Static task
static1
Behavioral task
behavioral1
Sample
bbb356dbb16ace7632396a4463ca34eacba58b6e788f404662be36edfd0daa97.exe
Resource
win7-20220812-en
General
-
Target
bbb356dbb16ace7632396a4463ca34eacba58b6e788f404662be36edfd0daa97
-
Size
939KB
-
MD5
90b398a5b8c746eb6e064c3bf33fb490
-
SHA1
6fb225405b8cd15b9e650bc99d9e0beb8a917c21
-
SHA256
bbb356dbb16ace7632396a4463ca34eacba58b6e788f404662be36edfd0daa97
-
SHA512
d4ba71123594dc21df4207418caa546741b603d26d7b4480818436767b406d4c0b13de492e7c763a4ddaad2c85766636e7cdc2501117d1b638ac565f35198331
-
SSDEEP
24576:ljucFPeWnKZ0GGJutxsRFZD7Z3inT7NZfyPmo+7c:19rnK6GGJ13inTXUmLc
Malware Config
Signatures
Files
-
bbb356dbb16ace7632396a4463ca34eacba58b6e788f404662be36edfd0daa97.exe windows x86
565f0e32ea53bf276372a5141d220ed6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalAlloc
GetSystemTime
SystemTimeToFileTime
FindNextFileW
GetPrivateProfileSectionW
FindResourceExW
GetStartupInfoW
MulDiv
SetProcessWorkingSetSize
GetFileSizeEx
WideCharToMultiByte
CreateDirectoryW
RaiseException
GetTempPathW
GetFileAttributesExW
DeleteFileW
UnmapViewOfFile
GetFileSize
CreateFileMappingW
MapViewOfFileEx
SetEndOfFile
ReadFile
UnlockFile
LockFile
Process32FirstW
Process32NextW
lstrlenA
OutputDebugStringW
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentThreadId
WritePrivateProfileStringW
CopyFileW
SetFilePointer
WriteFile
VirtualProtect
CreateToolhelp32Snapshot
Thread32First
OpenThread
GetThreadTimes
Thread32Next
CreateEventW
CreateThread
GetTickCount
SetEvent
GetProcessTimes
InterlockedDecrement
GlobalFree
InterlockedIncrement
GetSystemDirectoryW
GetFileAttributesW
LocalAlloc
MultiByteToWideChar
MapViewOfFile
GetModuleHandleA
SearchPathW
GetLongPathNameW
lstrlenW
CreateProcessW
LocalFree
GetPrivateProfileStringW
GetPrivateProfileIntW
GetCurrentProcess
FindFirstFileW
FindClose
GetVersionExW
SetLastError
LoadLibraryW
IsBadReadPtr
InterlockedCompareExchange
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RemoveDirectoryW
GetCommandLineW
CreateMutexW
GetLastError
SetProcessShutdownParameters
OpenProcess
FreeLibrary
GetCurrentProcessId
CreateFileW
DeviceIoControl
OpenEventW
WaitForSingleObject
Sleep
GetModuleFileNameW
CloseHandle
GetModuleHandleW
GetProcAddress
FindResourceW
LoadResource
WaitForMultipleObjects
MoveFileExW
UnlockFileEx
LockFileEx
SetFilePointerEx
GetEnvironmentVariableW
SetEnvironmentVariableW
ReleaseMutex
GetLocalTime
SetEnvironmentVariableA
GetProcessHeap
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetFileInformationByHandle
FileTimeToDosDateTime
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetSystemInfo
DebugBreak
LCMapStringW
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
QueryPerformanceCounter
VirtualFree
HeapCreate
GetStartupInfoA
GetFileType
SetHandleCount
LockResource
SizeofResource
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
VirtualQuery
VirtualAlloc
HeapSize
ExitProcess
HeapReAlloc
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
FormatMessageW
GetVersionExA
lstrcmpW
LoadLibraryA
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
FreeResource
InterlockedExchange
CompareStringA
LoadLibraryExW
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
TlsGetValue
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetThreadLocale
FileTimeToSystemTime
FlushFileBuffers
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
SetErrorMode
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetFileTime
RtlUnwind
ExitThread
UnhandledExceptionFilter
IsDebuggerPresent
user32
SetActiveWindow
GetLastActivePopup
GetWindowTextW
GetWindowTextLengthW
SetFocus
GetFocus
RemovePropW
GetPropW
SetPropW
GetClassNameW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
GetCapture
IsChild
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
CheckMenuItem
EnableMenuItem
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
IsDialogMessageW
MoveWindow
IsWindowEnabled
PostQuitMessage
ValidateRect
GetActiveWindow
TranslateMessage
GetMessageW
RegisterClipboardFormatW
MapDialogRect
SetWindowContextHelpId
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
DestroyMenu
GetSysColorBrush
UnregisterClassW
CharUpperW
MessageBeep
PostThreadMessageW
CharNextW
CopyAcceleratorTableW
IsRectEmpty
InvalidateRgn
SetCapture
ReleaseCapture
GetNextDlgGroupItem
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
LoadBitmapW
CopyRect
SendMessageW
wvsprintfW
GetDlgCtrlID
CallWindowProcW
GetMenu
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
EndPaint
BeginPaint
ClientToScreen
ScreenToClient
GetIconInfo
GetSysColor
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetRect
RedrawWindow
UpdateWindow
GetForegroundWindow
GetShellWindow
GetWindow
GetWindowInfo
MonitorFromPoint
GetMonitorInfoW
EnumDisplaySettingsW
WindowFromPoint
GetAncestor
GetWindowThreadProcessId
GetMenuItemID
GetDC
DrawIconEx
InflateRect
GetCursorPos
RegisterWindowMessageW
LoadMenuW
ModifyMenuW
GetSubMenu
SetMenuDefaultItem
DeleteMenu
DestroyIcon
SetClassLongW
GetParent
GetDesktopWindow
IsWindow
SystemParametersInfoW
GetWindowLongW
SetWindowLongW
SetLayeredWindowAttributes
SetWindowRgn
EqualRect
SetCursor
PtInRect
FrameRect
KillTimer
GetWindowRect
GetClientRect
InvalidateRect
EnableWindow
LoadIconW
SetTimer
ReleaseDC
GetWindowDC
DrawIcon
MessageBoxW
OffsetRect
SetWindowTextW
LoadImageW
PostMessageW
WaitForInputIdle
SetForegroundWindow
UnhookWindowsHookEx
GetMenuState
GetMenuStringW
GetMenuItemCount
LoadCursorW
DefWindowProcW
AppendMenuW
FillRect
SendMessageTimeoutW
FindWindowW
GetSystemMetrics
ShowWindow
GetMessagePos
PeekMessageW
MapWindowPoints
TrackPopupMenu
GetKeyState
SetMenu
IsWindowVisible
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
gdi32
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
EnumFontFamiliesW
GetDeviceCaps
GetStockObject
CreateRoundRectRgn
CreateFontIndirectW
GetTextExtentExPointW
Rectangle
CreateSolidBrush
CreatePen
StretchBlt
BitBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontW
GetObjectW
DeleteObject
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
MoveToEx
LineTo
ExtSelectClipRgn
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
DeleteDC
GetRgnBox
GetTextColor
GetBkColor
GetMapMode
CreateRectRgnIndirect
CreateBitmap
advapi32
SetSecurityDescriptorDacl
RegQueryValueExW
RegEnumKeyW
RegDeleteKeyW
RegQueryValueW
RegCreateKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegSetValueExW
RegQueryValueExA
OpenProcessToken
RegOpenKeyW
GetTokenInformation
CloseServiceHandle
OpenServiceW
OpenSCManagerW
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
RegOpenKeyExW
InitializeSecurityDescriptor
RegCloseKey
RegEnumKeyExW
ImpersonateLoggedOnUser
RevertToSelf
DuplicateTokenEx
ChangeServiceConfigW
ControlService
RegDeleteValueW
QueryServiceStatus
shell32
SHCreateDirectoryExW
CommandLineToArgvW
Shell_NotifyIconW
ord680
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteW
ShellExecuteExW
ole32
CoTaskMemFree
CreateILockBytesOnHGlobal
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoInitializeSecurity
CoInitializeEx
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoUninitialize
oleaut32
SysAllocString
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysStringLen
VariantCopy
comctl32
_TrackMouseEvent
shlwapi
StrRChrW
StrStrIW
StrStrW
PathCombineW
PathIsDirectoryW
StrCmpW
PathIsPrefixW
StrCmpNIW
PathFindExtensionW
PathIsRelativeW
StrCmpIW
PathFindFileNameW
StrRStrIW
PathStripToRootW
PathIsUNCW
StrChrW
SHDeleteValueW
PathRemoveFileSpecW
SHSetValueW
PathFileExistsW
PathAppendW
SHGetValueW
oledlg
OleUIBusyW
imm32
ImmDisableIME
setupapi
SetupIterateCabinetW
iphlpapi
GetAdaptersInfo
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
wininet
HttpEndRequestA
HttpSendRequestExA
InternetSetStatusCallbackA
HttpAddRequestHeadersA
InternetQueryOptionW
InternetSetOptionA
HttpOpenRequestA
InternetOpenW
InternetConnectW
InternetWriteFile
InternetCloseHandle
InternetReadFile
HttpSendRequestW
InternetErrorDlg
HttpQueryInfoW
InternetSetOptionW
InternetCrackUrlW
InternetGetConnectedState
InternetReadFileExA
HttpQueryInfoA
InternetConnectA
InternetOpenA
HttpOpenRequestW
wintrust
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
crypt32
CryptMsgClose
CryptMsgUpdate
CryptMsgOpenToDecode
CertOpenStore
CertGetCertificateContextProperty
CertCloseStore
CertGetNameStringW
rpcrt4
RpcStringFreeW
RpcStringBindingComposeW
NdrClientCall2
RpcBindingFree
RpcBindingFromStringBindingW
psapi
GetModuleFileNameExW
oleacc
CreateStdAccessibleObject
LresultFromObject
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
comdlg32
GetFileTitleW
netapi32
Netbios
ws2_32
inet_ntoa
WSACleanup
getpeername
WSAStartup
ntohl
winmm
timeGetTime
Sections
.text Size: 522KB - Virtual size: 522KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 17KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 238KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE