Static task
static1
Behavioral task
behavioral1
Sample
69226a8202eb2e1dae8b7008a56b5171794704874151af1f7e6496ddbb4c5319.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
69226a8202eb2e1dae8b7008a56b5171794704874151af1f7e6496ddbb4c5319.exe
Resource
win10v2004-20220812-en
General
-
Target
69226a8202eb2e1dae8b7008a56b5171794704874151af1f7e6496ddbb4c5319
-
Size
166KB
-
MD5
49705527625e593fdfcf690383e5c070
-
SHA1
9507ca861de049c52f1713772b4d7c288474b025
-
SHA256
69226a8202eb2e1dae8b7008a56b5171794704874151af1f7e6496ddbb4c5319
-
SHA512
b199d7c29f739b20116323b3b0ad89c3c7cb15efb3f0672bcfad24ff7a35687305c29647e26cd8f4ddc725dd887e5f9a8760f3d1e104a1e2f81f6a494b2e229c
-
SSDEEP
3072:t//BHZLliPkCAJH9Vpqr8CGEzOLgtJLzT3DBdslML2hxc19A7kf+p+SZypbPhjYH:t/LrCkHxYiEiLQzT3DklQXMQWp+S8/hc
Malware Config
Signatures
Files
-
69226a8202eb2e1dae8b7008a56b5171794704874151af1f7e6496ddbb4c5319.exe windows x86
2ead6f8ae8e3c3ac9e13199682548981
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
uxtheme
GetThemeSysColor
GetThemeSysFont
IsAppThemed
GetThemeString
GetThemeBackgroundContentRect
SetThemeAppProperties
GetThemeMetric
GetThemeRect
GetThemeDocumentationProperty
GetThemeBool
CloseThemeData
GetThemePropertyOrigin
IsThemeBackgroundPartiallyTransparent
GetThemeBackgroundRegion
kernel32
LocalAlloc
InterlockedExchange
DeactivateActCtx
GetDriveTypeA
_lread
GetVolumePathNameW
WaitForSingleObject
SetConsoleIcon
GlobalUnlock
SetThreadContext
GetOEMCP
CancelWaitableTimer
SetConsoleInputExeNameA
GetThreadPriority
lstrcatA
LoadLibraryW
ZombifyActCtx
HeapReAlloc
IsProcessorFeaturePresent
RestoreLastError
GetPrivateProfileStringA
CreateSocketHandle
_lopen
GetUserGeoID
ReplaceFile
GetComPlusPackageInstallStatus
SetConsoleCursorMode
ShowConsoleCursor
SetFirmwareEnvironmentVariableW
LoadLibraryExW
GetConsoleCommandHistoryW
TerminateThread
LocalHandle
EnumerateLocalComputerNamesW
GetSystemDefaultLCID
RemoveDirectoryA
SetUserGeoID
CompareStringW
GetStartupInfoW
lstrcpynA
SetCriticalSectionSpinCount
LoadLibraryExA
GetDateFormatW
IsValidCodePage
gdi32
DdEntry20
MaskBlt
GetCurrentObject
SetWindowExtEx
ScaleWindowExtEx
DdEntry32
DdEntry55
GdiAddFontResourceW
SetBkColor
GdiConvertToDevmodeW
XFORMOBJ_bApplyXform
SetViewportOrgEx
DdEntry4
SetDCBrushColor
CreateFontIndirectExW
EngGetCurrentCodePage
GdiCreateLocalEnhMetaFile
PolyBezier
StartDocW
GetCharABCWidthsFloatW
CopyMetaFileA
GetTextExtentPointI
StretchDIBits
GetTextExtentExPointI
GetCharABCWidthsW
GetColorSpace
SetLayout
HT_Get8BPPFormatPalette
OffsetClipRgn
EnumICMProfilesW
GdiDeleteSpoolFileHandle
GetFontData
GetFontLanguageInfo
DdEntry5
EngGetPrinterDataFileName
RectInRegion
advapi32
RegisterServiceCtrlHandlerExW
SystemFunction025
FlushTraceA
DeleteAce
ElfClearEventLogFileA
GetNamedSecurityInfoExW
DeleteService
WmiCloseBlock
SystemFunction024
LookupAccountNameA
CredEnumerateA
CredWriteA
CredRenameA
LsaCreateTrustedDomain
SystemFunction027
CryptSetProviderW
BuildTrusteeWithObjectsAndNameW
GetEventLogInformation
CredpEncodeCredential
GetPrivateObjectSecurity
LsaICLookupSids
CredIsMarshaledCredentialA
ole32
HENHMETAFILE_UserMarshal
CoUnloadingWOW
StgOpenStorage
OleCreateFromFile
CoUnmarshalHresult
CoGetInterceptorFromTypeInfo
OleGetClipboard
CoGetStdMarshalEx
CoSetProxyBlanket
CreateStdProgressIndicator
CoGetClassObject
ReadClassStm
CLIPFORMAT_UserFree
CoRevertToSelf
UtGetDvtd32Info
CoCreateFreeThreadedMarshaler
CoSwitchCallContext
HGLOBAL_UserUnmarshal
OleGetIconOfClass
CLSIDFromProgIDEx
OleFlushClipboard
OleLoad
StringFromCLSID
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ