ModuleInfo
Static task
static1
Behavioral task
behavioral1
Sample
c39ddf1bd001c164d28f3edbcd7f0638af66b51a42868013f4ff960531413dc8.exe
Resource
win7-20220901-en
General
-
Target
c39ddf1bd001c164d28f3edbcd7f0638af66b51a42868013f4ff960531413dc8
-
Size
304KB
-
MD5
15274bfd27558646172c80c9a05817bc
-
SHA1
59f04249165a4bf03386fdf3b6af3417278a5cc0
-
SHA256
c39ddf1bd001c164d28f3edbcd7f0638af66b51a42868013f4ff960531413dc8
-
SHA512
69e17499ede543ef06fe3caf34eb3b221193b4e428976537103835ee8ca45c3699df50156ac8bcb5368d8334bb636303dad1171e305af1017476a467fabafbbf
-
SSDEEP
6144:lmsyxm4EtfLVsSs/LORYke8Qv8KH6NuGiB593MOCxTmgPLPE4jE:LywBtfLV2wW8o6M5Z2F5zPXQ
Malware Config
Signatures
Files
-
c39ddf1bd001c164d28f3edbcd7f0638af66b51a42868013f4ff960531413dc8.exe windows x86
feb54801abb76affa39ebdfd730fb7c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
WaitForSingleObject
GlobalHandle
GlobalUnlock
GlobalFree
FreeLibrary
GlobalAlloc
GlobalLock
GetTempPathA
GetTempFileNameA
CloseHandle
DeleteFileA
SetFilePointer
MulDiv
WriteFile
ReadFile
CreateFileA
GetLastError
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapSize
GetStringTypeW
GetStringTypeA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
VirtualQuery
InterlockedExchange
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
HeapReAlloc
ExitThread
GetCurrentThreadId
CreateThread
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
RtlUnwind
gdi32
SetMiterLimit
SetTextAlign
SetTextJustification
SetTextCharacterExtra
ExtTextOutW
SetBkMode
StrokeAndFillPath
StrokePath
FillPath
GetWindowOrgEx
BeginPath
EndPath
GetROP2
GetBkMode
PolyDraw
PatBlt
PolylineTo
PolyBezierTo
CloseFigure
SetBrushOrgEx
GetObjectW
SelectObject
ExtCreatePen
SetROP2
DeleteObject
RestoreDC
LineTo
MoveToEx
SaveDC
CombineRgn
CreateRectRgnIndirect
LPtoDP
SelectClipPath
SetPolyFillMode
SelectClipRgn
CreatePen
DeleteDC
StretchDIBits
BitBlt
SetBkColor
SetTextColor
SetDIBits
CreateBitmap
SetStretchBltMode
MaskBlt
CreateCompatibleDC
SetColorAdjustment
GetColorAdjustment
ExtEscape
StartDocW
SetICMMode
SetAbortProc
CreateDCW
GetOutlineTextMetricsW
GetTextFaceW
GetTextMetricsW
CreateFontIndirectW
RemoveFontResourceA
EnumFontsW
GetDeviceCaps
AddFontResourceA
CreateScalableFontResourceA
SetGraphicsMode
ModifyWorldTransform
SetWorldTransform
EndPage
EndDoc
ResetDCW
StartPage
CreateICW
GetWindowExtEx
GetViewportExtEx
SetViewportExtEx
SetViewportOrgEx
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
SetMapMode
CreateSolidBrush
GetStockObject
CreateHatchBrush
CreateDIBPatternBrushPt
GetDIBits
user32
CreateWindowExW
SendMessageW
GetMessageW
TranslateMessage
DispatchMessageW
ShowWindow
UpdateWindow
LoadIconW
LoadImageW
RegisterClassExW
DefWindowProcW
DestroyWindow
PostQuitMessage
MessageBoxW
LoadStringW
wsprintfW
PostMessageW
SetRect
LoadCursorW
msimg32
GradientFill
Exports
Exports
Sections
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE