Static task
static1
Behavioral task
behavioral1
Sample
82931b9bd63dee2c36e0e4fb335529957631e6cf73209304ba4837e0cf3a42a3.exe
Resource
win7-20221111-en
General
-
Target
82931b9bd63dee2c36e0e4fb335529957631e6cf73209304ba4837e0cf3a42a3
-
Size
311KB
-
MD5
0685fe03742d81ae43fe070f7a24a580
-
SHA1
286e7f96b17b92ed03d0a4b7c684e4543446bd72
-
SHA256
82931b9bd63dee2c36e0e4fb335529957631e6cf73209304ba4837e0cf3a42a3
-
SHA512
d920c32042ba91cda5a7c14b1533651315eb5ff968f13ea9a54b5d0184a6796af1faedf4c87b81c47b63bbf1fd26e8fd379ff8478cf010537b5fff9fa26cb549
-
SSDEEP
6144:Uw28Or+dhpXqunqLSpR9bsHNEoMfZrxAJtlT84N1zX:Xc9uh9Qt3U9AJ7T84zX
Malware Config
Signatures
Files
-
82931b9bd63dee2c36e0e4fb335529957631e6cf73209304ba4837e0cf3a42a3.exe windows x86
926f99aac438de606bd7403be14c723e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetGetConnectedState
InternetCheckConnectionW
kernel32
GetFileAttributesW
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
ExitProcess
HeapReAlloc
HeapSize
RtlUnwind
RaiseException
ExitThread
CreateThread
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetErrorMode
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringW
GetThreadLocale
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetCurrentProcessId
lstrlenA
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
InterlockedExchange
GlobalAlloc
FormatMessageW
LocalFree
MulDiv
GetModuleHandleA
CreateEventW
SuspendThread
SetEvent
InterlockedDecrement
GetModuleFileNameW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
MultiByteToWideChar
GetVersionExA
SetLastError
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
WideCharToMultiByte
GetVersionExW
GetLocaleInfoW
GetCurrentProcess
LoadLibraryW
GetProcAddress
GetModuleHandleW
lstrlenW
Sleep
FreeLibrary
LoadLibraryExW
GetLastError
CreateMutexW
CloseHandle
ReleaseMutex
GetExitCodeThread
WaitForSingleObject
SetThreadPriority
ResumeThread
FindResourceW
LoadResource
LockResource
SizeofResource
VirtualFree
user32
DestroyMenu
GetSysColorBrush
GetWindowThreadProcessId
SetCursor
PostQuitMessage
ShowWindow
SetWindowTextW
IsDialogMessageW
EndPaint
BeginPaint
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
UnregisterClassA
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextW
DispatchMessageW
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
IsWindowVisible
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
PtInRect
GetDlgCtrlID
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
SendDlgItemMessageA
ReleaseDC
GetDC
CopyRect
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
MessageBoxW
LoadCursorW
DefWindowProcW
IsWindow
SetForegroundWindow
GetLastActivePopup
FindWindowW
UnregisterClassW
EnableWindow
PostMessageW
SendMessageW
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
LoadIconW
GetForegroundWindow
SendDlgItemMessageW
gdi32
DeleteDC
PtVisible
GetStockObject
GetDeviceCaps
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
DeleteObject
SetMapMode
RestoreDC
SaveDC
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
RectVisible
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegEnumKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegCloseKey
RegDeleteKeyW
RegOpenKeyW
RegQueryValueExW
RegEnumValueW
RegOpenKeyExW
comctl32
ord17
shlwapi
PathFindExtensionW
PathFileExistsW
PathFindFileNameW
PathRemoveArgsW
PathUnquoteSpacesW
ole32
CLSIDFromProgID
CoTaskMemFree
CoInitializeEx
CoUninitialize
StringFromCLSID
CoCreateInstance
oleaut32
SafeArrayGetUBound
VariantChangeType
SafeArrayUnlock
SafeArrayLock
SysFreeString
SysAllocStringLen
SysAllocString
VariantClear
VariantInit
SafeArrayDestroy
SafeArrayGetVartype
SafeArrayCopy
SafeArrayGetLBound
SafeArrayCreate
Sections
.text Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE