Static task
static1
Behavioral task
behavioral1
Sample
b77a688dd7b921fe8c698d6c633cff72fe673efc700f65acc805372f19521fe7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b77a688dd7b921fe8c698d6c633cff72fe673efc700f65acc805372f19521fe7.exe
Resource
win10v2004-20220812-en
General
-
Target
b77a688dd7b921fe8c698d6c633cff72fe673efc700f65acc805372f19521fe7
-
Size
988KB
-
MD5
023676c10ca88a7dd73266018765231e
-
SHA1
93914869fd082f97554f83bb9490369ee4d87282
-
SHA256
b77a688dd7b921fe8c698d6c633cff72fe673efc700f65acc805372f19521fe7
-
SHA512
ac29ab503fe9269a71f9a25bffac47497fec37874f3d272345c8fea66b683437dba8c3cbaeebdd06aecb113fa2537cabe222cc6cbf644e6667e68f9adf899d7e
-
SSDEEP
24576:v1LqzQVlG3c4G1rvKB7Bp8YTEcjr10Zkox+kclEp:v1LqzQJ4AvM7BuYTZ1box+kcl
Malware Config
Signatures
Files
-
b77a688dd7b921fe8c698d6c633cff72fe673efc700f65acc805372f19521fe7.exe windows x86
52082b66ef6417d4557937b621e0e63c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmDisableIME
kernel32
GetTickCount
GetLastError
GlobalAlloc
MapViewOfFile
UnmapViewOfFile
CreateFileA
WideCharToMultiByte
FormatMessageW
GetCurrentThreadId
DuplicateHandle
GetModuleFileNameW
ExitThread
CreateEventW
LocalFree
CreateThread
SetFilePointer
WaitForMultipleObjects
SetLastError
InterlockedIncrement
InterlockedCompareExchange
GetCommandLineW
GetCurrentProcessId
GetTempPathW
WaitForSingleObject
DeleteFileW
CopyFileW
MoveFileExW
OpenFileMappingW
CreateFileMappingW
MultiByteToWideChar
FindClose
FindNextFileW
FindFirstFileW
RemoveDirectoryW
ReadFile
FlushFileBuffers
GlobalFree
ReleaseMutex
CreateMutexW
OpenMutexW
DeleteFileA
LoadLibraryW
QueryPerformanceFrequency
QueryPerformanceCounter
HeapReAlloc
GetVersionExA
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
TerminateProcess
IsDebuggerPresent
GetDriveTypeW
RaiseException
GetModuleHandleA
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
GetCurrentDirectoryA
LCMapStringA
LCMapStringW
GetFullPathNameW
GetTimeZoneInformation
FreeLibrary
LoadLibraryA
InitializeCriticalSection
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileW
SetFileAttributesW
OpenEventW
WriteFile
HeapAlloc
GetSystemTimeAsFileTime
CreateDirectoryW
GetProcessHeap
HeapFree
GetCurrentProcess
GetModuleHandleW
GetSystemInfo
GetProcAddress
CloseHandle
CreateProcessW
Sleep
GetFileSize
user32
RegisterClassExW
MonitorFromRect
SetWindowLongW
GetClientRect
MessageBoxW
ShowWindow
FillRect
BeginPaint
PtInRect
GetWindowRect
LoadCursorW
GetMonitorInfoW
DefWindowProcW
TranslateMessage
CreateWindowExW
GetMessageW
SubtractRect
MonitorFromPoint
AdjustWindowRectEx
GetForegroundWindow
GetSystemMetrics
PostQuitMessage
OffsetRect
CloseWindow
DispatchMessageW
FindWindowW
EnableWindow
SetWindowPos
SetWindowTextW
PostMessageW
SetFocus
EndPaint
IntersectRect
DrawTextW
GetCursorPos
DestroyWindow
SetCursor
InvalidateRect
SetLayeredWindowAttributes
SetTimer
GetKeyboardLayoutList
LoadKeyboardLayoutW
SystemParametersInfoW
GetWindowLongW
advapi32
RegOpenKeyExW
RegQueryValueW
SetNamedSecurityInfoW
GetSecurityInfo
GetNamedSecurityInfoW
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
RegEnumValueW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
SetEntriesInAclW
GetSecurityDescriptorSacl
RegQueryValueExW
BuildExplicitAccessWithNameW
ole32
OleSetContainedObject
OleInitialize
CoInitializeSecurity
CoUninitialize
CoCreateInstance
CoInitializeEx
OleCreate
oleaut32
VariantClear
SysFreeString
VariantInit
SysAllocString
wininet
InternetOpenW
InternetOpenUrlW
InternetCloseHandle
InternetReadFile
HttpQueryInfoW
InternetSetOptionW
gdi32
CreateFontIndirectW
SelectObject
GetStockObject
SetTextColor
CreateSolidBrush
CreateCompatibleDC
CreatePen
SetViewportOrgEx
BitBlt
CreateCompatibleBitmap
Rectangle
DeleteDC
SetBkMode
DeleteObject
shell32
ShellExecuteW
SHGetSpecialFolderPathW
SHFileOperationW
Sections
.text Size: 532KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 188KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tc Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE