Static task
static1
Behavioral task
behavioral1
Sample
c02e40f2565478f5c2deb328f78819550dbbcee9b1c233129c22a6414b46cffa.exe
Resource
win7-20220812-en
General
-
Target
c02e40f2565478f5c2deb328f78819550dbbcee9b1c233129c22a6414b46cffa
-
Size
3.2MB
-
MD5
6937bcab74d24c82aefbcab2fcfb6e8b
-
SHA1
8735dad4184444610383f69ccccd2a5eb50c2f26
-
SHA256
c02e40f2565478f5c2deb328f78819550dbbcee9b1c233129c22a6414b46cffa
-
SHA512
702cae8da468ae8655e3898948e4862474dba01bd024fa78246f62e05479f39daba92317047952508b999dff496af200d1caaf4cc8b032f509fa140fa2979016
-
SSDEEP
49152:X3hUShjLvkBVSb1+/zS7vBUMMS5dhQLt01oS4BgbOmVCBlp3wvvnZ1x:CBkbuO7BUMMS5dhQ61oFBAOmYlNWvZH
Malware Config
Signatures
Files
-
c02e40f2565478f5c2deb328f78819550dbbcee9b1c233129c22a6414b46cffa.exe windows x86
cc61cf05b7edd63a6a81dd2175dcb1be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_DEBUG_STRIPPED
Imports
winmm
waveInStop
msvcrt
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_controlfp
__set_app_type
comctl32
ImageList_BeginDrag
ImageList_Copy
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_LoadImageW
ImageList_Read
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_SetOverlayImage
ImageList_Write
ord17
InitializeFlatSB
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
FlatSB_SetScrollInfo
ImageList_Add
FlatSB_SetScrollProp
FlatSB_SetScrollPos
version
VerQueryValueW
VerQueryValueA
GetFileVersionInfoW
GetFileVersionInfoA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
kernel32
IsBadReadPtr
IsValidLocale
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
lstrcmpiA
lstrcmpW
lstrcpynW
lstrcpyW
lstrlenW
InterlockedIncrement
MoveFileA
MoveFileExW
MulDiv
MultiByteToWideChar
OpenProcess
OutputDebugStringA
RaiseException
ReadFile
RemoveDirectoryW
ResetEvent
ResumeThread
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetLastError
SetThreadLocale
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateProcess
TerminateThread
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
VirtualQueryEx
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteFile
WritePrivateProfileStringA
WritePrivateProfileStringW
InterlockedExchangeAdd
InterlockedDecrement
InterlockedCompareExchange
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetWindowsDirectoryW
GetWindowsDirectoryA
GetVolumeInformationW
GetVersionExW
GetVersion
GetThreadPriority
GetThreadLocale
GetThreadContext
LoadLibraryA
LeaveCriticalSection
ExitProcess
GetTickCount
EnterCriticalSection
InitializeCriticalSection
GetCommandLineA
IsValidCodePage
GetTempPathW
GetTempPathA
GetSystemTime
GetSystemInfo
GetSystemDefaultLangID
GetStdHandle
GetStartupInfoA
GetShortPathNameW
GetProfileStringA
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileStringA
GetPriorityClass
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLocalTime
GetLocaleInfoW
GetLocaleInfoA
GetLastError
QueryPerformanceCounter
GetHandleInformation
GetFullPathNameW
GetFileType
GetFileSize
GetFileAttributesW
GetFileAttributesA
GetExitCodeThread
GetExitCodeProcess
GetEnvironmentVariableA
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentDirectoryW
GetCPInfo
GetComputerNameA
GetCommandLineW
FreeResource
FreeLibrary
FormatMessageW
FlushInstructionCache
FindResourceW
FindResourceA
FindNextFileW
FindFirstFileW
FindFirstFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsW
ExitThread
EnumSystemLocalesA
EnumCalendarInfoW
DuplicateHandle
DeviceIoControl
DeleteFileW
DeleteFileA
DeleteCriticalSection
CreateThread
CreateProcessW
CreateProcessA
CreateMutexW
CreateFileW
CreateFileMappingW
CreateFileA
CreateEventW
CreateDirectoryW
CopyFileW
CompareStringW
GetACP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
MapViewOfFile
user32
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
ScrollWindow
SendMessageA
SendMessageTimeoutW
SendMessageW
SetActiveWindow
SetCapture
SetClassLongW
SetClipboardData
SetCursorPos
SetFocus
SetForegroundWindow
SetMenuItemInfoW
SetParent
SetPropW
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowsHookExW
SetWindowTextW
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UpdateWindow
WaitForInputIdle
WaitMessage
WindowFromPoint
PostMessageW
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
MsgWaitForMultipleObjectsEx
MoveWindow
MessageBoxW
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadCursorA
LoadBitmapW
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsIconic
IsDialogMessageW
IsDialogMessageA
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
InsertMenuW
InsertMenuItemW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowDC
GetTopWindow
RegisterClassW
GetSystemMenu
GetSysColorBrush
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetLastActivePopup
GetKeyState
GetKeyNameTextW
GetKeyboardState
GetKeyboardLayoutNameW
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDesktopWindow
GetDCEx
GetCursorPos
GetClipboardData
GetClientRect
GetClassNameW
GetClassNameA
GetClassLongW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowW
FindWindowExW
FillRect
EnumWindows
EnumChildWindows
EndPaint
EndDialog
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawTextA
DrawMenuBar
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DialogBoxParamA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefWindowProcA
DefMDIChildProcW
DefFrameProcW
CreateWindowExW
CreatePopupMenu
CreateMenu
CreateIcon
CreateDialogParamA
CreateAcceleratorTableW
CopyRect
CopyIcon
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharUpperBuffW
CharNextW
CharLowerW
CharLowerBuffW
CallWindowProcW
CallNextHookEx
BeginPaint
GetWindowLongW
RedrawWindow
PtInRect
GetSystemMetrics
PostQuitMessage
EnumThreadWindows
GetKeyboardLayoutList
gdi32
DeleteDC
DeleteEnhMetaFile
DeleteObject
Ellipse
CreateSolidBrush
EndPage
EnumFontFamiliesExW
EnumFontsW
ExcludeClipRect
ExtFloodFill
ExtTextOutW
FrameRgn
GdiFlush
GetBitmapBits
GetBrushOrgEx
GetClipBox
GetCurrentObject
GetCurrentPositionEx
GetDCOrgEx
GetDeviceCaps
GetDIBColorTable
GetDIBits
CreateRectRgnIndirect
GetEnhMetaFileDescriptionW
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetMapMode
GetNearestPaletteIndex
GetObjectW
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointW
GetTextMetricsW
GetWindowOrgEx
GetWinMetaFileBits
IntersectClipRect
LineTo
EndDoc
MaskBlt
MoveToEx
PatBlt
Pie
PlayEnhMetaFile
PolyBezierTo
Polygon
Polyline
RealizePalette
Rectangle
RectVisible
ResizePalette
RestoreDC
RoundRect
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetDIBits
SetEnhMetaFileBits
SetMapMode
SetPixel
SetROP2
SetStretchBltMode
SetTextColor
SetViewportOrgEx
SetWindowOrgEx
SetWinMetaFileBits
StartDocW
StartPage
StretchBlt
StretchDIBits
TextOutA
TranslateCharsetInfo
UnrealizeObject
CreatePenIndirect
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateFontIndirectA
CreateFontA
CreateDIBSection
CreateDIBitmap
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
CombineRgn
Chord
GetEnhMetaFileBits
BitBlt
winspool.drv
EnumPrintersW
DocumentPropertiesW
ClosePrinter
OpenPrinterW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegUnLoadKeyW
RegQueryInfoKeyW
RegOpenKeyExW
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegEnumKeyExA
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegConnectRegistryW
OpenProcessToken
LookupPrivilegeNameW
LookupPrivilegeNameA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueExW
RegReplaceKeyW
RegRestoreKeyW
RegSaveKeyW
RegSetValueExW
shell32
ShellExecuteExW
ShellExecuteA
ShellExecuteW
ole32
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
OleUninitialize
OleInitialize
oleaut32
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPtrOfIndex
SysAllocStringLen
SysFreeString
SysReAllocStringLen
VariantChangeType
VariantClear
VariantCopy
VariantInit
SafeArrayCreate
GetErrorInfo
ws2_32
socket
shutdown
WSAAsyncSelect
ioctlsocket
inet_addr
htons
WSACleanup
WSAGetLastError
WSAStartup
recv
send
closesocket
connect
gethostbyname
gethostname
Sections
.text Size: 444KB - Virtual size: 441KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 14.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 30B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rgu85 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE