Static task
static1
Behavioral task
behavioral1
Sample
987e0a7f8b48ebc420aabca48fc16107f4f637c1732186ebbeca337a55e60e33.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
987e0a7f8b48ebc420aabca48fc16107f4f637c1732186ebbeca337a55e60e33.exe
Resource
win10v2004-20221111-en
General
-
Target
987e0a7f8b48ebc420aabca48fc16107f4f637c1732186ebbeca337a55e60e33
-
Size
138KB
-
MD5
4f36a7fdd8df9abac23d694366b9be30
-
SHA1
1e44f746c2ba94c6c095018ae892c5d3c58b3542
-
SHA256
987e0a7f8b48ebc420aabca48fc16107f4f637c1732186ebbeca337a55e60e33
-
SHA512
8e67fddc2d0db0b5a5f5235d5fa9b8e6dc8c81c99b8d360f17894449bbe72a8c9eea972a720d2cdde910cb64e81adb9201821e79a7c19a39b5b7b35ca7d732b1
-
SSDEEP
3072:DKndaC+Knl8u65x1KkW7Im6oQXLCOijaA6Q7:DcaDx1KPwaOiB5
Malware Config
Signatures
Files
-
987e0a7f8b48ebc420aabca48fc16107f4f637c1732186ebbeca337a55e60e33.exe windows x86
82c9e1f90d87f1f2ce250d3ccc2e163f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MsgWaitForMultipleObjectsEx
GetKeyNameTextW
VkKeyScanW
MonitorFromWindow
SetSysColors
MapVirtualKeyA
DrawIconEx
SetMenuContextHelpId
CloseWindow
PostThreadMessageW
MessageBoxA
GetUserObjectInformationW
TranslateMessage
IsCharAlphaNumericA
GetThreadDesktop
GetProcessWindowStation
CloseClipboard
MonitorFromPoint
BeginPaint
GetCursor
GetParent
OpenInputDesktop
GetLastActivePopup
GetClassWord
ArrangeIconicWindows
MapVirtualKeyExA
CopyAcceleratorTableA
GetMenuItemRect
GetClipboardFormatNameA
ValidateRect
CreateIconFromResource
EndMenu
MapVirtualKeyW
GetTitleBarInfo
GetWindowWord
SetWindowTextA
SetWindowPos
VkKeyScanExA
SetLayeredWindowAttributes
ole32
CoReleaseServerProcess
CoCreateInstance
CoRegisterClassObject
CLSIDFromProgID
CoInitialize
OleRun
StringFromCLSID
CoRevokeClassObject
advapi32
CreateRestrictedToken
ReportEventW
AdjustTokenPrivileges
GetSecurityDescriptorControl
RegDeleteKeyW
RegisterEventSourceW
RegQueryInfoKeyW
RegisterEventSourceA
InitializeSecurityDescriptor
RegQueryValueExA
DeleteService
LookupPrivilegeValueW
shlwapi
PathFileExistsW
kernel32
LCMapStringA
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
LoadLibraryA
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
EnterCriticalSection
MultiByteToWideChar
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
HeapFree
VirtualFree
HeapCreate
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetLastError
GetStringTypeA
GetStringTypeW
ConnectNamedPipe
WideCharToMultiByte
GetEnvironmentStrings
GlobalDeleteAtom
UpdateResourceW
SetFilePointerEx
GetNamedPipeInfo
ResetEvent
DeleteAtom
GetHandleInformation
WTSGetActiveConsoleSessionId
CancelWaitableTimer
DecodePointer
FlushFileBuffers
VirtualAlloc
FindFirstFileExW
PurgeComm
GetCommandLineW
GetFileInformationByHandle
GetModuleFileNameA
FreeResource
CreateFileMappingW
LCMapStringW
SetConsoleCursorInfo
UnmapViewOfFile
HeapAlloc
GlobalMemoryStatus
PostQueuedCompletionStatus
DeviceIoControl
TlsGetValue
FindFirstFileExA
CreateProcessW
WaitNamedPipeW
FreeLibrary
GetLocaleInfoW
EncodePointer
UnhandledExceptionFilter
ExitThread
GetCurrentThreadId
OpenFileMappingW
GetWindowsDirectoryA
OutputDebugStringA
GetSystemInfo
GetCurrentThread
GetProcAddress
VerSetConditionMask
GetTempFileNameA
CreateToolhelp32Snapshot
SetCurrentDirectoryW
SetErrorMode
SetFileAttributesW
CreateFileW
GetTickCount
VirtualProtect
SetEndOfFile
GetNamedPipeHandleStateA
FreeEnvironmentStringsW
LoadLibraryW
GetThreadContext
SetLastError
CreateFileA
GetConsoleScreenBufferInfo
FormatMessageA
Process32First
CreateEventA
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ