Static task
static1
Behavioral task
behavioral1
Sample
921c617cd78ea9b0d9b6ec2d52a8802ec737e7184c65373262fb83bcf269e3e2.exe
Resource
win7-20220812-en
General
-
Target
921c617cd78ea9b0d9b6ec2d52a8802ec737e7184c65373262fb83bcf269e3e2
-
Size
276KB
-
MD5
0ee7c04d1414c6cc8a680612dcb1ecbb
-
SHA1
5d2e50dda728893610d6b03c8db08454fc7d4972
-
SHA256
921c617cd78ea9b0d9b6ec2d52a8802ec737e7184c65373262fb83bcf269e3e2
-
SHA512
77668258f24f44ca792510cdba4e6990a85ab2944d4205dd311ea4ba3890f392867c28c5abbb4d53163dd2da0bdfe207fc3dfc332d9370ac5455169444b8a450
-
SSDEEP
6144:/XDuspbPDXpquDj3ezeDHtLkdYspp9vUrM7/WAyKpr:fDusVL8uP3OehLkd1vv4M9yKpr
Malware Config
Signatures
Files
-
921c617cd78ea9b0d9b6ec2d52a8802ec737e7184c65373262fb83bcf269e3e2.exe windows x86
3693a63b37dce99b9b1770ad1e5edf62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
psapi
GetModuleBaseNameA
EnumProcesses
EnumProcessModules
shlwapi
StrStrIA
kernel32
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
GetFileAttributesA
GetFileSize
GetFileTime
SetErrorMode
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
HeapFree
WriteFile
HeapAlloc
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
ReadFile
GetCurrentProcess
DuplicateHandle
SetLastError
FileTimeToLocalFileTime
FileTimeToSystemTime
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
lstrlenA
lstrcpynA
lstrcpyA
FindFirstFileA
FindClose
ExpandEnvironmentStringsA
WinExec
OpenProcess
lstrcmpiA
UnmapViewOfFile
LocalAlloc
CreateFileMappingA
MapViewOfFile
LocalFree
GetModuleFileNameA
LoadLibraryA
GetVersionExA
CreateSemaphoreA
CreateThread
ReleaseSemaphore
GetProcAddress
FreeLibrary
CreateFileA
OutputDebugStringA
WaitForSingleObject
DeviceIoControl
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ReleaseMutex
CreateMutexA
GetLastError
CloseHandle
GetPrivateProfileIntA
GetPrivateProfileStructA
WritePrivateProfileStructA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
WritePrivateProfileStringA
GetPrivateProfileStringA
user32
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SetWindowTextA
ClientToScreen
GetDC
ReleaseDC
TabbedTextOutA
DrawTextA
GrayStringA
CharUpperA
LoadStringA
LoadCursorA
PtInRect
GetSysColorBrush
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetCapture
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetParent
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
wsprintfA
EnableWindow
SendMessageA
GetWindowTextA
GetClassNameA
GetWindow
AttachThreadInput
GetForegroundWindow
GetWindowThreadProcessId
ShowWindow
GetLastActivePopup
SetForegroundWindow
CreatePopupMenu
AppendMenuA
SetMenuDefaultItem
GetCursorPos
TrackPopupMenu
DestroyMenu
IsIconic
SetActiveWindow
MapVirtualKeyA
keybd_event
LoadIconA
SetWindowLongA
GetMessageExtraInfo
mouse_event
GetMessageA
FindWindowA
PostThreadMessageA
SetTimer
KillTimer
PostMessageA
GetDlgCtrlID
WinHelpA
SetWindowsHookExA
UnregisterClassA
gdi32
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetBkColor
SetTextColor
GetClipBox
GetStockObject
RestoreDC
SaveDC
CreateBitmap
SelectObject
DeleteObject
GetObjectA
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
shell32
SHGetFileInfoA
Shell_NotifyIconA
ShellExecuteA
comctl32
ord17
ole32
CoCreateInstance
CoUninitialize
CoInitialize
Sections
.text Size: 120KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE