Static task
static1
Behavioral task
behavioral1
Sample
51ad4f7ebc7cd0b9c137d9cbacd6794a2316c9660d5ac996ee8415182b09c0cb.exe
Resource
win7-20220812-en
General
-
Target
51ad4f7ebc7cd0b9c137d9cbacd6794a2316c9660d5ac996ee8415182b09c0cb
-
Size
288KB
-
MD5
2051c1b8ad3d1cf849bdd0d29a16e6e0
-
SHA1
5eb0aceef5535626024a788c771238e65835b42e
-
SHA256
51ad4f7ebc7cd0b9c137d9cbacd6794a2316c9660d5ac996ee8415182b09c0cb
-
SHA512
cddb287d14fa01e3e78c1d8b0d33c4d05e4e696a30ede5053d228cd681c67d3a528ab68fa1110761849f3c9c40ea6275d723b6c3c9aa5417c6d3e5224a85a7ef
-
SSDEEP
6144:ng+KNUF9KbRSRdD+DKWpW1boU6bpHwZzE2UBwXBqKUgF2zc:zKNiIbTKWiUUF/c0qK3QQ
Malware Config
Signatures
Files
-
51ad4f7ebc7cd0b9c137d9cbacd6794a2316c9660d5ac996ee8415182b09c0cb.exe windows x86
9a16a80b856f5fb834c9769664ed228e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasSetEntryDialParamsW
RasGetEntryPropertiesW
RasSetEntryPropertiesW
RasEnumDevicesW
newdev
UpdateDriverForPlugAndPlayDevicesW
advapi32
RegEnumKeyW
RegOpenKeyW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
kernel32
WritePrivateProfileStringW
GlobalFlags
GetModuleHandleA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
SetErrorMode
GetStartupInfoW
HeapReAlloc
RtlUnwind
RaiseException
ExitProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetConsoleCP
GetConsoleMode
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
Sleep
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
GetThreadLocale
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
GlobalFindAtomW
LoadLibraryA
GetVersionExA
lstrlenA
InterlockedDecrement
GetCurrentProcessId
GlobalAddAtomW
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
lstrcmpW
FreeLibrary
GlobalDeleteAtom
GetProcAddress
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
GetVersionExW
CreateThread
WaitForMultipleObjects
ExitThread
CreateEventW
UnmapViewOfFile
SetEvent
CloseHandle
WaitForSingleObject
TerminateThread
OpenFileMappingW
MapViewOfFile
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FindFirstFileW
FindNextFileW
FindClose
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GetWindowsDirectoryW
WinExec
CopyFileW
GetFileAttributesW
SetFileAttributesW
GetLastError
GetProcessHeap
HeapAlloc
HeapFree
GetCurrentThreadId
WideCharToMultiByte
GetModuleHandleW
GetModuleFileNameW
lstrlenW
HeapSize
user32
DestroyMenu
GrayStringW
DrawTextExW
TabbedTextOutW
ClientToScreen
LoadCursorW
GetSysColorBrush
ShowWindow
SetWindowTextW
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetWindowTextW
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindow
UnhookWindowsHookEx
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
SetCursor
SetWindowsHookExW
CallNextHookEx
GetActiveWindow
IsWindowVisible
GetKeyState
UnregisterClassW
IsWindow
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
SendMessageW
ModifyMenuW
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
FindWindowW
ChangeWindowMessageFilter
RegisterClassExW
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
EnableWindow
PostMessageW
MessageBoxW
GetDC
DrawTextW
ReleaseDC
UnregisterClassA
gdi32
CreateBitmap
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
ExtTextOutW
GetClipBox
GetDeviceCaps
TextOutW
RectVisible
PtVisible
SetMapMode
RestoreDC
SaveDC
DeleteObject
SetBkColor
SetTextColor
Escape
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
shlwapi
PathFindFileNameW
PathFindExtensionW
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE