Static task
static1
Behavioral task
behavioral1
Sample
1d77402d9dc20dbaf927edec4c69fa45b8198e4e33db5a94317f4e6ddf1530d6.exe
Resource
win7-20220812-en
General
-
Target
1d77402d9dc20dbaf927edec4c69fa45b8198e4e33db5a94317f4e6ddf1530d6
-
Size
839KB
-
MD5
a38ce8d990bf478c9102132e3297ee10
-
SHA1
8403d2ba7d6d35df2c14692b33b2f5252d47a0a8
-
SHA256
1d77402d9dc20dbaf927edec4c69fa45b8198e4e33db5a94317f4e6ddf1530d6
-
SHA512
d255ece904064a3e9698d7f0f0eebf959641edcfb328e75dc460b6b45b30964288cead3f68be5050eb3eb4c7ece0a3613b3814337a17f5627e94056e5d32c08b
-
SSDEEP
12288:mLUZDLF9wodKel446DwA3bzHIJRhElLk9QMyXxCiZScMS8WG5:mLTlDwkHIJ364SMyhCUyS81
Malware Config
Signatures
Files
-
1d77402d9dc20dbaf927edec4c69fa45b8198e4e33db5a94317f4e6ddf1530d6.exe windows x86
e4623d4a4b6489a4d6202270876e554d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
WideCharToMultiByte
GetFileAttributesW
HeapFree
GetProcessHeap
InitializeCriticalSectionAndSpinCount
TlsGetValue
TlsSetValue
SetWaitableTimer
PostQueuedCompletionStatus
HeapAlloc
QueueUserAPC
TerminateThread
WaitForMultipleObjects
GetQueuedCompletionStatus
CreateIoCompletionPort
SetLastError
InterlockedCompareExchange
GetTickCount
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
FlushInstructionCache
GetCurrentProcess
GetSystemTimeAsFileTime
SleepEx
GetModuleFileNameA
CreateEventW
CreateWaitableTimerW
lstrcpynW
GetExitCodeProcess
OpenProcess
CreateToolhelp32Snapshot
ReleaseMutex
OpenMutexW
DeleteFileW
CopyFileW
Sleep
CreateThread
GetCommandLineW
LoadLibraryW
CreateMutexW
GetVersionExW
lstrlenA
CreateFileW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcatW
lstrcpyW
GetEnvironmentVariableW
GetShortPathNameW
MoveFileW
GetFileSize
FlushFileBuffers
WriteFile
ReadFile
SetFilePointer
ResetEvent
WritePrivateProfileStringW
WaitForSingleObject
lstrcmpW
RtlUnwind
HeapReAlloc
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
GetSystemDirectoryW
GetVersionExA
GetStartupInfoW
GetStdHandle
VirtualFree
HeapDestroy
HeapCreate
ExitProcess
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetFullPathNameW
GetCurrentDirectoryA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
QueryPerformanceCounter
GetCurrentProcessId
LoadLibraryA
GetLocaleInfoA
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
SetStdHandle
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetDriveTypeA
SetEndOfFile
CompareStringA
CompareStringW
GetProcAddress
OutputDebugStringA
GetPrivateProfileIntW
OutputDebugStringW
SearchPathW
WriteProcessMemory
Thread32Next
Thread32First
SuspendThread
OpenThread
CreateProcessW
DuplicateHandle
ReadProcessMemory
VirtualAllocEx
SetErrorMode
GetThreadLocale
TlsAlloc
InterlockedExchangeAdd
IsProcessorFeaturePresent
OpenEventA
ResumeThread
SystemTimeToFileTime
CreateWaitableTimerA
LocalFree
FormatMessageA
GetFileAttributesA
RemoveDirectoryA
SetEvent
CloseHandle
CreateEventA
GetModuleHandleW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetModuleFileNameW
TlsFree
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
DeleteFileA
FindFirstFileA
FindNextFileA
CreateDirectoryW
SetEnvironmentVariableA
user32
SetForegroundWindow
LoadIconW
ShowOwnedPopups
IsWindowVisible
InvalidateRect
ClientToScreen
BringWindowToTop
MoveWindow
IsIconic
GetLastActivePopup
EnableWindow
ShowWindow
CallWindowProcW
GetParent
SetRect
PtInRect
GetCursorPos
LoadImageW
GetWindowTextW
ReleaseCapture
TrackPopupMenu
WindowFromPoint
GetSysColor
MapWindowPoints
SystemParametersInfoW
GetWindow
DialogBoxParamW
GetActiveWindow
DrawIconEx
LoadMenuW
DestroyMenu
GetMonitorInfoW
GetSystemMetrics
MonitorFromPoint
RegisterClassExW
CreateWindowExW
DefWindowProcW
GetMessageW
DispatchMessageW
TranslateMessage
CharUpperW
CreateDialogParamW
PostThreadMessageW
SetWindowPos
SendMessageW
IsWindow
DestroyWindow
EndDialog
LoadBitmapW
DrawTextW
GetWindowLongW
SetWindowLongW
RedrawWindow
FindWindowW
GetWindowRect
LoadStringW
GetDlgItem
GetClientRect
DestroyIcon
GetIconInfo
GetCapture
GetSubMenu
SetWindowTextW
PostMessageW
CharNextW
UnregisterClassA
gdi32
CreateSolidBrush
SetBkColor
ExtTextOutW
GetObjectW
CreateCompatibleDC
DeleteDC
SaveDC
RestoreDC
SelectObject
SetBkMode
CreateCompatibleBitmap
DeleteObject
CreateFontW
BitBlt
StretchBlt
SetTextColor
advapi32
RegCreateKeyExW
RegSetValueExW
AllocateAndInitializeSid
RegCreateKeyW
RegOpenKeyW
RegQueryValueExW
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
RegQueryInfoKeyW
shell32
ShellExecuteA
Shell_NotifyIconW
SHChangeNotify
ShellExecuteW
ShellExecuteExW
SHGetSpecialFolderPathW
SHGetFileInfoW
SHFileOperationW
ole32
CoCreateInstance
CoInitialize
CoUninitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterClassObject
StringFromCLSID
StringFromGUID2
CoLoadLibrary
CoFreeLibrary
CLSIDFromProgID
oleaut32
SysFreeString
RegisterTypeLi
UnRegisterTypeLi
SysAllocStringByteLen
VariantClear
VariantInit
LoadTypeLi
LoadRegTypeLi
VarUI4FromStr
SysStringLen
SysAllocString
shlwapi
PathRemoveFileSpecA
wnsprintfW
SHDeleteKeyA
PathAppendW
PathFileExistsW
comctl32
_TrackMouseEvent
ws2_32
WSAStartup
WSACleanup
imm32
ImmDisableIME
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
psapi
GetModuleFileNameExW
Sections
.text Size: 572KB - Virtual size: 569KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE