Static task
static1
Behavioral task
behavioral1
Sample
8cc41fa19bd31a0643e77fa8e97f4475cdf43c2f5c5a3e7f929084d62146e8b1.exe
Resource
win7-20220812-en
General
-
Target
8cc41fa19bd31a0643e77fa8e97f4475cdf43c2f5c5a3e7f929084d62146e8b1
-
Size
667KB
-
MD5
05359a5c62ef78b49f2c1a291fdf8130
-
SHA1
1dc6b2744b84858c0b501c28395977238aaf9516
-
SHA256
8cc41fa19bd31a0643e77fa8e97f4475cdf43c2f5c5a3e7f929084d62146e8b1
-
SHA512
a0751fac8d2992a4fc6f42edfa62d25518b8afc186c77e90ced42e7f641da60f3383d69774508fc4844a0bf5286b92924730c4cc9b5cc525d5820c157613c012
-
SSDEEP
12288:jqeQic1sImfsqqyCZhZbR0sJJYlHQFgkK0PY7t0+zXZMF1udU:jq02hZbR0szYlHQF40PYfeF1uu
Malware Config
Signatures
Files
-
8cc41fa19bd31a0643e77fa8e97f4475cdf43c2f5c5a3e7f929084d62146e8b1.exe windows x86
ab00aad9f0b8c3d54763bbfced03a358
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
ExpandEnvironmentStringsW
WriteConsoleW
SetStdHandle
GetStringTypeW
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryW
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
IsValidCodePage
GetOEMCP
GetCPInfo
Sleep
IsProcessorFeaturePresent
GetStdHandle
ExitProcess
HeapCreate
GetProcAddress
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
GetCommandLineW
CreateThread
ExitThread
DecodePointer
EncodePointer
RtlUnwind
HeapSize
HeapReAlloc
HeapDestroy
InitializeCriticalSectionAndSpinCount
FindFirstFileW
CreateDirectoryW
EnterCriticalSection
GetLocalTime
GetCurrentThreadId
OutputDebugStringW
InitializeCriticalSection
GetFileAttributesW
LeaveCriticalSection
GetModuleFileNameW
DeleteCriticalSection
CreateFileMappingW
MapViewOfFile
GetVersionExW
GetCurrentProcessId
HeapAlloc
InterlockedIncrement
InterlockedDecrement
GetProcessHeap
HeapFree
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
MulDiv
CreateEventW
SetEvent
WaitForSingleObject
TerminateThread
lstrcmpW
GetModuleHandleW
lstrlenW
InterlockedExchange
InterlockedCompareExchange
GetSystemTimeAsFileTime
FreeResource
LocalAlloc
LocalLock
FlushFileBuffers
LocalUnlock
lstrcpyW
lstrcatW
lstrcmpiW
CreateEventA
GetLastError
MultiByteToWideChar
RaiseException
WriteFile
CreateFileW
WideCharToMultiByte
CloseHandle
FindResourceExW
FindResourceW
LoadResource
LockResource
GetACP
SizeofResource
user32
GetClassNameW
GetParent
CopyRect
UnregisterClassW
BeginPaint
EndPaint
UnregisterHotKey
RegisterHotKey
GetCursorPos
WindowFromPoint
GetWindowThreadProcessId
IsWindow
IsWindowVisible
GetKeyboardLayout
SetWindowRgn
IntersectRect
SetFocus
EqualRect
wsprintfW
OffsetRect
MapWindowPoints
GetSysColorBrush
FillRect
GetWindowInfo
GetKeyState
SetForegroundWindow
SetRectEmpty
RegisterClassW
GetWindow
FindWindowExW
CreateDialogParamW
PostQuitMessage
DestroyCursor
MessageBoxW
CopyImage
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
IsRectEmpty
DestroyWindow
CreateWindowExW
DispatchMessageW
WaitMessage
TranslateMessage
PeekMessageW
DefWindowProcW
CallWindowProcW
RemovePropW
SetWindowLongW
GetWindowLongW
PtInRect
ReleaseDC
FrameRect
InflateRect
DrawFrameControl
GetDCEx
TrackMouseEvent
GetDesktopWindow
SetCapture
LoadMenuW
GetDC
GetSubMenu
GetMenuItemCount
GetMenuItemInfoW
DestroyMenu
SetWindowsHookExW
UnhookWindowsHookEx
CharNextW
GetMessageW
PostMessageW
CallNextHookEx
DrawTextW
GetWindowDC
UpdateLayeredWindow
SetPropW
LoadCursorW
SetCursor
SetTimer
GetPropW
GetClientRect
UnionRect
GetDlgItem
ClientToScreen
GetSystemMetrics
GetWindowRect
MonitorFromPoint
GetMonitorInfoW
LoadImageW
KillTimer
CreateDialogIndirectParamW
SetWindowPos
LoadStringW
ShowWindow
GetCursorInfo
ScreenToClient
ReleaseCapture
SendMessageW
GetCapture
gdi32
Polyline
IntersectClipRect
SetViewportOrgEx
CreatePen
GetPixel
CreatePatternBrush
GetCurrentObject
MoveToEx
Ellipse
LineTo
CreateRectRgn
GetDeviceCaps
EnumFontFamiliesExW
CreateSolidBrush
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
DeleteDC
SelectObject
CreateCompatibleDC
BitBlt
CreateDIBSection
GetStockObject
CreateDCW
SetBkColor
GetObjectW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
SetSecurityDescriptorDacl
GetUserNameW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
InitializeSecurityDescriptor
shell32
SHGetFileInfoW
SHGetFolderPathW
shlwapi
PathRemoveFileSpecW
PathAppendW
PathFindExtensionW
gdiplus
GdipFillClosedCurve2
GdipDrawEllipseI
GdipDrawRectangleI
GdipDrawLinesI
GdipDrawLines
GdipSetSmoothingMode
GdipCreateFromHDC
GdipSetPenDashStyle
GdipSetPenMode
GdipSetPenLineJoin
GdipCreateSolidFill
GdipDeleteGraphics
GdipDeletePen
GdipCreatePen1
GdipDeleteBrush
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipDisposeImage
GdipAlloc
GdipFree
imm32
ImmReleaseContext
ImmGetContext
ImmGetCompositionStringW
ImmNotifyIME
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetCompositionStringA
ImmGetProperty
ImmSetCompositionFontW
msimg32
AlphaBlend
comctl32
InitCommonControlsEx
Sections
.text Size: 281KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 333KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE