Static task
static1
Behavioral task
behavioral1
Sample
d93e82d614c7fa3d355c159a3b5b52709c2319ae3a9048fee24574f65b367aff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d93e82d614c7fa3d355c159a3b5b52709c2319ae3a9048fee24574f65b367aff.exe
Resource
win10v2004-20220812-en
General
-
Target
d93e82d614c7fa3d355c159a3b5b52709c2319ae3a9048fee24574f65b367aff
-
Size
983KB
-
MD5
0b6a36460ca38ad46da901dc57582269
-
SHA1
633d66a5f79e86b124507a477466452092fb78c8
-
SHA256
d93e82d614c7fa3d355c159a3b5b52709c2319ae3a9048fee24574f65b367aff
-
SHA512
28f226770425a57c2bf9a65fb3fb493d91f0af16353b90f8bf7d1bb6b2a36548dd15790cad0c3ff7e5c0869a1bf21b310d8ddb29928c3ffa96df4dbeeae85f03
-
SSDEEP
24576:vw5JjZC2xJkTds2+SSHuowTPqZqwvd55W:KD7kJ9+SnMQwvdPW
Malware Config
Signatures
Files
-
d93e82d614c7fa3d355c159a3b5b52709c2319ae3a9048fee24574f65b367aff.exe windows x86
557e523020f14f7b638810fa920fc28d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oledlg
OleUIBusyW
shell32
ShellExecuteExW
ILGetSize
ExtractIconA
gdi32
GetWindowExtEx
ScaleWindowExtEx
SetBkColor
GetBkColor
GetObjectW
SetViewportOrgEx
SelectObject
TextOutW
DeleteDC
ExtSelectClipRgn
RestoreDC
OffsetViewportOrgEx
SetMapMode
Escape
CreateRectRgnIndirect
GetStockObject
SetWindowExtEx
GetTextColor
ExtTextOutW
GetViewportExtEx
GetRgnBox
CreateBitmap
SetTextColor
GetDeviceCaps
ScaleViewportExtEx
GetMapMode
SetViewportExtEx
RectVisible
GetClipBox
SaveDC
DeleteObject
PtVisible
kernel32
GlobalDeleteAtom
HeapAlloc
SetHandleCount
QueryPerformanceCounter
VirtualQuery
GetConsoleCP
GetStartupInfoA
CreateFileA
FileTimeToSystemTime
HeapFree
FindResourceW
FileTimeToLocalFileTime
GetModuleHandleW
GlobalFree
GlobalLock
CreateFileW
LockFile
VirtualFree
GetTimeZoneInformation
FindNextFileW
GetCurrentProcess
DeleteCriticalSection
GetFileSizeEx
LocalReAlloc
TlsFree
GlobalAlloc
FreeEnvironmentStringsW
GetCommandLineW
lstrcmpA
VirtualAlloc
GetStartupInfoW
GlobalReAlloc
TerminateProcess
GetVersionExA
LocalAlloc
GetSystemInfo
HeapCreate
FindFirstFileW
InterlockedDecrement
RtlUnwind
GlobalFindAtomW
GetFileTime
GetModuleFileNameA
GetProcAddress
CloseHandle
GlobalFlags
GetConsoleOutputCP
GetTickCount
IsValidCodePage
ExitProcess
GetFullPathNameW
lstrlenA
GetLocaleInfoW
FreeLibrary
VirtualProtect
WritePrivateProfileStringW
MultiByteToWideChar
CompareStringW
HeapSize
GetSystemDefaultLangID
LockResource
LoadLibraryA
GetDriveTypeA
lstrcmpW
FlushFileBuffers
UnlockFile
TlsAlloc
FindClose
InitializeCriticalSection
GlobalHandle
GetModuleHandleA
EnumResourceLanguagesW
GetStdHandle
MulDiv
GetCurrentThread
TlsGetValue
GetStringTypeA
TlsSetValue
EnterCriticalSection
ConvertDefaultLocale
WriteFile
SetStdHandle
GetModuleFileNameW
LocalFree
LoadResource
SizeofResource
SetEnvironmentVariableA
GetCurrentDirectoryA
GetSystemTimeAsFileTime
CompareStringA
GetOEMCP
GetVolumeInformationW
lstrlenW
GetFileAttributesW
SetErrorMode
IsDebuggerPresent
GetCPInfo
InitializeCriticalSectionAndSpinCount
GlobalAddAtomW
WriteConsoleW
GetLastError
GetConsoleMode
LeaveCriticalSection
GetCurrentProcessId
InterlockedExchange
GetVersionExW
GetFileType
SetFilePointer
WideCharToMultiByte
WriteConsoleA
GetLocaleInfoA
HeapReAlloc
GetEnvironmentStringsW
UnhandledExceptionFilter
GetFileSize
Sleep
SetUnhandledExceptionFilter
DuplicateHandle
LCMapStringW
FormatMessageW
InterlockedIncrement
LCMapStringA
ReadFile
GetCurrentThreadId
RaiseException
GetACP
SetEndOfFile
GlobalUnlock
FreeResource
GetThreadLocale
GetStringTypeW
LoadLibraryW
SetLastError
avifil32
AVIFileInit
advapi32
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
ole32
CLSIDFromString
CoGetClassObject
OleIsCurrentClipboard
CoFreeUnusedLibraries
CoRevokeClassObject
OleUninitialize
CoTaskMemAlloc
CLSIDFromProgID
OleFlushClipboard
StgOpenStorageOnILockBytes
OleInitialize
StgCreateDocfileOnILockBytes
CoTaskMemFree
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
shlwapi
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
user32
ReleaseDC
CharUpperW
DestroyMenu
GetNextDlgGroupItem
IsRectEmpty
SendDlgItemMessageA
OffsetRect
GetFocus
RegisterWindowMessageW
GetNextDlgTabItem
SetWindowPos
IsWindow
GetSysColorBrush
GetWindow
RegisterClipboardFormatW
SetWindowTextW
CallNextHookEx
SystemParametersInfoA
IsChild
CharNextW
UnregisterClassW
EnableWindow
SetWindowsHookExW
MessageBoxW
GetActiveWindow
GetWindowLongW
ShowWindow
GetMenuItemID
GetClassNameW
PeekMessageW
IsDialogMessageW
GrayStringW
SetMenuItemBitmaps
SetFocus
GetLastActivePopup
ReleaseCapture
GetMessageTime
EndDialog
SetWindowLongW
SetWindowContextHelpId
CheckMenuItem
BeginPaint
DispatchMessageW
EqualRect
DefWindowProcW
CreateWindowExW
PostMessageW
GetSysColor
MessageBeep
GetWindowDC
CreateDialogIndirectParamW
ModifyMenuW
CopyAcceleratorTableW
PostThreadMessageW
GetClientRect
GetWindowPlacement
SetMenu
GetSystemMetrics
GetTopWindow
GetWindowTextW
WinHelpW
SetForegroundWindow
RegisterClassW
GetMenuItemCount
GetWindowRect
UpdateWindow
IsIconic
ValidateRect
DrawTextW
GetCapture
DestroyWindow
GetDlgCtrlID
LoadBitmapW
GetDesktopWindow
SendMessageW
TranslateMessage
PtInRect
MapWindowPoints
MapDialogRect
TabbedTextOutW
SendDlgItemMessageW
GetParent
LoadCursorW
GetDC
GetForegroundWindow
IsWindowEnabled
GetMessageW
GetSubMenu
FindWindowW
GetMenuCheckMarkDimensions
GetMessagePos
CopyRect
PostQuitMessage
InvalidateRgn
ClientToScreen
InvalidateRect
SetCursor
GetMenuState
EndPaint
UnhookWindowsHookEx
SetActiveWindow
DrawTextExW
GetClassInfoExW
GetClassLongW
GetPropW
EnableMenuItem
SetPropW
SetCapture
RemovePropW
GetMenu
GetCursorPos
GetClassInfoW
MoveWindow
GetKeyState
LoadIconW
CallWindowProcW
IntersectRect
GetDlgItem
SetRect
AdjustWindowRectEx
GetWindowThreadProcessId
IsWindowVisible
comdlg32
GetFileTitleW
Sections
.text Size: 622KB - Virtual size: 621KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 319KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ