Static task
static1
Behavioral task
behavioral1
Sample
d9fa9d3dcb5c5ee846b488ec1d8ce1b211e3e9e30453589a24288ba7dc2844d7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d9fa9d3dcb5c5ee846b488ec1d8ce1b211e3e9e30453589a24288ba7dc2844d7.exe
Resource
win10v2004-20220901-en
General
-
Target
d9fa9d3dcb5c5ee846b488ec1d8ce1b211e3e9e30453589a24288ba7dc2844d7
-
Size
1.3MB
-
MD5
5bc8ba61b7a8e0b4991abdf617878ecd
-
SHA1
a24df73a7ce777886d2415d574eae46f7247e735
-
SHA256
d9fa9d3dcb5c5ee846b488ec1d8ce1b211e3e9e30453589a24288ba7dc2844d7
-
SHA512
6c9ea6de848d644cd45257200d3ff31e90c8c4a8028680e3fc1296fa35d56fd870492524def9065cb0284573fd7b03810aeee90cbc0537bcb32bd0fa3a56a28e
-
SSDEEP
24576:t4kynjOX9UOLD0vaMcxl/s0BbXm5halsV7MMMMMM7XaMzofgNSi9Ck:5y2ovaMKbXm5haGpMMMMMM73zof2Sip
Malware Config
Signatures
Files
-
d9fa9d3dcb5c5ee846b488ec1d8ce1b211e3e9e30453589a24288ba7dc2844d7.exe windows x86
fe86d54ec13b0f0257a21322d849f4a7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
ImageList_ReplaceIcon
ord8
CreateStatusWindowW
ImageList_Destroy
ImageList_Create
ImageList_Remove
ImageList_AddMasked
ImageList_Add
PropertySheetW
shlwapi
SHAutoComplete
kernel32
GetDriveTypeA
GetDiskFreeSpaceA
GetVolumeInformationA
GetFileAttributesA
SetFileAttributesA
SetFileAttributesW
MoveFileA
DeleteFileW
DeleteFileA
RemoveDirectoryW
RemoveDirectoryA
DeviceIoControl
CreateDirectoryA
CreateDirectoryW
ExpandEnvironmentStringsW
FindNextFileA
FindFirstFileA
WideCharToMultiByte
GetDiskFreeSpaceW
GetVersionExW
CompareFileTime
FindCloseChangeNotification
FindFirstChangeNotificationW
GetLocaleInfoW
GetNumberFormatW
CreateThread
ExitThread
GetProcessAffinityMask
SetEvent
ResetEvent
WaitForMultipleObjects
CreateEventW
GetFullPathNameA
GetFullPathNameW
GetModuleFileNameA
CopyFileW
GetCompressedFileSizeW
FindResourceW
SizeofResource
LoadResource
LoadLibraryExW
UpdateResourceW
EnumResourceLanguagesW
EndUpdateResourceW
EnumResourceNamesW
BeginUpdateResourceW
CompareStringA
SetThreadPriority
GetCurrentThread
SetPriorityClass
SetCurrentDirectoryA
GetCurrentDirectoryA
CompareStringW
IsDBCSLeadByte
GetCPInfo
GlobalMemoryStatus
GetVolumeInformationW
GetLogicalDrives
SetCurrentDirectoryW
ResumeThread
WriteFile
GetSystemTimeAsFileTime
GetCurrentThreadId
GetDateFormatA
GetTimeFormatA
GetLocalTime
GetThreadPriority
GetPriorityClass
SetErrorMode
GetCurrentProcessId
MulDiv
FindNextChangeNotification
HeapFree
HeapAlloc
GetProcessHeap
LeaveCriticalSection
EnterCriticalSection
SetEnvironmentVariableA
GetLocaleInfoA
LoadLibraryA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
SetHandleCount
HeapSize
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
HeapCreate
VirtualAlloc
VirtualFree
DeleteCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
GetCommandLineA
InterlockedDecrement
SetStdHandle
RaiseException
RtlUnwind
HeapReAlloc
GetStdHandle
ReadFile
CreateFileA
GetFileType
GetFileTime
SetFilePointer
FlushFileBuffers
SetEndOfFile
SetFileTime
BackupSeek
BackupRead
CreateFileW
GetCurrentProcess
FormatMessageW
LocalFree
GetCurrentDirectoryW
MoveFileW
CreateMutexW
ReleaseMutex
GetLastError
GlobalSize
GlobalAlloc
WriteConsoleW
GlobalLock
GlobalUnlock
GlobalFree
MultiByteToWideChar
GetVersionExA
GetTickCount
GetSystemTime
SystemTimeToFileTime
CreateFileMappingW
WaitForSingleObject
OpenFileMappingW
MapViewOfFile
CloseHandle
UnmapViewOfFile
GetTempPathW
GetCommandLineW
GetModuleFileNameW
FindNextFileW
LoadLibraryW
LocalFileTimeToFileTime
Sleep
FreeLibrary
GetTempPathA
ExpandEnvironmentStringsA
GetDriveTypeW
FileTimeToDosDateTime
FindFirstFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTimeFormatW
GetDateFormatW
FindClose
DosDateTimeToFileTime
GetFileAttributesW
GetModuleHandleW
GetProcAddress
SetLastError
WriteConsoleA
GetConsoleOutputCP
SuspendThread
user32
SetScrollRange
LoadIconW
PtInRect
ScrollWindowEx
SetScrollPos
CreateDialogParamW
PostThreadMessageW
IsChild
GetLastActivePopup
GetClipboardData
GetMenuItemID
PostQuitMessage
SetMenu
InsertMenuW
LoadMenuW
RegisterClassW
LoadAcceleratorsW
GetMenuState
GetSysColor
CopyImage
FillRect
ExitWindowsEx
CharUpperA
CharLowerA
DrawIconEx
LoadStringW
GetWindow
SetMenuItemInfoW
GetSystemMenu
SystemParametersInfoW
RedrawWindow
GetComboBoxInfo
IsCharUpperW
IsCharAlphaW
CharLowerW
OpenClipboard
EmptyClipboard
SetClipboardData
CharToOemA
GetDialogBaseUnits
MessageBeep
CharUpperW
GetFocus
FlashWindow
CheckMenuItem
LoadBitmapW
InsertMenuItemW
LoadImageW
BeginPaint
EndPaint
SetTimer
KillTimer
GetWindowTextLengthW
UpdateWindow
RegisterClassExW
SetWindowTextW
TranslateMessage
PeekMessageW
GetMessageW
MoveWindow
GetClientRect
CopyRect
IsWindow
AppendMenuW
DrawMenuBar
GetMenu
GetSubMenu
DeleteMenu
GetMenuItemCount
GetMenuItemInfoW
CharToOemBuffW
ScreenToClient
ClientToScreen
CreatePopupMenu
SetWindowLongW
TrackPopupMenu
DestroyMenu
CallWindowProcW
RegisterClipboardFormatW
GetKeyState
CreateDialogIndirectParamW
GetPropW
RemovePropW
BringWindowToTop
SetWindowPlacement
GetIconInfo
CreateIconIndirect
TranslateAcceleratorW
IsDialogMessageW
SetPropW
FindWindowW
GetForegroundWindow
RegisterWindowMessageW
FindWindowExW
EnumWindows
CreateIcon
SetForegroundWindow
GetDlgItemTextA
CloseClipboard
SetDlgItemTextA
SendMessageW
SetFocus
CreateWindowExW
DestroyWindow
GetWindowTextW
DefWindowProcW
SetDlgItemTextW
GetDlgItemTextW
EndDialog
EnableMenuItem
ValidateRect
LoadCursorW
SetCursor
WindowFromPoint
GetWindowThreadProcessId
GetDC
ReleaseDC
GetDesktopWindow
GetCursorPos
GetWindowLongW
ShowWindow
EnableWindow
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
IsWindowEnabled
SetDlgItemInt
GetDlgItemInt
IsDlgButtonChecked
EnumChildWindows
PostMessageW
GetClassNameW
GetWindowRect
MapWindowPoints
SetWindowPos
InvalidateRect
GetParent
CheckDlgButton
MessageBoxW
IsWindowVisible
OemToCharBuffA
CharToOemBuffA
DialogBoxParamW
DestroyIcon
GetDlgItem
SendDlgItemMessageW
OemToCharA
DispatchMessageW
gdi32
LineTo
MoveToEx
Rectangle
GetTextExtentPoint32W
CreatePatternBrush
TextOutA
SetMapMode
DPtoLP
CreateBitmap
SetPixel
GetMapMode
CreateCompatibleBitmap
StretchBlt
SetBkColor
ExtTextOutW
BitBlt
GetObjectW
CreateCompatibleDC
GetPixel
DeleteDC
CreatePen
CreateSolidBrush
SetTextColor
TextOutW
Polygon
Polyline
SelectObject
GetTextFaceW
GetTextMetricsW
CreateFontW
GetDeviceCaps
DeleteObject
comdlg32
GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError
ChooseFontW
advapi32
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityA
SetFileSecurityW
GetSecurityDescriptorLength
GetFileSecurityA
GetFileSecurityW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
IsTextUnicode
RegEnumValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
AdjustTokenPrivileges
shell32
SHAddToRecentDocs
FindExecutableW
DragFinish
DragQueryFileW
DragAcceptFiles
Shell_NotifyIconW
SHGetPathFromIDListA
ShellExecuteW
SHGetFileInfoW
SHFileOperationW
ShellExecuteExW
SHGetMalloc
SHBrowseForFolderW
SHChangeNotify
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ole32
OleUninitialize
OleInitialize
CoTaskMemAlloc
CreateStreamOnHGlobal
CLSIDFromString
CoCreateInstance
CoTaskMemFree
OleSetClipboard
DoDragDrop
CoInitializeEx
oleaut32
VariantInit
Sections
.text Size: 783KB - Virtual size: 782KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 631KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 206KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 231KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE