Static task
static1
Behavioral task
behavioral1
Sample
b74fbf6a1756d8821da33b1dfa0f87d25dc7954f5db18559e83dd44eaf6b1f96.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b74fbf6a1756d8821da33b1dfa0f87d25dc7954f5db18559e83dd44eaf6b1f96.exe
Resource
win10v2004-20220901-en
General
-
Target
b74fbf6a1756d8821da33b1dfa0f87d25dc7954f5db18559e83dd44eaf6b1f96
-
Size
684KB
-
MD5
0ff09631209b522a0d7d3088b50997a3
-
SHA1
b71f77894091dfe327439c38aaaea7a77b467052
-
SHA256
b74fbf6a1756d8821da33b1dfa0f87d25dc7954f5db18559e83dd44eaf6b1f96
-
SHA512
67797e83b9e528cd288d20debcfff71502982e1658ca72412b41ef743cb3fa9e5082fb863a5199a6450d8787c859d0c2ca4150990186795bf7673bc23d4f4898
-
SSDEEP
12288:6+4i/xBQJsnP9jEtVy4aplomOn93kA5xbO5ynardNQNicXyg5hVSsvS:6+4i/oC1jWrglomOdk0boyn+giahv
Malware Config
Signatures
Files
-
b74fbf6a1756d8821da33b1dfa0f87d25dc7954f5db18559e83dd44eaf6b1f96.exe windows x86
4fdd9a792295377464e20e04061cf370
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
ImageList_Copy
ImageList_AddMasked
ImageList_GetImageInfo
ImageList_Draw
advapi32
RegEnumValueA
OpenSCManagerA
RegSetValueExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegQueryValueExA
kernel32
GetCurrentProcessId
RtlUnwind
InitializeCriticalSection
CreateProcessW
FileTimeToSystemTime
HeapCreate
GetFileType
FindClose
GetConsoleOutputCP
TerminateProcess
TlsGetValue
SetFilePointer
HeapReAlloc
FormatMessageW
LockResource
LocalAlloc
IsBadWritePtr
SetEndOfFile
IsDebuggerPresent
VirtualFree
GetCurrentProcess
TlsFree
InterlockedExchange
lstrcpynW
GetExitCodeProcess
GetModuleHandleA
GetDateFormatA
FreeEnvironmentStringsW
GetThreadLocale
GetCurrentThread
FreeEnvironmentStringsA
lstrcmpiA
SystemTimeToFileTime
WriteConsoleW
SetUnhandledExceptionFilter
FindFirstFileA
GetLocalTime
GetVersion
OutputDebugStringA
InterlockedDecrement
VirtualQuery
ReadFile
CompareStringA
CompareStringW
GlobalAlloc
GetEnvironmentStrings
LeaveCriticalSection
GlobalUnlock
MulDiv
GetOEMCP
GetEnvironmentStringsW
GetStartupInfoA
GetLocaleInfoA
GetStdHandle
IsValidLocale
HeapAlloc
WaitForSingleObject
LCMapStringA
ExitThread
GetStringTypeW
SetLastError
UnhandledExceptionFilter
GetCPInfo
GetCommandLineA
GlobalFree
GetFileAttributesA
CreateDirectoryW
GetModuleFileNameA
UnlockFile
RaiseException
WriteConsoleA
LockFile
CreateEventA
DeleteCriticalSection
OutputDebugStringW
FreeLibrary
WideCharToMultiByte
GetUserDefaultLCID
GetTimeZoneInformation
FindNextFileA
GetSystemTimeAsFileTime
SetThreadPriority
HeapFree
lstrlenA
GetStringTypeA
EnumSystemLocalesA
HeapSize
lstrcmpiW
CreateMutexA
GetVersionExA
ExitProcess
GetProcAddress
GetCurrentThreadId
SetFileAttributesA
GetFileTime
HeapDestroy
FlushFileBuffers
GetACP
GlobalHandle
VirtualAlloc
SetStdHandle
LoadLibraryA
GetTempFileNameA
lstrcpyW
DeleteFileA
GlobalLock
lstrlenW
SetHandleCount
TlsSetValue
CreateThread
TlsAlloc
GetTempPathA
EnterCriticalSection
GetSystemTime
FatalAppExitA
IsValidCodePage
InterlockedIncrement
CloseHandle
SetEnvironmentVariableA
GetLastError
GetLocaleInfoW
QueryPerformanceCounter
GetModuleFileNameW
GetConsoleCP
WriteFile
GetTickCount
LCMapStringW
MultiByteToWideChar
user32
EmptyClipboard
SystemParametersInfoA
SetCapture
CharLowerA
GetFocus
KillTimer
DrawTextExA
GetKeyNameTextA
GetDesktopWindow
IntersectRect
MessageBoxA
MapWindowPoints
FillRect
CharUpperA
DrawIconEx
CopyAcceleratorTableA
RegisterWindowMessageA
DestroyMenu
IsChild
HideCaret
WindowFromPoint
SetScrollRange
TranslateMessage
RegisterClassExA
GetScrollRange
LoadImageA
MessageBeep
SetCursor
GetDlgItem
GetWindowRect
IsWindow
DispatchMessageA
GetCursorPos
IsRectEmpty
GetMenu
ReleaseCapture
DestroyWindow
RegisterClassA
CopyRect
SetActiveWindow
GetClassNameA
ClientToScreen
RegisterClipboardFormatA
TabbedTextOutA
IsMenu
UpdateWindow
EndPaint
GetClassInfoA
GetDC
ReleaseDC
ShowScrollBar
GetSubMenu
AppendMenuA
GetSysColor
CheckDlgButton
BeginPaint
LoadIconA
GetLastActivePopup
DrawMenuBar
SendMessageA
GetWindowThreadProcessId
DestroyIcon
DefWindowProcA
SetTimer
OffsetRect
UnregisterClassA
GetWindowPlacement
GetDlgItemTextA
DestroyCaret
GetMenuItemID
GetCapture
PeekMessageA
SetWindowLongA
IsIconic
SetWindowTextA
EndDialog
InflateRect
GetClientRect
LoadCursorA
PostMessageA
GetTopWindow
GetParent
GetWindowLongA
SetForegroundWindow
CreateIconIndirect
GetDlgCtrlID
RedrawWindow
ShowWindow
IsWindowVisible
OpenClipboard
GetMenuItemCount
LoadBitmapA
DestroyCursor
GetScrollInfo
GetWindow
wsprintfA
EnumWindows
ScreenToClient
GetMessageA
SetRectEmpty
TrackPopupMenu
PostThreadMessageA
GetWindowTextA
EnumChildWindows
MapDialogRect
GetWindowTextLengthA
EnableMenuItem
RemoveMenu
GetAsyncKeyState
GetActiveWindow
DrawFocusRect
GetIconInfo
CallNextHookEx
IsWindowEnabled
SetCaretPos
RemovePropA
InvalidateRect
IsDlgButtonChecked
SetWindowPos
MoveWindow
LoadStringA
SetDlgItemTextA
DrawTextA
GetSystemMetrics
SetFocus
CreateWindowExA
SetRect
IsDialogMessageA
CreatePopupMenu
winmm
mixerGetLineInfoA
mixerGetLineControlsA
waveOutGetVolume
mixerGetControlDetailsA
mixerOpen
mciGetErrorStringA
mciSendCommandA
PlaySoundA
waveOutPrepareHeader
mixerClose
waveOutOpen
waveOutReset
mixerSetControlDetails
waveOutWrite
gdi32
DeleteObject
GetPaletteEntries
Ellipse
Pie
PaintRgn
GetDeviceCaps
CreateDIBitmap
FillRgn
StretchBlt
FlattenPath
PolyBezierTo
CopyMetaFileA
RealizePalette
Polyline
CreatePolygonRgn
GetTextCharacterExtra
IntersectClipRect
ExtCreatePen
ScaleWindowExtEx
GetPolyFillMode
SelectObject
GetTextAlign
DeleteMetaFile
EndDoc
DeleteDC
RectVisible
GetPath
CreateMetaFileA
GetStretchBltMode
SetPolyFillMode
PtInRegion
ScaleViewportExtEx
GetRegionData
GetTextMetricsA
CreateCompatibleBitmap
GetDCOrgEx
EndPage
PolyPolyline
CreatePen
ExtFloodFill
StretchDIBits
CreateRoundRectRgn
SetTextAlign
CreateHalftonePalette
CloseMetaFile
CreateDCA
GetTextExtentPoint32A
GetOutlineTextMetricsA
SetBkMode
GetTextExtentPointA
SetRectRgn
UnrealizeObject
CreatePenIndirect
StartPage
GetObjectA
GetTextColor
FillPath
Polygon
ResetDCA
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 464KB - Virtual size: 462KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ