Static task
static1
Behavioral task
behavioral1
Sample
b0fdb6dac604bc6e61f66480470602e47bea9640991264ce12f445a13a964f81.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b0fdb6dac604bc6e61f66480470602e47bea9640991264ce12f445a13a964f81.exe
Resource
win10v2004-20220812-en
General
-
Target
b0fdb6dac604bc6e61f66480470602e47bea9640991264ce12f445a13a964f81
-
Size
1.9MB
-
MD5
0d4301720f939a68ad7feed06faaa357
-
SHA1
90e6ee12d300296ac7e145d758923f873e8c895b
-
SHA256
b0fdb6dac604bc6e61f66480470602e47bea9640991264ce12f445a13a964f81
-
SHA512
3e3825253119cf2a23091f07e5cf226a2a9c333ab847c40afdb84cb946e611c9b389293edee49434944bd7b78a2c1a06764c63df1619b69deecbbb81202a47ac
-
SSDEEP
24576:KCUYoKnQiNktd1DsoGe1D9IXYx+SfrkqHOwpWuZjfxgB2juyq:Re1X99QgTfvuor
Malware Config
Signatures
Files
-
b0fdb6dac604bc6e61f66480470602e47bea9640991264ce12f445a13a964f81.exe windows x86
414fab82bfc53cacd4c8fbc89081ebc1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
GetACP
LCMapStringA
LCMapStringW
HeapSize
GetFileType
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsValidLocale
HeapDestroy
GetEnvironmentVariableA
IsValidCodePage
GetUserDefaultLCID
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
IsBadCodePtr
TlsGetValue
GetProcessVersion
LocalAlloc
CreateThread
SetEnvironmentVariableA
SetStdHandle
ExitThread
TerminateProcess
GetCommandLineA
GetStartupInfoA
RaiseException
ExitProcess
Sleep
IsBadReadPtr
HeapAlloc
HeapFree
GetTimeZoneInformation
RtlUnwind
GetSystemTimeAsFileTime
SizeofResource
GetCPInfo
SetErrorMode
GetOEMCP
GetLocaleInfoA
EnumSystemLocalesA
GlobalFlags
ReadFile
PurgeComm
WriteFile
CloseHandle
CreateFileA
GetCommTimeouts
SetCommTimeouts
GetCommState
BuildCommDCBA
SetCommState
EscapeCommFunction
SetupComm
SetThreadPriority
Beep
FormatMessageA
FindFirstFileA
FindClose
IsDBCSLeadByte
GetLastError
GlobalAlloc
GlobalUnlock
GlobalLock
lstrlenA
SearchPathA
GetModuleFileNameA
GetVersionExA
GlobalReAlloc
LocalReAlloc
TlsSetValue
TlsAlloc
TlsFree
GlobalHandle
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
GetProfileStringA
GetDiskFreeSpaceA
DeleteCriticalSection
InitializeCriticalSection
GetPrivateProfileStringA
GetTempFileNameA
WritePrivateProfileStringA
FileTimeToLocalFileTime
GetPrivateProfileIntA
GetCurrentThread
lstrcmpA
FileTimeToSystemTime
GetThreadLocale
GlobalFree
GetShortPathNameA
GetVolumeInformationA
GetStringTypeExA
GetFullPathNameA
SetEndOfFile
DeleteFileA
MoveFileA
FlushFileBuffers
UnlockFile
LockFile
MulDiv
SetFilePointer
DuplicateHandle
SetFileTime
SetLastError
lstrcpynA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileAttributesA
GetFileTime
GetFileSize
ResumeThread
CreateEventA
SuspendThread
FreeLibrary
SetEvent
WaitForSingleObject
LockResource
FindResourceA
LoadResource
GetCurrentThreadId
GetVersion
lstrcatA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpiA
lstrcpyA
GlobalFindAtomA
GlobalDeleteAtom
InterlockedDecrement
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
LocalFree
GetTickCount
LoadLibraryA
GetProcAddress
GetLocaleInfoW
GetPriorityClass
GetLocalTime
GetCommProperties
GetCurrentProcess
CompareStringA
CompareStringW
SetPriorityClass
user32
GetSysColorBrush
CopyAcceleratorTableA
GetTabbedTextExtentA
DestroyIcon
GetNextDlgGroupItem
SetCapture
InvertRect
GetDCEx
RegisterClipboardFormatA
SetRect
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
DrawFocusRect
EndDialog
CreateDialogIndirectParamA
IsRectEmpty
FillRect
FindWindowA
UnpackDDElParam
ReuseDDElParam
SetMenu
ReleaseCapture
LoadAcceleratorsA
SetRectEmpty
DefMDIChildProcA
TranslateAcceleratorA
TranslateMDISysAccel
DefFrameProcA
CharUpperA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemTextA
CheckDlgButton
GetMenuCheckMarkDimensions
CheckMenuItem
GetMessageA
GetActiveWindow
ValidateRect
SendDlgItemMessageA
IsWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
LoadStringA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
wsprintfA
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
DestroyCursor
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
IsIconic
LoadMenuA
GetSubMenu
GetMenu
GetMenuState
ModifyMenuA
DrawMenuBar
SetActiveWindow
ClientToScreen
GetSystemMenu
LockWindowUpdate
MapWindowPoints
PostThreadMessageA
KillTimer
GetCursorPos
DestroyMenu
GetClassNameA
EnableMenuItem
MessageBeep
InvalidateRect
GetMenuItemCount
DeleteMenu
GetMenuItemID
AppendMenuA
CreatePopupMenu
GetNextDlgTabItem
LoadIconA
CharNextA
SetTimer
EmptyClipboard
SetClipboardData
OpenClipboard
IsZoomed
WindowFromPoint
SetParent
GetScrollInfo
SetScrollInfo
CreateWindowExA
CloseClipboard
OffsetRect
GetDesktopWindow
InflateRect
keybd_event
PtInRect
IsWindowVisible
GetAsyncKeyState
GetSystemMetrics
GetDC
ReleaseDC
GetParent
IsCharLowerA
GetKeyboardState
ToAscii
LoadCursorA
SetCursor
GetSysColor
GetWindow
EnableWindow
GetClientRect
RedrawWindow
LoadBitmapA
MessageBoxA
UpdateWindow
BringWindowToTop
GetWindowLongA
GetWindowRect
SendMessageA
GetCapture
PeekMessageA
TranslateMessage
DispatchMessageA
PostMessageA
GetFocus
RegisterClassA
GetClassInfoA
SetMenuItemBitmaps
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
gdi32
CreateCompatibleDC
ExcludeClipRect
IntersectClipRect
SelectClipRgn
LineTo
SetTextAlign
MoveToEx
GetCurrentPositionEx
CreateRectRgn
GetWindowExtEx
GetViewportExtEx
CreatePatternBrush
ScaleWindowExtEx
PtVisible
GetDeviceCaps
TextOutA
ExtTextOutA
RectVisible
GetMapMode
PatBlt
Escape
CombineRgn
CreateRectRgnIndirect
SetRectRgn
DPtoLP
GetBkColor
CreateFontIndirectA
GetTextMetricsA
CreateDCA
LPtoDP
EndDoc
EndPage
AbortDoc
SetAbortProc
Rectangle
StartPage
StretchDIBits
CreateCompatibleBitmap
GetViewportOrgEx
GetNearestColor
GetStretchBltMode
GetTextAlign
GetBkMode
GetPolyFillMode
GetTextFaceA
GetWindowOrgEx
GetROP2
CreateDIBitmap
GetTextExtentPointA
SetWindowOrgEx
SetWindowExtEx
SetViewportExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
SetMapMode
SetStretchBltMode
SetViewportOrgEx
SetPolyFillMode
SetBkMode
SetROP2
GetStockObject
RestoreDC
StartDocA
DeleteDC
SaveDC
SetTextColor
CreatePen
CreateBitmap
SelectObject
GetClipBox
GetTextExtentPoint32A
SetBkColor
DeleteObject
EnumFontFamiliesExA
GetTextColor
CreateSolidBrush
GetCurrentObject
BitBlt
GetCharWidthA
GetObjectA
CreateFontA
comdlg32
GetOpenFileNameA
PrintDlgA
GetFileTitleA
CommDlgExtendedError
GetSaveFileNameA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegSetValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
shell32
ExtractIconA
DragQueryFileA
SHGetFileInfoA
DragFinish
comctl32
ImageList_ReplaceIcon
ord17
ImageList_Destroy
ImageList_Create
oledlg
ord8
ole32
CLSIDFromString
CLSIDFromProgID
StgCreateDocfileOnILockBytes
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoGetClassObject
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoTaskMemAlloc
CoTaskMemFree
olepro32
ord253
oleaut32
VariantTimeToSystemTime
SysStringLen
SysAllocStringLen
VariantChangeType
SysAllocStringByteLen
VariantCopy
SysFreeString
VariantClear
SysAllocString
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 244KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 390KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 448KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE