Static task
static1
Behavioral task
behavioral1
Sample
7ce0a29bea07150db52d534a08dacf62dc804fd0f389512d22c583790884e895.exe
Resource
win7-20220812-en
General
-
Target
7ce0a29bea07150db52d534a08dacf62dc804fd0f389512d22c583790884e895
-
Size
953KB
-
MD5
09af42677c020ab10e8aafb0209d0770
-
SHA1
43261c0b65c62229375960ffc4572ffd18ec73a4
-
SHA256
7ce0a29bea07150db52d534a08dacf62dc804fd0f389512d22c583790884e895
-
SHA512
bacf7ee8c7442b25bca05ab27ff50642949bbf587c50ed4eb5e32ea97f84e243e849eda1f9938323ac31da586bd230d4510c71b1e60e7d5e7b03006ac6249ed0
-
SSDEEP
12288:nWYjL/nTUNGi5z9qgDwyR61bJDr2byDMjx6U648spWjCw00uNkp6NvlDUfCWvJ:WY//nYQi5z9qgtA3DMjD648spWqNkMKJ
Malware Config
Signatures
Files
-
7ce0a29bea07150db52d534a08dacf62dc804fd0f389512d22c583790884e895.exe windows x86
0dd4a28a8f29c053bfadaf4549657d0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileW
FindClose
lstrlenA
MoveFileW
MoveFileExW
GetVersion
FreeLibrary
GetProcAddress
CreateThread
FindNextFileW
GetFileSize
GetFullPathNameW
LoadLibraryW
WriteConsoleW
GetStdHandle
VirtualQueryEx
SetUnhandledExceptionFilter
GetThreadSelectorEntry
CreateFileA
SetFilePointer
ReadProcessMemory
VirtualQuery
GetCurrentThread
GetModuleFileNameA
SetEvent
CreateEventW
lstrcpynW
GetLogicalDrives
GetDriveTypeW
DeviceIoControl
MapViewOfFileEx
OpenMutexW
GetCPInfo
IsDBCSLeadByte
GetFileSizeEx
SetEndOfFile
GetCurrentDirectoryW
CreateDirectoryW
GetFileType
GetACP
ReleaseMutex
FileTimeToSystemTime
WriteFile
TerminateThread
IsBadReadPtr
OutputDebugStringW
ResetEvent
WaitForSingleObject
CompareStringW
CompareStringA
GetDriveTypeA
GetLocaleInfoW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentDirectoryA
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetHandleCount
HeapCreate
IsValidCodePage
GetOEMCP
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
GetModuleHandleA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetStartupInfoA
GetCommandLineA
FileTimeToLocalFileTime
ExitThread
GetSystemTimeAsFileTime
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
HeapSize
HeapReAlloc
HeapDestroy
GetThreadLocale
GetLocaleInfoA
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetVersionExA
CopyFileW
GetFileAttributesW
SetFileAttributesW
MultiByteToWideChar
GetModuleFileNameW
MulDiv
GlobalLock
GlobalUnlock
lstrcmpW
SizeofResource
GetCommandLineW
FindResourceW
GetVersionExW
DeleteCriticalSection
LeaveCriticalSection
ProcessIdToSessionId
GetTempFileNameW
GetCurrentProcessId
GetTempPathW
GlobalFree
EnterCriticalSection
GetPrivateProfileIntW
GetCurrentThreadId
WritePrivateProfileStringW
GlobalAlloc
InterlockedIncrement
OpenFileMappingW
CreateMutexW
GetPrivateProfileStringW
LocalFree
GetCurrentProcess
lstrlenW
ReadFile
DeleteFileW
RaiseException
SetLastError
CreateFileW
WideCharToMultiByte
InterlockedDecrement
UnmapViewOfFile
FlushInstructionCache
CloseHandle
Sleep
GetTickCount
FindResourceExW
MapViewOfFile
SystemTimeToFileTime
GetLocalTime
LoadResource
CreateFileMappingW
InitializeCriticalSection
GetLastError
LockResource
SetEnvironmentVariableA
user32
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
CreateDialogParamW
SetWindowLongW
IsWindow
LoadImageW
GetWindow
GetMonitorInfoW
MonitorFromPoint
DrawIconEx
DrawTextW
OpenInputDesktop
GetUserObjectInformationW
CloseDesktop
GetThreadDesktop
GetWindowTextW
GetGUIThreadInfo
SetWindowRgn
GetWindowThreadProcessId
SetCursor
GetCursorPos
DestroyIcon
SetForegroundWindow
ShowWindow
LoadBitmapW
PtInRect
GetPropW
AdjustWindowRectEx
GetMenu
DrawEdge
InflateRect
GetSystemMetrics
InvalidateRect
LoadCursorW
CreateAcceleratorTableW
InvalidateRgn
CharNextW
UnregisterClassA
GetDesktopWindow
SetFocus
GetFocus
CallWindowProcW
CreateWindowExW
IsChild
GetSysColor
GetClassNameW
ReleaseCapture
SetCapture
GetKeyState
GetAsyncKeyState
SetWindowPos
EndPaint
FillRect
GetWindowLongW
ReleaseDC
MoveWindow
BeginPaint
GetDC
DestroyWindow
ScreenToClient
DefWindowProcW
RegisterClassExW
GetParent
GetClassInfoExW
TrackMouseEvent
UnregisterClassW
UpdateLayeredWindow
IsWindowEnabled
MessageBoxW
DrawFocusRect
GetDlgCtrlID
UpdateWindow
GetCapture
EnableMenuItem
SystemParametersInfoW
GetSystemMenu
SetTimer
EnableWindow
PostMessageW
IsWindowVisible
SetWindowTextW
KillTimer
IsDialogMessageW
GetWindowRect
PostQuitMessage
DestroyAcceleratorTable
GetDlgItem
SendMessageW
GetClientRect
ClientToScreen
RedrawWindow
gdi32
CreateFontW
StretchBlt
CreateRoundRectRgn
SetBkMode
BitBlt
CreateFontIndirectW
PatBlt
Rectangle
CreateDIBSection
DeleteDC
GetStockObject
GetObjectW
CreateCompatibleBitmap
CreateSolidBrush
DeleteObject
SetTextColor
GetDeviceCaps
SelectObject
CreateCompatibleDC
advapi32
ConvertSidToStringSidW
LookupAccountNameW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
IsTextUnicode
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityInfo
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyW
shell32
Shell_NotifyIconW
SHFileOperationW
SHGetFolderPathW
ShellExecuteExW
ShellExecuteW
SHGetSpecialFolderPathW
SHCreateDirectoryExW
ole32
CoTaskMemFree
CreateILockBytesOnHGlobal
StgOpenStorage
StgOpenStorageOnILockBytes
StgCreateDocfile
CoUninitialize
StringFromGUID2
CoCreateGuid
CLSIDFromString
CoTaskMemAlloc
CoGetClassObject
CreateStreamOnHGlobal
OleLockRunning
CoInitialize
OleInitialize
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoInitializeEx
CoMarshalInterThreadInterfaceInStream
CoLoadLibrary
CoFreeLibrary
OleUninitialize
CLSIDFromProgID
oleaut32
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
SysAllocString
SysStringByteLen
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
SysStringLen
VariantInit
SysAllocStringByteLen
shlwapi
PathFileExistsW
wnsprintfW
comctl32
_TrackMouseEvent
ImageList_Create
ImageList_Draw
ImageList_ReplaceIcon
ImageList_Destroy
ord17
ImageList_GetIconSize
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
wininet
InternetQueryOptionA
ws2_32
shutdown
sendto
inet_addr
inet_ntoa
htonl
closesocket
WSACancelAsyncRequest
setsockopt
WSACleanup
ntohs
recv
send
WSAAsyncGetHostByName
connect
WSAAsyncSelect
socket
htons
WSAStartup
ntohl
WSAGetLastError
gethostbyname
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
netapi32
Netbios
NetApiBufferFree
NetWkstaTransportEnum
Sections
.text Size: 604KB - Virtual size: 603KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 140KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 48KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE