Static task
static1
Behavioral task
behavioral1
Sample
509a8a468a0e114ebcedbfb0a4a2ef8840fc55359d0e2f7c5a3a8d795e8f5f59.exe
Resource
win7-20220812-en
General
-
Target
509a8a468a0e114ebcedbfb0a4a2ef8840fc55359d0e2f7c5a3a8d795e8f5f59
-
Size
1.2MB
-
MD5
09b6c58f350e1aa17cd62b645722b320
-
SHA1
d4ee3bc6cdbf70d7f8bcac9f08da4dcceb5acc37
-
SHA256
509a8a468a0e114ebcedbfb0a4a2ef8840fc55359d0e2f7c5a3a8d795e8f5f59
-
SHA512
af0630bc52bc6552c9d908649ec80da7630a478eda928c145a3eefe20c2459eab12848ff3eb06f69eff3f6c3d3266c9bf12aab6e15d7c1559b308850545a4e67
-
SSDEEP
24576:77eh9+OjJhvIUyOUrh98UPH3UlCTuyAtykvlJwY26:WNI7vhUITuyoblI6
Malware Config
Signatures
Files
-
509a8a468a0e114ebcedbfb0a4a2ef8840fc55359d0e2f7c5a3a8d795e8f5f59.exe windows x86
6280034bda6e9ba73ef7825ebdacf4d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wtsapi32
WTSQuerySessionInformationW
WTSFreeMemory
wininet
InternetQueryOptionA
kernel32
lstrlenW
GlobalFree
GlobalAlloc
ProcessIdToSessionId
LocalFree
CreateMutexW
OutputDebugStringW
OpenMutexW
MapViewOfFileEx
MulDiv
InterlockedDecrement
GetCPInfo
IsDBCSLeadByte
GetFullPathNameW
DeleteCriticalSection
InitializeCriticalSection
CreateThread
lstrcpynW
GlobalLock
GlobalUnlock
GetFileAttributesW
FindNextFileW
ExitProcess
SetEndOfFile
GetFileType
CreateDirectoryW
SetEvent
TerminateThread
GetDriveTypeA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
GetCurrentDirectoryA
GetDateFormatA
GetTimeFormatA
IsValidCodePage
GetOEMCP
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStartupInfoA
SetHandleCount
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetModuleHandleA
RtlUnwind
GetStartupInfoW
FileTimeToLocalFileTime
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetThreadLocale
GetLocaleInfoA
InterlockedExchange
GetVersionExA
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetACP
FileTimeToSystemTime
GetTempPathW
GetTempFileNameW
ReleaseMutex
GetLogicalDrives
CopyFileW
FindClose
FindFirstFileW
GetDriveTypeW
DeviceIoControl
ReadProcessMemory
WritePrivateProfileStringW
CreateFileA
VirtualQueryEx
SetUnhandledExceptionFilter
GetThreadSelectorEntry
FreeLibrary
VirtualQuery
GetVersionExW
GetCurrentThread
GetModuleFileNameA
GetCurrentProcessId
OpenFileMappingW
ExitThread
CreateFileMappingW
InterlockedIncrement
UnmapViewOfFile
MapViewOfFile
GetProcAddress
GetModuleFileNameW
LoadLibraryW
Sleep
GetFileSize
WriteFile
SetFilePointer
MoveFileW
lstrlenA
MoveFileExW
SetLastError
RaiseException
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
ReadFile
CreateFileW
SizeofResource
MultiByteToWideChar
FindResourceExW
CloseHandle
LockResource
DeleteFileW
LoadResource
WaitForSingleObject
LeaveCriticalSection
WriteConsoleW
EnterCriticalSection
GetLastError
WideCharToMultiByte
GetStdHandle
SystemTimeToFileTime
GetLocalTime
FindResourceW
GetTickCount
CreateEventW
IsBadReadPtr
ResetEvent
GetUserDefaultLCID
user32
DefWindowProcW
CreateWindowExW
GetClassInfoExW
SystemParametersInfoW
UnregisterClassA
SendMessageW
IsWindowVisible
SetWindowPos
SetWindowRgn
GetWindowRect
GetClientRect
ScreenToClient
SetRect
SetClipboardData
RegisterClipboardFormatW
GetClipboardData
EnumDisplayMonitors
EnableWindow
SetWindowLongW
GetCursorPos
GetParent
GetMonitorInfoW
IsWindow
SetWindowTextW
GetDlgItem
ShowWindow
EndDialog
MonitorFromPoint
SetTimer
PostMessageW
InvalidateRect
GetKeyState
LoadCursorW
PtInRect
KillTimer
SetCursor
CreateDialogParamW
DispatchMessageW
GetMessageW
GetForegroundWindow
SetForegroundWindow
TranslateMessage
MoveWindow
UnregisterClassW
UpdateLayeredWindow
UpdateWindow
RegisterClassExW
EndPaint
BeginPaint
GetSystemMetrics
TrackMouseEvent
GetDlgCtrlID
SetPropW
GetWindow
GetPropW
GetDesktopWindow
DrawTextW
DestroyIcon
DialogBoxParamW
GetWindowLongW
CloseClipboard
GetMessageExtraInfo
SetCapture
GetDC
LoadIconW
GetWindowPlacement
ReleaseCapture
IsWindowEnabled
EnumClipboardFormats
ReleaseDC
OpenClipboard
OffsetRect
DrawIconEx
EmptyClipboard
DestroyWindow
SendInput
PostQuitMessage
LoadImageW
IsIconic
gdi32
SaveDC
RestoreDC
CombineRgn
CreateCompatibleDC
Rectangle
CreateSolidBrush
CreateDIBSection
CreateFontIndirectW
GetDeviceCaps
PatBlt
GetObjectW
SetBkMode
SetTextColor
SelectObject
GetFontUnicodeRanges
LineTo
CreatePen
DeleteDC
BitBlt
DeleteObject
CreateFontW
GetDIBits
ExtCreateRegion
MoveToEx
advapi32
RegOpenKeyW
LookupAccountSidW
GetTokenInformation
LookupAccountNameW
ConvertSidToStringSidW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
IsTextUnicode
GetSecurityInfo
SetEntriesInAclW
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
BuildExplicitAccessWithNameW
GetSecurityDescriptorSacl
OpenProcessToken
RegSetValueExW
shell32
SHCreateDirectoryExW
SHGetSpecialFolderPathW
ShellExecuteW
SHGetFolderPathW
ole32
CoInitialize
CoUninitialize
StringFromGUID2
CoCreateGuid
CoCreateInstance
CoGetInterfaceAndReleaseStream
CLSIDFromProgID
CoMarshalInterThreadInterfaceInStream
CoInitializeEx
CoFreeLibrary
CoLoadLibrary
OleInitialize
OleUninitialize
oleaut32
SysAllocStringByteLen
SysFreeString
shlwapi
wnsprintfW
PathFileExistsW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
ws2_32
inet_ntoa
connect
WSACancelAsyncRequest
WSAAsyncGetHostByName
WSAAsyncSelect
ntohs
send
htonl
recv
closesocket
gethostbyname
sendto
WSACleanup
WSAStartup
htons
ntohl
WSAGetLastError
inet_addr
shutdown
setsockopt
socket
netapi32
NetApiBufferFree
NetWkstaTransportEnum
Netbios
Sections
.text Size: 832KB - Virtual size: 830KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 180KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 44KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE