Static task
static1
Behavioral task
behavioral1
Sample
172eb1c32cc8a1a06c29f8c7244faaf4bd192f3a4d5ea8c7b76216d6a6e8816c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
172eb1c32cc8a1a06c29f8c7244faaf4bd192f3a4d5ea8c7b76216d6a6e8816c.exe
Resource
win10v2004-20220812-en
General
-
Target
172eb1c32cc8a1a06c29f8c7244faaf4bd192f3a4d5ea8c7b76216d6a6e8816c
-
Size
604KB
-
MD5
931cbdea698480edaa164be18067ef10
-
SHA1
e09430d7e4a88b35bd8a5f29ccf56741b317ff98
-
SHA256
172eb1c32cc8a1a06c29f8c7244faaf4bd192f3a4d5ea8c7b76216d6a6e8816c
-
SHA512
20b5d260b62d5015ef6283128c795a8358bed6a666a6a079a026273be52777fc787ee7bab33d96d5a71485d86786e24fcb0401acc892c75df45dc48c81a6ffa7
-
SSDEEP
12288:Mbrv9CLFp/D9Wh0B2dIsp/sJi+xkjdTnOSsPdB:1f/D9G0B2Xp8iiuTnOSov
Malware Config
Signatures
Files
-
172eb1c32cc8a1a06c29f8c7244faaf4bd192f3a4d5ea8c7b76216d6a6e8816c.exe windows x86
82f21bc80abb4ea126cf1efe77a91c36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHGetValueA
StrTrimA
PathFindFileNameA
kernel32
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetModuleFileNameA
GetTickCount
GetStringTypeA
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
IsBadCodePtr
HeapCreate
HeapDestroy
HeapSize
GetACP
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
ExitThread
TerminateProcess
ExitProcess
GetCommandLineA
GetProfileStringA
LocalSize
OpenProcess
LoadLibraryExW
LoadLibraryExA
LoadLibraryW
VirtualQuery
VirtualProtect
GetSystemInfo
GetCurrentProcessId
IsBadReadPtr
VirtualFree
GetTempFileNameA
GetTempPathA
Sleep
lstrlenA
CloseHandle
CreateEventA
GetLastError
GetExitCodeThread
WaitForSingleObject
CreateThread
GetVersionExA
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GlobalAlloc
GlobalLock
SetEvent
ResumeThread
SetThreadPriority
SuspendThread
LoadResource
FindResourceA
LockResource
GlobalFree
GlobalUnlock
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
GetModuleHandleA
lstrcpyA
GlobalFindAtomA
GetStartupInfoA
HeapAlloc
HeapReAlloc
HeapFree
RtlUnwind
SetErrorMode
GetOEMCP
GetCPInfo
SizeofResource
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
lstrlenW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
SetFileAttributesA
CreateFileA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
FindFirstFileA
FindClose
lstrcpynA
GetFileTime
GetFileSize
GetFileAttributesA
FormatMessageA
LocalFree
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GetStringTypeW
user32
DestroyMenu
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
LoadStringA
GetSysColorBrush
PtInRect
GetClassNameA
GetWindowThreadProcessId
GetDesktopWindow
ReleaseCapture
SetCapture
LoadCursorA
InflateRect
CharUpperA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
UpdateWindow
MapWindowPoints
AdjustWindowRectEx
ScreenToClient
EqualRect
GetScrollInfo
SetScrollInfo
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
SetRectEmpty
RegisterWindowMessageA
LoadIconA
SendMessageA
DrawIcon
GetClientRect
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
DefWindowProcA
CreateWindowExA
RegisterClipboardFormatA
PostThreadMessageA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetSystemMetrics
IsIconic
GetSysColor
SetTimer
KillTimer
PostQuitMessage
EnableWindow
SendMessageTimeoutA
IsWindow
SetRect
InvalidateRect
TabbedTextOutA
DrawTextA
GrayStringA
PostMessageA
SetCursor
MessageBoxA
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
GetParent
SetWindowsHookExA
GetCursorPos
PeekMessageA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DestroyIcon
GetCapture
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
SetFocus
ShowWindow
MoveWindow
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
CopyRect
GetDC
ReleaseDC
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
LoadImageA
GetDoubleClickTime
DrawFocusRect
GetIconInfo
GetSystemMenu
SetWindowRgn
SetClassLongA
DrawStateA
DrawFrameControl
FillRect
RegisterClassW
DefMDIChildProcW
DefMDIChildProcA
DefDlgProcW
DefDlgProcA
DefFrameProcW
DefFrameProcA
DefWindowProcW
CallWindowProcW
EnableScrollBar
EnumWindows
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
DrawEdge
DrawIconEx
IsRectEmpty
SetWindowLongW
GetWindowLongW
IsWindowUnicode
gdi32
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
DeleteObject
CreateRectRgn
GetObjectType
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
CombineRgn
CreateFontIndirectA
GetTextColor
SetBkMode
SelectPalette
GetStockObject
SelectObject
RestoreDC
SaveDC
BitBlt
CreateCompatibleBitmap
GetBkColor
GetMapMode
LPtoDP
CreateCompatibleDC
CreateFontA
CreatePolygonRgn
Polygon
Arc
CreatePen
GetTextExtentPoint32A
Rectangle
CreateSolidBrush
PtVisible
RectVisible
TextOutA
GetTextCharsetInfo
GetPixel
OffsetRgn
CreateDIBSection
StretchBlt
SetBrushOrgEx
CreatePalette
CreateDIBitmap
GetDIBits
GetTextExtentPointA
ExtTextOutA
Escape
CreateBitmap
PatBlt
GetClipBox
SetTextColor
SetBkColor
GetObjectA
DeleteDC
DPtoLP
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
shell32
ShellExecuteA
comctl32
ord17
ImageList_Create
ImageList_Destroy
FlatSB_GetScrollProp
ImageList_GetIcon
_TrackMouseEvent
ImageList_GetBkColor
ImageList_GetImageInfo
ImageList_DrawIndirect
ImageList_GetIconSize
ImageList_Draw
ImageList_GetImageCount
ImageList_Add
oledlg
ord8
ole32
CoTaskMemAlloc
CoRevokeClassObject
OleUninitialize
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoDisconnectObject
OleInitialize
olepro32
ord253
oleaut32
SysAllocStringLen
VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
SysStringByteLen
VariantTimeToSystemTime
SysStringLen
LoadTypeLi
SysFreeString
ws2_32
gethostbyname
inet_ntoa
inet_addr
WSAConnect
WSASend
WSAEnumNetworkEvents
WSARecv
shutdown
WSAWaitForMultipleEvents
closesocket
WSASocketA
setsockopt
WSAGetLastError
WSAStartup
WSACleanup
htons
ntohs
ntohl
htonl
WSAEventSelect
imagehlp
ImageDirectoryEntryToData
Sections
.text Size: 428KB - Virtual size: 425KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ