Static task
static1
Behavioral task
behavioral1
Sample
49c3fd8c8f7285d7695498fef08bbf8101cde01823a211e77874debf31e9efbb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
49c3fd8c8f7285d7695498fef08bbf8101cde01823a211e77874debf31e9efbb.exe
Resource
win10v2004-20220901-en
General
-
Target
49c3fd8c8f7285d7695498fef08bbf8101cde01823a211e77874debf31e9efbb
-
Size
764KB
-
MD5
ed461a0ce3ed0676b766e52231ccb175
-
SHA1
17eb114562122fde7916c2e78bea39c5141f4017
-
SHA256
49c3fd8c8f7285d7695498fef08bbf8101cde01823a211e77874debf31e9efbb
-
SHA512
dfddea523b928b159b6e785f8af69e6dcc7a78c81c4e15067a02f7da56f163915c2b16f011e419d89450645da912fd1ee1b37860be0e04e530eac03273bea830
-
SSDEEP
12288:kRjO/9TTBoc1DfD8aMg3mb8dB06bMlEu/YsgJVpT5T/8Rg4Nttf:kaTBoc1DLLz2grFhu/YsgXB/Ij9
Malware Config
Signatures
Files
-
49c3fd8c8f7285d7695498fef08bbf8101cde01823a211e77874debf31e9efbb.exe windows x86
564f54e9a82bc4199b2db99798d73094
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetForegroundWindow
LoadMenuA
ScreenToClient
GetMonitorInfoW
GetParent
SetWindowRgn
ValidateRect
SetRect
GetDlgItemTextA
DefWindowProcW
GetScrollPos
TranslateMessage
CopyIcon
DrawFrameControl
SetCursorPos
MessageBoxW
SetDlgItemTextW
InvalidateRgn
CharLowerA
SetFocus
ChildWindowFromPoint
OffsetRect
IsWindowEnabled
IntersectRect
GetDlgItem
TranslateAcceleratorA
CreateAcceleratorTableA
DestroyMenu
GetWindowPlacement
CheckDlgButton
UnpackDDElParam
EnableMenuItem
FindWindowW
GetAncestor
MapVirtualKeyW
SendMessageW
OpenDesktopA
CreateCaret
EqualRect
SetCursor
GetMenuCheckMarkDimensions
GrayStringW
SendDlgItemMessageA
RegisterClassW
ClientToScreen
ModifyMenuA
DdeConnect
IsDlgButtonChecked
TabbedTextOutW
PostMessageW
UnhookWindowsHookEx
GetWindowTextLengthA
AppendMenuA
UnregisterClassW
OpenClipboard
PostQuitMessage
ShowWindow
IsIconic
DdeClientTransaction
MapWindowPoints
SendDlgItemMessageW
LoadIconA
GetKeyState
DrawFocusRect
RegisterClipboardFormatA
AdjustWindowRect
LoadMenuW
DestroyAcceleratorTable
GetWindowTextLengthW
LoadStringA
GetDesktopWindow
RegisterWindowMessageW
InflateRect
SetWindowTextA
IsRectEmpty
SendMessageTimeoutW
RemovePropA
SetMenuItemBitmaps
IsZoomed
GetDlgCtrlID
DefFrameProcA
IsChild
SetWindowPos
GetDCEx
SetDlgItemTextA
SetClipboardData
SetPropA
GetActiveWindow
SetRectEmpty
IsWindowUnicode
LoadAcceleratorsW
GetSysColorBrush
GetWindowLongA
GetMenuState
MessageBoxA
RegisterClassExA
DrawTextExW
WinHelpA
LoadBitmapW
SetWindowPlacement
DrawTextA
WindowFromPoint
GetWindowDC
KillTimer
OemToCharA
PtInRect
GetNextDlgGroupItem
GetClassLongA
DrawMenuBar
CallNextHookEx
GetClassNameA
AdjustWindowRectEx
InvertRect
GetCursorPos
DeleteMenu
GetCaretPos
GetWindow
GetMenuItemID
GetPropA
CopyAcceleratorTableA
GetMessagePos
SetDlgItemInt
SetWindowTextW
CopyRect
RemovePropW
DestroyWindow
GetDoubleClickTime
DrawIconEx
IsDialogMessageA
CreatePopupMenu
TrackPopupMenu
SetWindowContextHelpId
GetMenuStringW
GetWindowRect
keybd_event
LockWindowUpdate
GetMessageTime
SetParent
MapVirtualKeyExA
TabbedTextOutA
GrayStringA
SendMessageA
RedrawWindow
DispatchMessageA
EndPaint
EnableWindow
FillRect
IsWindow
GetClassLongW
InvalidateRect
DrawTextW
GetNextDlgTabItem
DefWindowProcA
MoveWindow
DrawTextExA
CallWindowProcW
MessageBeep
ShowOwnedPopups
GetSystemMetrics
DrawStateA
TrackPopupMenuEx
MonitorFromPoint
DrawIcon
GetMenuItemCount
GetFocus
GetScrollRange
PostMessageA
GetWindowTextA
IsMenu
GetDC
SetWindowLongW
RegisterHotKey
SetWindowsHookExA
SetMenuItemInfoW
FindWindowExA
ScrollDC
GetClientRect
DefMDIChildProcA
PeekMessageA
wsprintfA
CreateWindowExW
DrawStateW
CreateDialogParamA
ReuseDDElParam
DialogBoxParamA
SetWindowLongA
GetLastActivePopup
BringWindowToTop
HideCaret
RemoveMenu
EndDialog
ReleaseDC
CreateMenu
SetWindowsHookExW
ExcludeUpdateRgn
GetWindowThreadProcessId
SystemParametersInfoA
GetWindowTextW
CharUpperA
InsertMenuA
FrameRect
IsWindowVisible
CallWindowProcA
DdeUninitialize
UnregisterHotKey
SetScrollRange
GetWindowLongW
wsprintfW
GetMessageA
LoadCursorW
LoadBitmapA
MapDialogRect
UnregisterClassA
CreateDialogIndirectParamW
GetClassInfoA
CreateWindowExA
GetMenu
LoadImageW
GetClassNameW
ModifyMenuW
GetCapture
GetTopWindow
RegisterWindowMessageA
DrawEdge
LoadIconW
ScrollWindowEx
RegisterClassA
BeginPaint
GetAsyncKeyState
DdeDisconnect
SetActiveWindow
SetTimer
GetSysColor
FindWindowA
IsDialogMessageW
UpdateWindow
GetSubMenu
CheckMenuItem
LoadCursorA
GetSystemMenu
GetForegroundWindow
SetCapture
SystemParametersInfoW
GetMenuStringA
comdlg32
ReplaceTextA
ChooseFontA
CommDlgExtendedError
PrintDlgA
ChooseColorA
FindTextA
GetSaveFileNameA
PageSetupDlgA
GetOpenFileNameA
oleaut32
LoadTypeLi
comctl32
PropertySheetA
ImageList_DragMove
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_Add
ImageList_SetImageCount
CreatePropertySheetPageA
ImageList_DrawEx
_TrackMouseEvent
ImageList_Draw
ImageList_Replace
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_Merge
ImageList_DragLeave
ImageList_BeginDrag
InitCommonControlsEx
ImageList_GetImageCount
ImageList_GetDragImage
ImageList_SetOverlayImage
DestroyPropertySheetPage
ImageList_Remove
ord17
ImageList_SetDragCursorImage
ImageList_GetBkColor
ImageList_EndDrag
ImageList_LoadImageA
ImageList_Create
ImageList_GetIcon
ImageList_Destroy
ImageList_SetBkColor
ImageList_GetIconSize
ImageList_GetImageInfo
kernel32
FatalAppExitA
CreateDirectoryA
LoadResource
FlushFileBuffers
FreeLibrary
GlobalDeleteAtom
MoveFileExA
FindNextFileA
GetTempPathA
SetEvent
SystemTimeToFileTime
GetFileSize
FileTimeToLocalFileTime
SetPriorityClass
EnumSystemLocalesA
FindResourceW
HeapSize
GetProfileStringA
SetFilePointer
GlobalHandle
GetLocaleInfoW
FindNextFileW
GlobalSize
GlobalFlags
HeapAlloc
GetVersion
VirtualQuery
GetConsoleCP
LocalFileTimeToFileTime
SetErrorMode
GlobalGetAtomNameA
GetCurrentProcess
FreeEnvironmentStringsW
IsBadStringPtrA
IsValidLocale
TerminateThread
lstrcmpiA
GetThreadLocale
SetCurrentDirectoryW
GetCurrentThread
FindResourceExA
GetFileTime
WriteConsoleW
GetCurrentProcessId
SetHandleCount
GetVersionExW
GetStartupInfoA
SetCurrentDirectoryA
InterlockedCompareExchange
GetEnvironmentVariableA
GlobalMemoryStatus
GetCommandLineA
GetSystemInfo
MoveFileA
CreateMutexA
GetSystemDirectoryA
GetModuleFileNameW
SetFileTime
RemoveDirectoryA
GetStringTypeW
LockResource
MoveFileExW
LockFile
InterlockedDecrement
DeleteFileA
MultiByteToWideChar
TlsSetValue
Sleep
TlsGetValue
HeapDestroy
SetEnvironmentVariableA
SetThreadPriority
WritePrivateProfileStringA
HeapFree
SizeofResource
LeaveCriticalSection
GetModuleFileNameA
GetLocaleInfoA
WaitForSingleObject
VirtualProtect
HeapReAlloc
VirtualAlloc
WinExec
lstrcpyA
GetTempPathW
TerminateProcess
QueryPerformanceFrequency
GetSystemTimeAsFileTime
CreateFileMappingW
CreateFileA
WideCharToMultiByte
CreateDirectoryW
SetLastError
GetPrivateProfileStringA
GetLocalTime
GetTickCount
GetStdHandle
GlobalAlloc
GetSystemTime
GetOEMCP
GetTimeFormatA
FindResourceA
GetDateFormatA
InitializeCriticalSection
OpenMutexA
GetFileSizeEx
CreateFileW
GetTimeZoneInformation
SetUnhandledExceptionFilter
GetVolumeInformationA
GetPrivateProfileIntA
GlobalAddAtomW
AreFileApisANSI
GetCurrentDirectoryW
lstrlenW
MulDiv
InterlockedIncrement
CreateToolhelp32Snapshot
FindFirstFileA
LoadLibraryA
ExitProcess
GetCPInfo
OpenFile
WriteConsoleA
LocalFree
GlobalReAlloc
GetCurrentThreadId
lstrlenA
ReleaseMutex
UnlockFile
FormatMessageW
CompareStringA
GlobalFindAtomA
GetModuleHandleW
GetModuleHandleA
InterlockedExchange
GetEnvironmentStrings
SetEndOfFile
EnterCriticalSection
GetFileType
GetEnvironmentStringsW
SetStdHandle
FreeEnvironmentStringsA
GetUserDefaultLCID
VirtualFree
FileTimeToSystemTime
FindFirstFileW
GetStartupInfoW
IsBadCodePtr
FormatMessageA
LCMapStringA
LocalReAlloc
OpenProcess
GetShortPathNameA
EnumResourceLanguagesW
GetProcAddress
RemoveDirectoryW
ReadFile
GetCurrentDirectoryA
GetStringTypeA
LockFileEx
GetLastError
HeapCreate
IsDebuggerPresent
LCMapStringW
GetVersionExA
LocalAlloc
FindClose
GetComputerNameA
ConvertDefaultLocale
RtlUnwind
GetACP
RaiseException
lstrcatA
DeleteCriticalSection
SuspendThread
ResumeThread
TlsFree
GetDiskFreeSpaceExA
SetFilePointerEx
MoveFileW
OpenEventA
GetPrivateProfileSectionA
IsBadWritePtr
lstrcmpA
WriteFile
lstrcpyW
UnhandledExceptionFilter
GetConsoleOutputCP
GetProcessVersion
GetFileAttributesA
FreeResource
CompareStringW
QueryPerformanceCounter
DuplicateHandle
TlsAlloc
lstrcmpW
GetDriveTypeA
IsValidCodePage
CloseHandle
CreateThread
GlobalFree
GlobalUnlock
Sections
.text Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 460KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ