Static task
static1
Behavioral task
behavioral1
Sample
1d25735823927abfa26fc1e8eb4cdfab034bfa734c19ddc2e427911f7b3284f3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1d25735823927abfa26fc1e8eb4cdfab034bfa734c19ddc2e427911f7b3284f3.exe
Resource
win10v2004-20220812-en
General
-
Target
1d25735823927abfa26fc1e8eb4cdfab034bfa734c19ddc2e427911f7b3284f3
-
Size
548KB
-
MD5
911bfba39950f395b5d3bd05ea3ea740
-
SHA1
461680264b3c139efe65d7386a32e2dd7932f2e5
-
SHA256
1d25735823927abfa26fc1e8eb4cdfab034bfa734c19ddc2e427911f7b3284f3
-
SHA512
127469818bc3126205d5ea984f628590e008cb12900355ff9903a0ce82b8062671decf43a417f53dcfcc047b76f2b1b7ac68f3eed485f9266761c7063c195769
-
SSDEEP
12288:jPCqCmXUCEkNGY8pmaaVCQon8SF/oigoTEIT4yqbJVgBPjDumd4CX12x77Ts/eoR:jPCq3VCQonhTEITVqfgwmdOV7TsiPaGk
Malware Config
Signatures
Files
-
1d25735823927abfa26fc1e8eb4cdfab034bfa734c19ddc2e427911f7b3284f3.exe windows x86
c33e3661df9efc75f869c292deb7e691
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
ExitProcess
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
GetStartupInfoA
GetCommandLineA
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
SetUnhandledExceptionFilter
QueryPerformanceCounter
HeapDestroy
SetErrorMode
VirtualFree
IsBadWritePtr
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
GetVolumeInformationA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
GlobalFlags
InterlockedIncrement
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
InterlockedDecrement
SetLastError
MulDiv
FormatMessageA
lstrcpynA
LocalFree
FreeResource
GlobalAddAtomA
GetCurrentThread
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleHandleA
ConvertDefaultLocale
EnumResourceLanguagesA
OutputDebugStringA
ReleaseMutex
IsDebuggerPresent
DebugBreak
GetCurrentProcess
TerminateProcess
CreateMutexA
GetCurrentThreadId
GetModuleFileNameW
CreateProcessW
lstrcatA
lstrcpyA
CreateDirectoryA
GetFileTime
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetFullPathNameA
GetTempPathA
GetModuleFileNameA
WaitForSingleObject
RemoveDirectoryA
FindNextFileA
SetFileAttributesA
GetFileAttributesA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCurrentProcessId
GetTickCount
LoadLibraryA
GetProcAddress
GetFileSize
SetFilePointer
CreateFileA
WriteFile
CloseHandle
ReadFile
LeaveCriticalSection
EnterCriticalSection
Sleep
DeleteFileA
WritePrivateProfileStringA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
MultiByteToWideChar
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapCreate
GetPrivateProfileIntA
user32
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
GetWindowDC
ReleaseDC
ClientToScreen
DestroyMenu
ShowWindow
MoveWindow
SetWindowTextA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextA
GetForegroundWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
GetSysColor
AdjustWindowRectEx
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
wsprintfA
UnhookWindowsHookEx
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
DrawIcon
AppendMenuA
SendMessageA
GetSystemMenu
GetTopWindow
IsIconic
GetClientRect
InvalidateRect
EnableWindow
LoadIconA
GetSystemMetrics
CharUpperA
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
GetActiveWindow
IsWindowVisible
GetCursorPos
ValidateRect
MessageBoxA
GetParent
GetLastActivePopup
IsWindowEnabled
PostQuitMessage
MessageBoxW
PostThreadMessageA
RegisterClipboardFormatA
PeekMessageA
DispatchMessageA
IsDialogMessageA
TranslateMessage
GetDC
GetWindowLongA
LoadCursorA
GetWindowThreadProcessId
RedrawWindow
ReleaseCapture
SetCapture
TrackMouseEvent
GetClassInfoA
UnregisterClassA
GetClassNameA
GetPropA
EnumChildWindows
EnumWindows
IsWindow
CopyRect
PtInRect
PostMessageA
ScreenToClient
SetWindowRgn
SetRect
OffsetRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetWindowRect
GetKeyState
SetCursor
IsRectEmpty
IntersectRect
UnionRect
EndPaint
BeginPaint
EqualRect
gdi32
CreatePen
CreateRectRgnIndirect
GetMapMode
GetTextColor
GetRgnBox
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
GetBkColor
DeleteObject
IntersectClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetDeviceCaps
CreateBitmap
GetStockObject
CreateFontIndirectA
CombineRgn
ExtCreateRegion
GetClipRgn
CreateRectRgn
SelectClipRgn
Rectangle
BitBlt
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetClipBox
CreateCompatibleBitmap
GetObjectA
DeleteDC
CreateDIBSection
CreateCompatibleDC
SelectObject
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
comctl32
ord17
shlwapi
PathFindFileNameA
PathStripToRootA
PathFileExistsA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemFree
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoTaskMemAlloc
OleInitialize
oleaut32
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy
Sections
.text Size: 368KB - Virtual size: 365KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ