Static task
static1
Behavioral task
behavioral1
Sample
32388c8ee77a436807c470a20d32b783c85b0fab4c6e5918d7878876c9459109.exe
Resource
win7-20220812-en
General
-
Target
32388c8ee77a436807c470a20d32b783c85b0fab4c6e5918d7878876c9459109
-
Size
410KB
-
MD5
8211ed71afc2d9ecc469b9b13f5f90c0
-
SHA1
4efc0d4bed785c4837cfb05bf2d9ef32b8b8820f
-
SHA256
32388c8ee77a436807c470a20d32b783c85b0fab4c6e5918d7878876c9459109
-
SHA512
277d55a57720db29d981a779d73a6ed6bbc38412c3b1012d453a401bb61c21e86511da998a698f6cc96445343109c08bfb56c1e0d1f3839026db483678e29ba5
-
SSDEEP
12288:IbOLZY9Q4Ha6xqgl9lOjd8OSTXBzpd7z6anK1g:c9Q4H9yjdDGzp1Ga/
Malware Config
Signatures
Files
-
32388c8ee77a436807c470a20d32b783c85b0fab4c6e5918d7878876c9459109.exe windows x86
d98fdc1ca66c850987766cafb5c0800e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
MultiByteToWideChar
GetCurrentProcessId
InterlockedIncrement
InterlockedDecrement
lstrcmpW
MulDiv
GetModuleFileNameW
GlobalUnlock
GlobalLock
SetLastError
FreeLibrary
LoadLibraryExW
GetTickCount
GetCurrentThread
CreateThread
GlobalHandle
lstrlenA
CreateMutexW
ReleaseMutex
WaitForSingleObject
Sleep
CreateEventW
SetEvent
ExitProcess
LocalFree
GetCommandLineW
lstrcpyW
FreeResource
WaitForMultipleObjects
GetExitCodeProcess
TerminateProcess
GetProcessId
CreateDirectoryW
CreateSemaphoreW
ReleaseSemaphore
InitializeCriticalSection
OutputDebugStringA
ReadFile
MoveFileW
DeleteFileW
WritePrivateProfileStringW
GetTempPathW
GetPrivateProfileStringW
LoadLibraryW
FindClose
FindFirstFileW
ExpandEnvironmentStringsW
SetEndOfFile
WriteConsoleW
FlushInstructionCache
FlushFileBuffers
SetStdHandle
LCMapStringW
GetStringTypeW
GetConsoleMode
GetConsoleCP
SetFilePointer
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
HeapSize
GetStdHandle
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStartupInfoW
HeapSetInformation
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
RtlUnwind
InterlockedPopEntrySList
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedPushEntrySList
InterlockedCompareExchange
lstrcmpiW
GetModuleHandleW
GetProcAddress
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
GetTempFileNameW
CreateFileW
WriteFile
GlobalFree
GetCurrentProcess
GetCurrentThreadId
GetLastError
CloseHandle
CreateFileA
user32
GetWindowThreadProcessId
IsWindow
GetForegroundWindow
GetDesktopWindow
GetSystemMetrics
GetActiveWindow
GetWindowLongW
SendMessageW
PostMessageW
SetWindowTextW
GetClientRect
ScreenToClient
KillTimer
SetActiveWindow
GetCursor
IsWindowUnicode
SetWindowLongW
EndDialog
CreateWindowExW
PtInRect
CreateAcceleratorTableW
RegisterWindowMessageW
DialogBoxIndirectParamW
LoadIconW
MapDialogRect
SendDlgItemMessageW
SetWindowContextHelpId
PostThreadMessageW
TranslateMessage
DispatchMessageW
GetMessageW
CheckDlgButton
IsDlgButtonChecked
GetWindow
GetDlgItem
MessageBoxW
IsWindowVisible
CharNextW
UnregisterClassA
InvalidateRect
DestroyWindow
MoveWindow
wsprintfW
GetShellWindow
DefWindowProcW
GetWindowTextW
GetWindowTextLengthW
GetSysColor
SetWindowPos
ClientToScreen
GetDC
ReleaseDC
InvalidateRgn
RegisterClassExW
LoadCursorW
GetClassInfoExW
SetFocus
GetFocus
DestroyAcceleratorTable
BeginPaint
EndPaint
CallWindowProcW
FillRect
ReleaseCapture
GetClassNameW
GetParent
IsChild
SetCapture
RedrawWindow
gdi32
GetObjectW
CreateSolidBrush
GetDeviceCaps
GetStockObject
SelectObject
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
BitBlt
advapi32
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
shell32
SHBrowseForFolderW
ShellExecuteExW
CommandLineToArgvW
SHGetSpecialFolderPathW
ExtractIconW
SHGetPathFromIDListW
ole32
CoAddRefServerProcess
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
CoInitialize
ProgIDFromCLSID
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
CLSIDFromString
CoGetClassObject
OleLockRunning
StringFromGUID2
CoTaskMemFree
CLSIDFromProgID
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoReleaseServerProcess
oleaut32
VariantCopy
RegisterTypeLi
UnRegisterTypeLi
DispCallFunc
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
VarUI4FromStr
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayCopy
SysAllocString
SafeArrayGetVartype
VariantClear
SysStringLen
SysAllocStringLen
SysFreeString
VariantInit
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
shlwapi
StrStrIW
winhttp
WinHttpQueryDataAvailable
WinHttpGetProxyForUrl
WinHttpCrackUrl
WinHttpConnect
WinHttpReadData
WinHttpSendRequest
WinHttpOpen
WinHttpSetOption
WinHttpGetIEProxyConfigForCurrentUser
WinHttpSetStatusCallback
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpOpenRequest
WinHttpCloseHandle
Sections
.text Size: 230KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE