
SetThreadPriority
GetCurrentThreadId
GetModuleHandleA
GetVersionExA
lstrcmpW
LoadLibraryA
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GetCurrentProcessId
GetThreadLocale
FileTimeToSystemTime
InterlockedExchange
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
GetVersion
ConvertDefaultLocale
GetCurrentThread
LockFile
UnlockFile
ResumeThread
DuplicateHandle
GetFullPathNameW
GlobalFlags
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
lstrlenA
FileTimeToLocalFileTime
SetErrorMode
GetTickCount
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
ExitThread
CreateThread
ExitProcess
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
VirtualProtect
VirtualQuery
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
CopyFileExW
CreateFileA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetSystemPowerStatus
VirtualAlloc
FlushFileBuffers
GetFileTime
ResetEvent
WaitForSingleObject
SetEvent
CreateEventW
GetPrivateProfileIntW
WritePrivateProfileStringW
Sleep
SetFilePointer
ReadFile
GetCurrentProcess
SetFileAttributesW
DeleteFileW
RemoveDirectoryW
CopyFileW
FindClose
GetFileSize
WriteFile
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
InterlockedDecrement
InterlockedIncrement
GetDiskFreeSpaceExW
GetWindowsDirectoryW
DeviceIoControl
CloseHandle
CreateFileW
lstrlenW
GetSystemTime
GetSystemInfo
QueryPerformanceFrequency
QueryPerformanceCounter
GetVersionExW
lstrcmpiW
CreateDirectoryW
GlobalMemoryStatus
FormatMessageW
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
SetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetDriveTypeW
GetVolumeInformationW
FindFirstFileW
GetFileAttributesW
FindNextFileW
SetCurrentDirectoryW
OutputDebugStringW
GetModuleFileNameW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
OutputDebugStringA
GetPrivateProfileStringW
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
CreateMutexW
FreeLibrary
LocalFree
SuspendThread
SetThreadExecutionState
GetSystemDirectoryW
GetStdHandle
GetTimeZoneInformation
SetEndOfFile
user32
MapDialogRect
SetWindowContextHelpId
CharUpperW
GetSysColorBrush
UnregisterClassW
CopyAcceleratorTableW
InvalidateRgn
CharNextW
MessageBeep
RegisterClipboardFormatW
GetLastActivePopup
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
GetMenu
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
EqualRect
DefWindowProcW
CallWindowProcW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowTextLengthW
GetWindowTextW
GetFocus
SetFocus
ShowWindow
MoveWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
PostQuitMessage
CopyRect
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ScreenToClient
GrayStringW
DrawTextExW
TabbedTextOutW
SetWindowsHookExW
CallNextHookEx
GetMessageW
IsWindowVisible
GetCursorPos
ValidateRect
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindowEnabled
GetNextDlgTabItem
RegisterDeviceNotificationW
UnregisterDeviceNotification
SetWindowPos
GetKeyState
LoadIconW
SetForegroundWindow
IsIconic
GetSystemMetrics
GetClassInfoW
PeekMessageW
DispatchMessageW
TranslateMessage
PostThreadMessageW
LoadBitmapW
MessageBoxW
LockWindowUpdate
GetDlgItem
KillTimer
SetTimer
wsprintfW
RedrawWindow
GetNextDlgGroupItem
DrawIconEx
DrawTextW
IsWindow
GetWindowLongW
PtInRect
ReleaseCapture
SetCursor
LoadCursorW
WindowFromPoint
GetParent
ClientToScreen
GetClientRect
EnableWindow
InvalidateRect
UpdateWindow
ReleaseDC
GetDC
GetWindowRect
GetSystemMenu
SendMessageW
PostMessageW
SetCapture
IsRectEmpty
GetWindowThreadProcessId
EnableMenuItem
SetRect
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
DestroyMenu
GetForegroundWindow
UnregisterClassA
EndDialog
gdi32
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
CreateRectRgnIndirect
GetMapMode
DPtoLP
RectVisible
GetRgnBox
GetBkColor
GetTextColor
PtVisible
GetWindowExtEx
GetViewportExtEx
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateDCW
SelectObject
GetTextMetricsW
GetDeviceCaps
GetStockObject
DeleteObject
GetTextExtentPoint32W
BitBlt
CreateCompatibleDC
GetObjectW
CreateFontIndirectW
TextOutW
msimg32
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegQueryValueExW
RegQueryValueW
RegEnumKeyW
StartServiceW
RegOpenKeyW
RegCloseKey
OpenSCManagerW
OpenServiceW
CloseServiceHandle
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
shell32
SHGetSpecialFolderPathW
ShellExecuteExW
comctl32
_TrackMouseEvent
ord17
shlwapi
PathFindFileNameW
PathRemoveFileSpecW
PathAppendW
PathFileExistsW
PathRemoveBackslashW
PathStripToRootW
PathQuoteSpacesW
PathRemoveExtensionW
PathFindExtensionW
PathAddBackslashW
PathIsUNCW
oledlg
OleUIBusyW
ole32
CoCreateGuid
StringFromGUID2
CreateClassMoniker
GetRunningObjectTable
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitialize
CoSetProxyBlanket
CoCreateInstance
oleaut32
SysAllocString
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
SysStringByteLen
SysStringLen
SysAllocStringLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysFreeString
Sections
.text Size: 468KB - Virtual size: 466KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 128KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE