Static task
static1
Behavioral task
behavioral1
Sample
0567c67c4bf2c614db1cecba5e7a3cb8f06b7842e437168c7a92340e67fc95ef.exe
Resource
win7-20221111-en
General
-
Target
0567c67c4bf2c614db1cecba5e7a3cb8f06b7842e437168c7a92340e67fc95ef
-
Size
233KB
-
MD5
17a57caddad766085d2d3f414982ede0
-
SHA1
208eb5b7118cc2a7f3bac12e4c21564c3f2ccf0e
-
SHA256
0567c67c4bf2c614db1cecba5e7a3cb8f06b7842e437168c7a92340e67fc95ef
-
SHA512
6ed3652f3d1cb695754d58ef2523f502d3e5fda0c1c29d4ed3e439be02c481eb053e2acd164ac7ba128a1ccc7097aadfb1ee75f367846d1a0a187c0543b2a478
-
SSDEEP
6144:IKaCc1JbUsbb63czLvyep6hJiVLFsa0Ye+lR0y3r/7:IKaCoJySTyI6hJiVdlbj7
Malware Config
Signatures
Files
-
0567c67c4bf2c614db1cecba5e7a3cb8f06b7842e437168c7a92340e67fc95ef.exe windows x86
2e5b5f7190142daab85377ca348bb20e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetGuiResources
SetCaretPos
ArrangeIconicWindows
GetMenuItemInfoA
UnionRect
DlgDirSelectComboBoxExA
CreateIconIndirect
FlashWindowEx
GetMenuState
DdeConnect
GetWindowLongA
LoadBitmapA
SetMenu
SetWindowLongA
GetClientRect
IsWindowVisible
GetWindowRect
ScreenToClient
WindowFromPoint
ClientToScreen
RegisterWindowMessageA
CopyRect
DrawTextExA
PtInRect
CheckMenuItem
OffsetRect
SetTimer
DefWindowProcA
PostMessageA
UpdateWindow
UnregisterClassA
SetWindowRgn
IsWindow
IsRectEmpty
wsprintfA
CreateWindowExA
RegisterClassA
SetRect
DrawIcon
GetIconInfo
SetWindowTextA
TranslateMessage
PeekMessageA
DispatchMessageA
TrackPopupMenu
GetCursorPos
ReleaseCapture
SetCapture
SetCursor
InvalidateRect
LoadCursorA
GetWindowDC
LoadCursorFromFileA
GetCursor
LoadIconA
GetDesktopWindow
GetDC
ReleaseDC
EnableWindow
MessageBoxA
SendMessageA
DestroyWindow
UnregisterHotKey
ShowWindow
RegisterHotKey
GetKeyboardType
RegisterClassExA
PostQuitMessage
MessageBeep
InsertMenuItemA
GetWindowTextLengthA
GetMessageA
DrawMenuBar
CreatePopupMenu
CreateMenu
shell32
DragFinish
DragQueryFileW
Shell_NotifyIconA
DuplicateIcon
Shell_NotifyIconW
DragAcceptFiles
ExtractAssociatedIconW
ShellExecuteA
ole32
OleMetafilePictFromIconAndLabel
CoMarshalInterface
OleGetAutoConvert
OleGetIconOfClass
GetHGlobalFromStream
CoQueryProxyBlanket
advapi32
PrivilegedServiceAuditAlarmW
RegOpenKeyExA
IsValidSid
LookupPrivilegeNameW
GetLengthSid
ReadEventLogA
SetThreadToken
RegCloseKey
RegUnLoadKeyW
SetTokenInformation
AccessCheckByTypeResultListAndAuditAlarmW
InitializeSid
RegQueryValueExA
gdi32
CreateFontA
GetStockObject
ws2_32
getprotobyname
sendto
closesocket
getservbyname
getservbyport
recvfrom
ntohs
mpr
WNetConnectionDialog
WNetGetConnectionA
WNetGetLastErrorW
WNetDisconnectDialog
WNetGetProviderNameA
WNetGetResourceInformationA
winmm
waveInReset
waveOutGetErrorTextA
mmioFlush
midiInStop
PlaySoundA
kernel32
TlsFree
TlsAlloc
GetModuleHandleW
HeapFree
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
DecodePointer
GetStartupInfoW
HeapSetInformation
GetSystemTimeAsFileTime
InterlockedIncrement
InterlockedDecrement
GetDateFormatA
GetTimeFormatA
GetLongPathNameA
GlobalAddAtomW
SetNamedPipeHandleState
SetFileTime
WaitForSingleObject
WaitForMultipleObjects
GlobalUnlock
lstrcpyA
GlobalLock
GlobalHandle
WinExec
OpenFile
GlobalAlloc
LoadLibraryA
GetWindowsDirectoryA
SetLastError
MulDiv
FreeLibrary
DeleteFileA
SetThreadPriority
CreateFileA
CopyFileA
Sleep
GetModuleFileNameA
lstrlenA
FindClose
FindFirstFileA
GetCurrentThreadId
GetVersionExA
GetModuleHandleA
GetStartupInfoA
GlobalFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetTickCount
QueryPerformanceCounter
GetVersion
GetThreadLocale
GetLocaleInfoA
GetCommandLineA
SetEnvironmentVariableA
CompareStringW
CreateFileW
WriteConsoleW
HeapSize
SetStdHandle
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
GetTimeZoneInformation
HeapAlloc
GetUserDefaultLCID
GetLocaleInfoW
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
MultiByteToWideChar
GetModuleFileNameW
GetProcAddress
LCMapStringW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LoadLibraryW
HeapReAlloc
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
ReadFile
GetCurrentProcessId
HeapCreate
GetEnvironmentStringsW
CreateThread
GetLastError
CreateEventA
SetEvent
CloseHandle
FreeEnvironmentStringsW
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 235.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE