Static task
static1
Behavioral task
behavioral1
Sample
856ab01de09f8c996155f9d5b8d0ca1662a45e935a0e7bd763423b63628d2f69.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
856ab01de09f8c996155f9d5b8d0ca1662a45e935a0e7bd763423b63628d2f69.exe
Resource
win10v2004-20220901-en
General
-
Target
856ab01de09f8c996155f9d5b8d0ca1662a45e935a0e7bd763423b63628d2f69
-
Size
544KB
-
MD5
81b707120e705ee976487ff7f2b62395
-
SHA1
a50c91fd70dbdd2b77a20b1e4a52d7a427928c71
-
SHA256
856ab01de09f8c996155f9d5b8d0ca1662a45e935a0e7bd763423b63628d2f69
-
SHA512
ea11cb19ea5b4fbbfe4481f8972c36f44853ee5dd0834f47dbaa8e476f60a35f4a55071bc714d1e356dd2ec94d4fec859c97268f02eb086e5a72669e36529647
-
SSDEEP
12288:LbmzNTNukogE7opXOLl0tmtj8Y7WeDuUlO4:euWXXOCNYK34
Malware Config
Signatures
Files
-
856ab01de09f8c996155f9d5b8d0ca1662a45e935a0e7bd763423b63628d2f69.exe windows x86
2be9254b103506da4af98550b3cc39ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
userenv
GetProfilesDirectoryA
kernel32
GetCurrentThread
LocalAlloc
GetCurrentProcessId
ReadFile
SetFilePointer
SetEndOfFile
GetThreadLocale
InterlockedIncrement
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
RaiseException
ConvertDefaultLocale
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
HeapReAlloc
VirtualAlloc
VirtualQuery
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
HeapSize
SetStdHandle
GetFileType
GetACP
LCMapStringA
LCMapStringW
GetStdHandle
VirtualFree
HeapDestroy
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
EnumResourceLanguagesA
InterlockedDecrement
GetModuleFileNameW
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
FreeResource
GlobalLock
GlobalUnlock
OpenMutexA
CreateMutexA
GetUserDefaultLangID
GetStartupInfoA
CreateProcessA
GetExitCodeProcess
WaitForSingleObject
TerminateProcess
FlushFileBuffers
GlobalAlloc
GlobalFree
HeapFree
GetProcessHeap
HeapAlloc
GetSystemDirectoryA
GetShortPathNameA
GetLocaleInfoA
GetFileTime
CompareFileTime
WritePrivateProfileStringA
lstrcmpA
GetTempPathA
Sleep
GetDriveTypeA
FormatMessageA
LocalFree
GetSystemDefaultLangID
InitializeCriticalSection
GetFileSize
DeleteCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
WriteFile
OutputDebugStringA
CreateFileA
GetEnvironmentVariableA
CompareStringW
CompareStringA
GetVersion
InterlockedExchange
GetVersionExA
SetFileAttributesA
DeleteFileA
RemoveDirectoryA
FindResourceExA
SetLastError
GetCommandLineA
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetPrivateProfileStringA
CloseHandle
GetCurrentDirectoryA
lstrlenA
MulDiv
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThreadId
GetTickCount
GetModuleHandleA
GetModuleFileNameA
GetFullPathNameA
GetFileAttributesA
GetProcAddress
GetCurrentProcess
FreeLibrary
LoadLibraryA
MultiByteToWideChar
GetLastError
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
FindResourceA
LoadResource
LockResource
SizeofResource
UnhandledExceptionFilter
user32
UnregisterClassA
DestroyMenu
LoadCursorA
GetSysColorBrush
SetCursor
GetMessageA
GetCursorPos
ValidateRect
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ShowWindow
IsDialogMessageA
IsDlgButtonChecked
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetFocus
GetForegroundWindow
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindowTextLengthA
GetWindowTextA
GetParent
GetWindow
SetFocus
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
IsWindow
WaitForInputIdle
MsgWaitForMultipleObjects
PostQuitMessage
GetWindowThreadProcessId
SetWindowTextA
GetSystemMetrics
MessageBoxA
EnumWindows
GetClassNameA
FindWindowA
GetDlgItem
LoadImageA
GetDesktopWindow
GetWindowRect
IsIconic
LoadBitmapA
GetWindowLongA
MapWindowPoints
GetDC
SetWindowLongA
ReleaseDC
PeekMessageA
TranslateMessage
DispatchMessageA
PostMessageA
SendMessageA
RegisterWindowMessageA
LoadIconA
EnableWindow
CheckMenuItem
gdi32
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
CreateSolidBrush
DeleteObject
SetMapMode
SetBkMode
RestoreDC
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateFontA
GetDeviceCaps
CreateCompatibleDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
StretchBlt
BitBlt
GetObjectA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegQueryValueA
RegEnumKeyA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetValueExA
RegCreateKeyExA
RegOpenKeyA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA
shlwapi
PathFindFileNameA
PathFindExtensionA
oleaut32
VariantChangeType
VariantInit
VariantClear
Sections
.text Size: 252KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ