Static task
static1
Behavioral task
behavioral1
Sample
d31aa4c27840f1fb906eb18544dc08b2a4ca6ea9507f28c0034980e59a014f16.exe
Resource
win7-20220812-en
General
-
Target
d31aa4c27840f1fb906eb18544dc08b2a4ca6ea9507f28c0034980e59a014f16
-
Size
795KB
-
MD5
041c73cd7d43896f7a0a021593abb160
-
SHA1
888adb1dac724445b6ba73edeeb72f50d92c8821
-
SHA256
d31aa4c27840f1fb906eb18544dc08b2a4ca6ea9507f28c0034980e59a014f16
-
SHA512
f29ca77bc94526d847e57da188203c5b42926c3a36f7a441f1fb105444427db827f323f7aced358ce152a0b3e1d39562b94a24e1fdef0f398cae417de1af09ff
-
SSDEEP
12288:1NFlcr2LDUiO2s/CzjfNm1eNqK9h/8VnejbBqgVFbNNHyBGAoViUff:1NFlceObgTNFL8VKAWFHQGA7Uf
Malware Config
Signatures
Files
-
d31aa4c27840f1fb906eb18544dc08b2a4ca6ea9507f28c0034980e59a014f16.exe windows x86
2d501413941f5b9e71c0c7acd33df6e9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeFormatA
GetDateFormatA
CompareStringW
GetTimeZoneInformation
LoadLibraryW
GetProcAddress
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameW
FormatMessageA
LocalFree
AreFileApisANSI
GetTempPathW
EnterCriticalSection
MultiByteToWideChar
lstrlenA
GlobalUnlock
GlobalLock
GlobalAlloc
WideCharToMultiByte
FindResourceExW
SizeofResource
LockResource
LoadResource
MulDiv
lstrlenW
lstrcmpA
GetModuleFileNameA
GetLastError
DeleteCriticalSection
FindResourceW
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
SetLastError
RaiseException
GetLocalTime
InitializeCriticalSection
CloseHandle
Sleep
TryEnterCriticalSection
InterlockedExchange
SetEndOfFile
SetFilePointer
GetFileSizeEx
CreateFileW
WriteFile
MoveFileA
DeleteFileA
UnmapViewOfFile
ReadFile
GetFileSize
GetTempFileNameA
GetTempPathA
CreateFileA
GetModuleHandleA
MapViewOfFileEx
CreateFileMappingA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
InterlockedPushEntrySList
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
InterlockedPopEntrySList
RtlUnwind
DecodePointer
EncodePointer
GetCommandLineA
HeapSetInformation
VirtualProtect
GetModuleHandleW
GetSystemInfo
VirtualQuery
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetLocaleInfoW
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FatalAppExitA
SetConsoleCtrlHandler
FreeLibrary
LCMapStringW
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
FlushFileBuffers
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointerEx
FindClose
RemoveDirectoryW
DeleteFileW
DeviceIoControl
GetFullPathNameW
GetFileAttributesW
CreateDirectoryExW
CopyFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFileInformationByHandle
GetFileAttributesExW
GetFileTime
SetFileTime
SetFileAttributesW
MoveFileExW
GetDiskFreeSpaceExW
FindFirstFileW
FindNextFileW
CreateDirectoryW
SetEnvironmentVariableA
user32
DestroyAcceleratorTable
GetSysColor
GetWindow
IsChild
GetFocus
ReleaseDC
GetDC
CallWindowProcA
EndPaint
FillRect
GetClientRect
BeginPaint
RedrawWindow
SetWindowPos
GetClassNameA
CharNextA
GetDesktopWindow
CreateAcceleratorTableA
MoveWindow
ScreenToClient
ClientToScreen
ReleaseCapture
SetCapture
GetWindowTextLengthA
InvalidateRgn
DestroyWindow
GetDlgItem
CreateWindowExA
UnregisterClassA
GetWindowTextA
SetWindowTextA
SetWindowLongA
GetWindowLongA
DefWindowProcA
SendMessageA
SetFocus
GetMessageA
TranslateMessage
DispatchMessageA
IsWindow
GetParent
RegisterClassExA
LoadCursorA
GetClassInfoExA
RegisterWindowMessageA
InvalidateRect
ole32
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
OleLockRunning
CLSIDFromProgID
CoGetClassObject
CoUninitialize
CreateStreamOnHGlobal
OleUninitialize
CoInitialize
OleInitialize
CLSIDFromString
oleaut32
SysAllocString
VariantInit
OleCreateFontIndirect
LoadTypeLi
LoadRegTypeLi
SysAllocStringLen
SysFreeString
VariantClear
SysStringLen
shlwapi
PathFindFileNameW
StrStrW
gdi32
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
CreateSolidBrush
GetObjectA
GetStockObject
GetDeviceCaps
Sections
.text Size: 425KB - Virtual size: 425KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 260KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE