Static task
static1
Behavioral task
behavioral1
Sample
d45b1b951c3cdef33ab0c48f0f400143fea40a470966caa1025b3d27103d1b86.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d45b1b951c3cdef33ab0c48f0f400143fea40a470966caa1025b3d27103d1b86.exe
Resource
win10v2004-20220812-en
General
-
Target
d45b1b951c3cdef33ab0c48f0f400143fea40a470966caa1025b3d27103d1b86
-
Size
484KB
-
MD5
7b7b17fbc2570ab97e6f187257b3827e
-
SHA1
4504041fd700a55f0a9083067f849d6d158e1f7e
-
SHA256
d45b1b951c3cdef33ab0c48f0f400143fea40a470966caa1025b3d27103d1b86
-
SHA512
ac0aae51799961f306e02d98e6848617b2a99a63bc00a2b3709148c88dfefe07df82f5391a3aa609b176fb2072c17fdec79cbc2096c6186784dd67e46f83b456
-
SSDEEP
12288:n5Ry3pNyG9d1paU5cRFGRq0paj44rxq2NgpPud+:n5RMwGpIJNgpPK
Malware Config
Signatures
Files
-
d45b1b951c3cdef33ab0c48f0f400143fea40a470966caa1025b3d27103d1b86.exe windows x86
783ded96d36b77140332b0faa1882b26
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mpr
WNetOpenEnumA
WNetEnumResourceA
WNetCloseEnum
kernel32
HeapAlloc
ExitProcess
GetStartupInfoA
RtlUnwind
GetTickCount
CreateThread
RaiseException
HeapFree
GetCommandLineA
GetLocalTime
GetACP
HeapSize
HeapReAlloc
ExitThread
LCMapStringW
SetHandleCount
GetStdHandle
GetTimeZoneInformation
SetStdHandle
GetSystemTime
LCMapStringA
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileType
lstrcpynA
GetFullPathNameA
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetErrorMode
GetFileTime
GetOEMCP
GetFileSize
GetFileAttributesA
GetProcessVersion
GetCPInfo
SizeofResource
TlsGetValue
GetCurrentDirectoryA
GlobalReAlloc
LocalReAlloc
TlsSetValue
TlsAlloc
TlsFree
GlobalHandle
LeaveCriticalSection
LocalAlloc
EnterCriticalSection
GlobalFlags
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
HeapDestroy
DeleteFileA
WritePrivateProfileStringA
CopyFileA
lstrcpyA
lstrcatA
lstrlenA
FindFirstFileA
FindNextFileA
FindClose
SetCurrentDirectoryA
GetDriveTypeA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GetSystemDirectoryA
WinExec
Sleep
GetComputerNameA
GetProcAddress
GetModuleFileNameA
FreeLibrary
GetPrivateProfileStringA
LoadLibraryA
CreateSemaphoreA
GetLastError
CloseHandle
GetThreadLocale
GetVolumeInformationA
GetProfileStringA
CreateDirectoryA
RemoveDirectoryA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
CreateEventA
SetThreadPriority
SetEvent
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
MulDiv
SetLastError
FormatMessageA
LocalFree
SuspendThread
ResumeThread
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
MoveFileExA
GetTempPathA
WideCharToMultiByte
OpenProcess
TerminateProcess
GetVersionExA
DosDateTimeToFileTime
CreateFileA
SetFileTime
GetModuleHandleA
FindResourceA
LoadResource
LockResource
_lopen
_lread
_lclose
GlobalLock
GlobalUnlock
HeapCreate
SetEnvironmentVariableA
user32
PostThreadMessageA
RegisterClipboardFormatA
GetSysColorBrush
GetDesktopWindow
GetClassNameA
DestroyMenu
GetAsyncKeyState
LoadStringA
CharUpperA
wvsprintfA
MapWindowPoints
AdjustWindowRectEx
GetTopWindow
IsChild
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
SetFocus
ShowWindow
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
SetWindowContextHelpId
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
GetMenuState
CharNextA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ScreenToClient
WaitForInputIdle
SetWindowPos
PostQuitMessage
PostMessageA
LoadMenuA
GetSubMenu
GetCursorPos
TrackPopupMenu
LoadCursorA
CopyIcon
SetWindowLongA
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
GetDlgCtrlID
MoveWindow
ModifyMenuA
UpdateWindow
PtInRect
ReleaseDC
KillTimer
SetTimer
MessageBoxA
GetWindowLongA
WindowFromPoint
GetParent
SetCapture
GetCapture
GetActiveWindow
RedrawWindow
ClientToScreen
DrawFocusRect
DrawStateA
FrameRect
FillRect
OffsetRect
InflateRect
CopyRect
SetCursor
GetSysColor
ReleaseCapture
GetIconInfo
LoadImageA
DestroyIcon
DestroyCursor
LoadIconA
EnableWindow
FindWindowA
InvalidateRect
GetDC
GetClientRect
GetWindowRect
DrawIcon
LoadBitmapA
SendMessageA
GetSystemMetrics
SetForegroundWindow
IsWindowVisible
IsIconic
IsWindow
EnumWindows
GetWindow
MapDialogRect
RemovePropA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
gdi32
StretchBlt
CreateCompatibleDC
GetObjectA
GetClipBox
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
GetViewportExtEx
SetWindowExtEx
GetWindowExtEx
CreatePen
CreateSolidBrush
PtVisible
RectVisible
ExtTextOutA
Escape
PatBlt
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
CreateDIBitmap
GetTextExtentPointA
ScaleViewportExtEx
SetViewportExtEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkMode
SelectPalette
SaveDC
CreateFontA
RestoreDC
GetTextExtentPoint32A
GetPixel
SetBkColor
CreatePalette
CreateBitmap
RealizePalette
GetDeviceCaps
GetTextMetricsA
GetCurrentObject
StartDocA
StartPage
DeleteDC
EndPage
EndDoc
TextOutA
SelectObject
CreateCompatibleBitmap
BitBlt
GetStockObject
DeleteObject
CreateFontIndirectA
OffsetViewportOrgEx
comdlg32
GetSaveFileNameA
GetFileTitleA
PrintDlgA
GetOpenFileNameA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegQueryValueExA
RegCloseKey
RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegDeleteKeyA
shell32
SHFormatDrive
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
comctl32
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_LoadImageA
ImageList_Destroy
ord17
PropertySheetA
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc
olepro32
ord253
oleaut32
SysStringLen
SysFreeString
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
Sections
.text Size: 376KB - Virtual size: 374KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ