Static task
static1
Behavioral task
behavioral1
Sample
b87b062c5c25445e3c7ebaef0306d7be4f571b40fddc9a2eb393db325c099045.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b87b062c5c25445e3c7ebaef0306d7be4f571b40fddc9a2eb393db325c099045.exe
Resource
win10v2004-20220812-en
General
-
Target
b87b062c5c25445e3c7ebaef0306d7be4f571b40fddc9a2eb393db325c099045
-
Size
661KB
-
MD5
7d5154c6c02c3a7494b8babdc6b36287
-
SHA1
3661b5c352c42fd90091ef57be8cf42ae33befe9
-
SHA256
b87b062c5c25445e3c7ebaef0306d7be4f571b40fddc9a2eb393db325c099045
-
SHA512
87cec55bf7fcaa89c4386073e46fa7d59375aade4908c13ae78f5d0130b039c55e1d4f11ecdceef142bfa11eee0d1377ae7af6287c0a73eeac30f26dfa2c1275
-
SSDEEP
12288:5Cz6tiyDaGu4F/WPgt3FEQoc5/cf9ywFTa4CUQU:5rJ9u4F/Ww3qc9wbaWx
Malware Config
Signatures
Files
-
b87b062c5c25445e3c7ebaef0306d7be4f571b40fddc9a2eb393db325c099045.exe windows x86
ed156f735ad9a5db4966bab881042c69
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToLocalFileTime
SetEnvironmentVariableA
CompareStringW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetDriveTypeA
HeapReAlloc
HeapSize
HeapAlloc
VirtualFree
HeapFree
HeapCreate
HeapDestroy
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
QueryPerformanceCounter
LCMapStringW
LCMapStringA
IsValidCodePage
GetACP
LoadLibraryW
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
ExitProcess
GetSystemInfo
VirtualAlloc
RaiseException
RtlUnwind
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedExchange
GetCurrentThread
GetLocaleInfoA
GetOEMCP
GetCPInfo
GlobalFlags
GetFullPathNameA
FlushFileBuffers
GetCurrentProcess
SetEvent
lstrcmpW
GetCurrentThreadId
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
lstrcmpA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
FreeLibrary
GetCurrentProcessId
CompareStringA
GetModuleFileNameW
GetModuleHandleW
GetAtomNameA
GlobalGetAtomNameA
InterlockedIncrement
InterlockedDecrement
GetModuleHandleA
FindNextFileA
SetLastError
MultiByteToWideChar
GlobalFree
GlobalAlloc
GlobalLock
FindFirstFileA
GlobalUnlock
FormatMessageA
LocalFree
lstrlenA
GetTickCount
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
FileTimeToSystemTime
SetFileTime
WriteFile
GetFileAttributesA
LocalFileTimeToFileTime
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
CloseHandle
SetFilePointer
CreateFileA
FindResourceA
LoadResource
LockResource
SizeofResource
GetModuleFileNameA
GetProcAddress
LoadLibraryA
GetLastError
CreateEventA
Sleep
WideCharToMultiByte
lstrlenW
CreateDirectoryA
FindClose
OpenEventA
user32
GetActiveWindow
ShowOwnedPopups
IsWindowVisible
InvalidateRect
BringWindowToTop
GetWindowDC
ClientToScreen
ValidateRect
RegisterWindowMessageA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetClientRect
MapWindowPoints
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
GetTopWindow
GetWindow
GetCapture
WinHelpA
TrackPopupMenu
GetDlgItem
GetKeyState
GetDlgCtrlID
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
SetMenu
GetMenu
GetMessageTime
GetMessagePos
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindowTextA
MessageBoxA
GetWindowLongA
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetWindowThreadProcessId
PostMessageA
SendMessageA
IsWindow
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
LoadMenuA
SetMenuItemBitmaps
ModifyMenuA
InsertMenuItemA
GetMenuItemInfoA
EnableMenuItem
CheckMenuItem
CreatePopupMenu
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
LoadBitmapA
GetSysColorBrush
PeekMessageA
IsMenu
GetMenuItemCount
GetSubMenu
GetMenuState
GetMenuItemID
GetDesktopWindow
LoadStringA
LoadAcceleratorsA
wsprintfA
EndDialog
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DestroyWindow
DialogBoxParamA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
IsIconic
InflateRect
PtInRect
GetMessageA
TranslateAcceleratorA
TranslateMessage
SetForegroundWindow
GetForegroundWindow
DestroyMenu
SetWindowTextA
GetMenuCheckMarkDimensions
SetRectEmpty
SetCursor
ReleaseCapture
ReuseDDElParam
UnpackDDElParam
GetClipboardFormatNameA
UnhookWindowsHookEx
gdi32
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
PtVisible
RectVisible
BitBlt
GetPixel
TextOutA
ExtTextOutA
GetTextExtentPoint32A
Escape
GetClipBox
SetTextColor
SetBkColor
DeleteDC
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
CreateBitmap
CreateFontIndirectA
CreatePatternBrush
CreateSolidBrush
GetObjectType
GetStockObject
GetObjectA
GetDeviceCaps
DeleteObject
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
OpenThreadToken
SetThreadToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RevertToSelf
shell32
DragFinish
DragQueryFileA
ole32
StringFromCLSID
CoTaskMemFree
oleaut32
VariantChangeType
VariantClear
VariantInit
Sections
.text Size: 414KB - Virtual size: 414KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ