Static task
static1
Behavioral task
behavioral1
Sample
d2778e08035ac6b295f0c67c6202c288b3142882cba3b1eedf3e78cd3108ef35.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d2778e08035ac6b295f0c67c6202c288b3142882cba3b1eedf3e78cd3108ef35.exe
Resource
win10v2004-20220901-en
General
-
Target
d2778e08035ac6b295f0c67c6202c288b3142882cba3b1eedf3e78cd3108ef35
-
Size
369KB
-
MD5
0ab3edd336beb54f3b25c50cdd8ece50
-
SHA1
89b9fbdd0ee6f520567965368554f73169da2ab2
-
SHA256
d2778e08035ac6b295f0c67c6202c288b3142882cba3b1eedf3e78cd3108ef35
-
SHA512
f2b0660458d834bd9dbfdaa87082e4d27ca5f41eb9fc5112e1b18cdf87a1ae4aae11beb76a00e04e70bbd4c2f303e3a0157ac366ef28bc0e42b6d45327868d5d
-
SSDEEP
3072:BxLulEujLGIoPNqbxfpfjQRVJ+iCDuremCpKvH+FS3oLCgXFq85dspd9lmzm:B0mu/MPNIRf8YDDaemGKveH+gjsTmi
Malware Config
Signatures
Files
-
d2778e08035ac6b295f0c67c6202c288b3142882cba3b1eedf3e78cd3108ef35.exe windows x86
49a3abedf9d11346f4c2b17ccc3fa709
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UnregisterClassW
DestroyMenu
LoadCursorW
GetSysColorBrush
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
SetCursor
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
ShowWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
CheckRadioButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetMenu
IsWindowVisible
UpdateWindow
EnableWindow
CheckMenuItem
OpenInputDesktop
CreateDesktopW
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
CopyRect
GetMenu
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
SendDlgItemMessageA
SetThreadDesktop
SwitchDesktop
CloseDesktop
SendMessageW
PostMessageW
GetSystemMetrics
IsIconic
GetFocus
GetTopWindow
GetWindowLongW
GetClassNameW
SetWindowLongW
SetWindowPos
SetForegroundWindow
EndDialog
GetNextDlgTabItem
IsWindowEnabled
SetFocus
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetDlgItem
IsCharLowerA
RegisterClassA
DrawEdge
GetMenuItemInfoA
CharLowerW
PtInRect
ShowScrollBar
RegisterClipboardFormatA
GetGUIThreadInfo
InsertMenuItemW
DlgDirSelectComboBoxExW
GetAncestor
GetClientRect
GetWindow
GetParent
GetProcessDefaultLayout
comdlg32
GetFileTitleW
advapi32
CheckTokenMembership
RegCloseKey
SetSecurityDescriptorGroup
ReadEventLogW
LookupAccountNameW
GetSecurityDescriptorSacl
GetSidSubAuthorityCount
RegDeleteKeyA
CopySid
LookupPrivilegeValueW
RegOpenKeyExW
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
OpenProcessToken
RegQueryValueExW
AdjustTokenPrivileges
AllocateAndInitializeSid
RegCreateKeyExW
FreeSid
RegSetValueExW
RegDeleteKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
ObjectDeleteAuditAlarmW
gdi32
CreateDCA
CombineTransform
CreateColorSpaceA
CreateDIBPatternBrushPt
ColorMatchToTarget
AddFontResourceExA
CreateCompatibleBitmap
Arc
CreateDIBSection
opengl32
glLightfv
glLightModelfv
glLightModelf
glHint
glGetString
glGenTextures
glEnd
glEnable
glDisable
glDepthFunc
glCopyTexImage2D
glColor4f
glColor3f
glClearDepth
glClearColor
glClear
glCallList
glBlendFunc
glBegin
kernel32
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
GetCommandLineA
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
ExitThread
GetSystemTimeAsFileTime
GetDateFormatA
GetTimeFormatA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
SetEnvironmentVariableW
CreateFileA
GetCurrentDirectoryA
GetDriveTypeA
SetFilePointer
GetExitCodeProcess
CreatePipe
GetFileAttributesA
CreateProcessA
MoveFileA
DeleteFileA
GetLogicalDriveStringsW
ResetEvent
FormatMessageA
GetThreadLocale
TlsFree
DeleteCriticalSection
GetCPInfo
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
CompareStringA
lstrcmpW
GlobalDeleteAtom
SetErrorMode
GetModuleHandleW
FreeResource
lstrlenA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
LocalFree
lstrlenW
MulDiv
SetLastError
GetExitCodeThread
GetDriveTypeW
WideCharToMultiByte
CreateEventW
SetEvent
GetModuleHandleA
GetCurrentProcess
GetVersionExW
GetACP
GetOEMCP
IsValidCodePage
HeapFree
GetTimeZoneInformation
HeapAlloc
ExitProcess
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
HeapSize
HeapReAlloc
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
RtlUnwind
LCMapStringA
VirtualAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
CompareStringW
LocalReAlloc
LoadLibraryExW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetLocaleInfoW
GetSystemDefaultLCID
GetEnvironmentVariableW
GetCommandLineW
CreateDirectoryW
RemoveDirectoryW
GetSystemDirectoryW
GetWindowsDirectoryW
GetTempPathW
GetCurrentDirectoryW
GetUserDefaultLCID
GetSystemDefaultLangID
SetCurrentDirectoryW
CreateThread
GetModuleFileNameW
GetLastError
Sleep
CloseHandle
WaitForSingleObject
VirtualAllocEx
OpenProcess
GetCurrentProcessId
SetStdHandle
GetComputerNameExA
FormatMessageW
EndUpdateResourceW
FillConsoleOutputAttribute
GetProcessIoCounters
EnumTimeFormatsA
RaiseException
SizeofResource
LCMapStringW
LockResource
LoadResource
FindResourceW
GetProcAddress
Sections
.text Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 121KB - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loles Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 120KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE