Static task
static1
Behavioral task
behavioral1
Sample
11fab31129068204d4179494890aa873a737443b11c2ef3f9b573ab9cd72d4bd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
11fab31129068204d4179494890aa873a737443b11c2ef3f9b573ab9cd72d4bd.exe
Resource
win10v2004-20221111-en
General
-
Target
11fab31129068204d4179494890aa873a737443b11c2ef3f9b573ab9cd72d4bd
-
Size
668KB
-
MD5
1b759e805f8370cd8214e044b791c340
-
SHA1
650874370662d161e57f98546e17f57cee8e1c11
-
SHA256
11fab31129068204d4179494890aa873a737443b11c2ef3f9b573ab9cd72d4bd
-
SHA512
4768ebb72af2400a6bff8dfbc2ec1faa80be5bf034503b8100a520fe41bfd1336610952ebce76792164dddb6358cfa32b7c92c106b21acd06ff6c862a07f5674
-
SSDEEP
12288:A8tPdBrkoAE/ZZt3/P1WOf5b693UFULo0E7kgIfPYVDLznkL0sGtHfYMPaGx:ACPdrd/P1We57F0vbYVDJdYMPaGx
Malware Config
Signatures
Files
-
11fab31129068204d4179494890aa873a737443b11c2ef3f9b573ab9cd72d4bd.exe windows x86
4253fd400478915d0b36b600d165b84b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
PlaySoundA
ws2_32
WSAStartup
ntohl
ntohs
htonl
htons
WSACleanup
atl
ord18
ord20
ord58
ord21
ord16
ord32
ord30
ord17
ord23
ord57
kernel32
CreateThread
GetModuleFileNameA
LoadLibraryA
SetEvent
InterlockedDecrement
CloseHandle
WaitForSingleObject
OpenMutexA
CreateEventA
CreateMutexA
GetCurrentThreadId
lstrcmpiA
GetCommandLineA
HeapCreate
HeapAlloc
GetSystemInfo
DeleteCriticalSection
FreeLibrary
InitializeCriticalSection
InterlockedIncrement
lstrlenW
WideCharToMultiByte
DeleteFileA
FindFirstFileA
GetCurrentDirectoryA
lstrlenA
FindClose
SetCurrentDirectoryA
LoadResource
MultiByteToWideChar
FindResourceA
LeaveCriticalSection
LockResource
EnterCriticalSection
FlushFileBuffers
GetProfileStringA
TlsSetValue
GetStringTypeExA
GlobalReAlloc
lstrcpynA
GetVolumeInformationA
GetFullPathNameA
InterlockedExchange
GetLocaleInfoW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetVersionExA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
SetStdHandle
IsBadCodePtr
Sleep
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetACP
HeapSize
TerminateProcess
RaiseException
GetLocalTime
GetSystemTime
GetTimeZoneInformation
ExitProcess
GetStartupInfoA
HeapReAlloc
HeapFree
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
WritePrivateProfileStringA
SetErrorMode
GetOEMCP
GetCPInfo
TlsGetValue
LocalReAlloc
GlobalFree
FormatMessageA
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
SizeofResource
GlobalFlags
GetProcessVersion
IsBadReadPtr
IsBadWritePtr
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
GetFileAttributesA
GetTickCount
GlobalAlloc
GetCurrentThread
lstrcmpA
GetThreadLocale
LocalFree
SetEndOfFile
MoveFileA
GlobalUnlock
GlobalLock
GetProcAddress
GetModuleHandleA
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcatA
GetVersion
SetLastError
MulDiv
GetLastError
DuplicateHandle
GetCurrentProcess
CreateFileA
ReadFile
WriteFile
SetFilePointer
GetShortPathNameA
LockFile
UnlockFile
user32
GetKeyState
DrawEdge
FillRect
CopyRect
GetWindowLongA
GetActiveWindow
WindowFromPoint
ClientToScreen
GetParent
GetWindowRect
IsWindow
ShowWindow
LoadCursorA
LoadStringA
OffsetRect
SetRect
ReleaseCapture
SetCapture
GetCapture
SetCursor
SetWindowPos
LoadMenuA
EnableMenuItem
ModifyMenuA
GetMenuStringA
GetMenuItemID
GetMenuItemCount
DrawTextA
DrawFocusRect
GetSysColor
GetSysColorBrush
CreatePopupMenu
GetDC
InsertMenuItemA
ReleaseDC
GetCursorPos
GetDlgItem
SendDlgItemMessageA
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
GetDlgCtrlID
SetWindowLongA
MoveWindow
IsWindowEnabled
SetFocus
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
EndDialog
GetNextDlgTabItem
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
RegisterWindowMessageA
LoadIconA
UpdateWindow
GetForegroundWindow
GetLastActivePopup
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
DefWindowProcA
DrawIconEx
SetWindowPlacement
TrackPopupMenu
GetMenu
RegisterClassA
GetClassInfoA
wsprintfA
WinHelpA
IsChild
MessageBoxA
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetSystemMetrics
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
IsWindowVisible
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
GetFocus
DispatchMessageA
PeekMessageA
MapWindowPoints
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
ValidateRect
TranslateMessage
GetMessageA
CharUpperA
DestroyMenu
PostQuitMessage
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
ShowOwnedPopups
DestroyCursor
InflateRect
CopyAcceleratorTableA
GetClassNameA
DestroyIcon
GetNextDlgGroupItem
MessageBeep
FindWindowA
GetTabbedTextExtentA
GetDCEx
LockWindowUpdate
SetParent
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
SetMenu
CharNextA
SetWindowRgn
EnableWindow
PostMessageA
PostThreadMessageA
GetSubMenu
GetMenuState
CheckMenuItem
RedrawWindow
InvalidateRect
SetTimer
KillTimer
SendMessageA
GetClientRect
PtInRect
LoadBitmapA
SetForegroundWindow
GetWindow
GetScrollRange
UnregisterClassA
advapi32
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
GetFileSecurityA
SetFileSecurityA
RegSetValueA
RegCloseKey
RegQueryValueA
RegQueryValueExA
RegCreateKeyA
RegOpenKeyA
ole32
CoGetClassObject
CLSIDFromString
CoRevokeClassObject
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
CLSIDFromProgID
CoInitialize
CoUninitialize
CoTaskMemFree
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemAlloc
CreateILockBytesOnHGlobal
oleaut32
SysFreeString
QueryPathOfRegTypeLi
SysStringLen
UnRegisterTypeLi
LoadRegTypeLi
VariantInit
CreateErrorInfo
SysAllocStringLen
VariantChangeType
SysAllocString
VariantTimeToSystemTime
VariantCopy
SysAllocStringByteLen
GetErrorInfo
VariantClear
gdi32
CreateDIBitmap
GetTextExtentPointA
CreateDCA
MoveToEx
LineTo
SelectClipRgn
IntersectClipRect
SetWindowExtEx
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
SetWindowOrgEx
SetViewportOrgEx
SetMapMode
OffsetViewportOrgEx
SetROP2
SetPolyFillMode
SetStretchBltMode
RestoreDC
SaveDC
DeleteDC
SetBkColor
StartDocA
GetStockObject
GetClipBox
GetBkColor
GetTextColor
GetWindowOrgEx
GetCharWidthA
GetTextFaceA
GetROP2
GetBkMode
GetTextAlign
GetPolyFillMode
GetStretchBltMode
GetNearestColor
GetTextMetricsA
LPtoDP
CreateFontIndirectA
CreateRectRgnIndirect
CombineRgn
SetRectRgn
GetMapMode
SetTextAlign
SetAbortProc
StartPage
EndPage
EndDoc
AbortDoc
GetViewportOrgEx
DPtoLP
Rectangle
PatBlt
Escape
ExtTextOutA
RectVisible
PtVisible
CreatePen
GetWindowExtEx
GetViewportExtEx
GetCurrentPositionEx
GetDeviceCaps
CreateBitmap
StretchBlt
SetTextColor
SetBkMode
CreateRectRgn
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
CreateRoundRectRgn
GetObjectA
BitBlt
DeleteObject
CreateSolidBrush
GetTextExtentPoint32A
TextOutA
CreatePatternBrush
CreateFontA
comdlg32
GetOpenFileNameA
PrintDlgA
CommDlgExtendedError
GetFileTitleA
GetSaveFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
shell32
SHGetFileInfoA
ShellExecuteA
ExtractIconA
DragFinish
DragQueryFileA
comctl32
_TrackMouseEvent
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Create
ord17
oledlg
ord8
olepro32
ord253
Sections
.text Size: 472KB - Virtual size: 471KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ