Static task
static1
Behavioral task
behavioral1
Sample
d4bafafcaf42a7f4f630c326ca1b4f067712fba001af8711cf731817ad260fc3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d4bafafcaf42a7f4f630c326ca1b4f067712fba001af8711cf731817ad260fc3.exe
Resource
win10v2004-20221111-en
General
-
Target
d4bafafcaf42a7f4f630c326ca1b4f067712fba001af8711cf731817ad260fc3.bin
-
Size
589KB
-
MD5
ab69f73e1c1cabb73bf5653d2f8b4106
-
SHA1
cfea5ca569594779a7bdb0600fce998c1ae5654a
-
SHA256
d4bafafcaf42a7f4f630c326ca1b4f067712fba001af8711cf731817ad260fc3
-
SHA512
532a56540d01926e2214b42ec67055e4b001dd984f873875e7b333fce8f35be79d0064fa8bb52d0a5157459ff04bf7ae1c5218473b845773bbb4b88a0f3e909a
-
SSDEEP
12288:5Fe5cnRHIJ3x0htRTzGT/eomDCZ9iXvr1o67BqTrm1:OqrtRPw/difr1otTrm1
Malware Config
Signatures
Files
-
d4bafafcaf42a7f4f630c326ca1b4f067712fba001af8711cf731817ad260fc3.bin.exe windows x86
763a6c242616919e88c4b498df736a9e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeBeginPeriod
timeEndPeriod
timeGetTime
imm32
ImmAssociateContext
kernel32
GetStdHandle
GetConsoleWindow
SetConsoleTitleA
AllocConsole
GetProcAddress
LoadLibraryA
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GlobalFree
MultiByteToWideChar
WriteFile
CreateFileA
GlobalAlloc
WaitForMultipleObjects
CreateEventA
ReleaseMutex
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
GetModuleHandleA
GlobalUnlock
GlobalLock
SetThreadExecutionState
SetThreadPriority
CreateMutexA
SearchPathA
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
WriteConsoleW
SetStdHandle
HeapReAlloc
LoadLibraryW
InterlockedExchange
HeapSize
GetStringTypeW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
CreateProcessA
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
GetConsoleMode
GetFileType
SetHandleCount
InitializeCriticalSectionAndSpinCount
ReadFile
SetFilePointer
GetModuleFileNameW
ExitProcess
HeapCreate
LCMapStringW
IsProcessorFeaturePresent
SetConsoleWindowInfo
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetLastError
GetModuleHandleW
TlsFree
DecodePointer
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapAlloc
RtlUnwind
CreateThread
GetCurrentThreadId
ExitThread
RaiseException
HeapFree
WideCharToMultiByte
GetLastError
WriteConsoleA
SetConsoleTextAttribute
SetConsoleCtrlHandler
FreeConsole
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
FlushConsoleInputBuffer
PeekConsoleInputA
SetConsoleCursorInfo
SetConsoleCursorPosition
GetConsoleScreenBufferInfo
ReadConsoleInputA
GetConsoleCP
Sleep
GetVersionExA
DeleteFileA
GetFileAttributesA
lstrcpyA
DeleteCriticalSection
InitializeCriticalSection
WaitForSingleObject
CloseHandle
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetLocalTime
GetLongPathNameA
GetCurrentDirectoryA
GetModuleFileNameA
GetFullPathNameA
GetCurrentProcess
SetConsoleScreenBufferSize
GetProcessHeap
CreateFileW
LocalAlloc
QueryPerformanceCounter
user32
BeginPaint
DefWindowProcA
SetWindowLongA
GetWindowLongA
EnableMenuItem
GetMenu
DispatchMessageA
GetMessageA
TranslateMessage
PeekMessageA
FindWindowA
SetMenuItemInfoA
CheckMenuRadioItem
EndPaint
PostMessageA
GetAsyncKeyState
SetWindowPos
SetForegroundWindow
RemoveMenu
GetSystemMenu
ReleaseDC
GetDC
SetRect
CharLowerA
IsWindow
SetCursor
LoadCursorA
CheckMenuItem
GetForegroundWindow
OpenClipboard
LoadIconA
RegisterClassA
CreateWindowExA
UpdateWindow
LoadAcceleratorsA
CopyAcceleratorTableA
CreateAcceleratorTableA
TranslateAcceleratorA
DestroyAcceleratorTable
DestroyWindow
IsIconic
MapVirtualKeyA
DialogBoxParamA
CloseWindow
SystemParametersInfoA
MessageBoxA
SetWindowTextA
SendInput
SendDlgItemMessageA
EndDialog
SetDlgItemTextA
AppendMenuA
GetClipboardData
CloseClipboard
AdjustWindowRect
ChangeDisplaySettingsA
GetClientRect
SetCursorPos
MoveWindow
EnumDisplaySettingsA
LoadBitmapA
GetWindowRect
SendMessageA
ShowWindow
IsMenu
LoadMenuA
DestroyMenu
CreatePopupMenu
SetMenu
GetMenuItemInfoA
GetSubMenu
DrawMenuBar
ModifyMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
DeleteMenu
PostQuitMessage
gdi32
StretchBlt
SelectObject
DeleteObject
CreateDIBSection
CreateCompatibleDC
GetStockObject
TextOutA
GetObjectA
SetBkMode
SetTextColor
GetTextMetricsA
GetDeviceCaps
GetTextExtentPoint32A
BitBlt
SetStretchBltMode
DeleteDC
comdlg32
GetOpenFileNameA
shell32
DragAcceptFiles
DragFinish
DragQueryFileA
ole32
CoUninitialize
CoInitialize
wsock32
socket
recv
WSACleanup
closesocket
shutdown
send
inet_ntoa
accept
listen
setsockopt
bind
htons
htonl
WSAStartup
comctl32
ord17
ord6
msimg32
TransparentBlt
gdiplus
GdipSaveImageToFile
GdiplusStartup
GdiplusShutdown
GdipDisposeImage
GdipGetImageEncoders
GdipCreateBitmapFromHBITMAP
GdipGetImageEncodersSize
d3d9
Direct3DCreate9
avifil32
AVIStreamSetFormat
AVIMakeCompressedStream
AVIFileExit
AVIFileRelease
AVIStreamRelease
AVISaveOptionsFree
AVISaveOptions
AVIFileCreateStreamA
AVIStreamWrite
AVIFileInit
AVIFileOpenA
dsound
ord1
dinput8
DirectInput8Create
Sections
.text Size: 433KB - Virtual size: 433KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ