Static task
static1
Behavioral task
behavioral1
Sample
399c977cbbda44ff28846dee8278bd417b51ecbbd9ec3e8e440d644a7dfd7ca0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
399c977cbbda44ff28846dee8278bd417b51ecbbd9ec3e8e440d644a7dfd7ca0.exe
Resource
win10v2004-20220812-en
General
-
Target
399c977cbbda44ff28846dee8278bd417b51ecbbd9ec3e8e440d644a7dfd7ca0
-
Size
423KB
-
MD5
2dee02ea72e394f2e2087c7735ddd3ea
-
SHA1
9d74d02efa22feb7e990c369de79098ad88cfa72
-
SHA256
399c977cbbda44ff28846dee8278bd417b51ecbbd9ec3e8e440d644a7dfd7ca0
-
SHA512
3351af0732fb482cbba90e59e83cb765816bda287567008060d047c40844db5bee05ecdabae3e3677aedcce2462002935d520e85258c10dafbea6fe242948395
-
SSDEEP
6144:MQ0oyvOlzVmT+MmYcI+uqCusFbyxDrf3ZfqwPL26a9CJ6mqIFn676jd9jDI:fhxzVmEY/gxhiwPL22J6mhFnc6jTf
Malware Config
Signatures
Files
-
399c977cbbda44ff28846dee8278bd417b51ecbbd9ec3e8e440d644a7dfd7ca0.exe windows x86
eb8ef61aa904465d0efef29be6ec387e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedDecrement
QueryPerformanceCounter
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
EncodePointer
GetModuleFileNameW
GetStdHandle
WriteFile
DecodePointer
GetModuleHandleW
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
LCMapStringW
GetStringTypeW
GetCurrentThreadId
LocalFree
CloseHandle
ExitProcess
FindNextFileA
GetModuleFileNameA
LocalAlloc
GetLocalTime
GetLastError
FindFirstFileA
SetCurrentDirectoryA
CreateDirectoryA
GetProcAddress
HeapCreate
IsProcessorFeaturePresent
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapFree
MultiByteToWideChar
GetCurrentThread
GetCurrentProcess
HeapAlloc
TlsGetValue
user32
UpdateWindow
DestroyMenu
SetWindowTextA
GetSystemMetrics
ScrollWindowEx
AppendMenuA
DrawMenuBar
CreateDialogParamW
IsDlgButtonChecked
MoveWindow
LoadImageA
EndPaint
SetWindowRgn
SetTimer
ScreenToClient
GetWindowRect
PostQuitMessage
KillTimer
LoadBitmapA
LoadIconA
WindowFromPoint
GetClientRect
GetWindowTextLengthA
SendMessageA
BeginPaint
GetDC
InflateRect
GetMenu
IsDialogMessageW
OffsetRect
GetWindowTextA
SetPropA
TrackPopupMenuEx
SetRect
GetScrollInfo
InvalidateRect
ReleaseDC
TranslateAcceleratorA
IsWindowUnicode
GetDlgItem
DefWindowProcA
GetDesktopWindow
SetWindowPos
GetCursorPos
SetMenu
CreatePopupMenu
GetSysColorBrush
FrameRect
LoadBitmapW
gdi32
PathToRegion
BeginPath
BitBlt
DeleteDC
GetDeviceCaps
SetPixel
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Ellipse
EndPath
CreateFontW
CreateRectRgn
CreatePen
GetPixel
GetObjectA
GetTextColor
CreateSolidBrush
TextOutA
advapi32
AccessCheck
OpenThreadToken
SetNamedSecurityInfoA
SetSecurityDescriptorGroup
GetTokenInformation
GetLengthSid
IsValidSecurityDescriptor
FreeSid
AddAccessAllowedAce
SetSecurityDescriptorOwner
AllocateAndInitializeSid
InitializeAcl
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
DuplicateToken
OpenProcessToken
shell32
SHGetMalloc
ole32
OleInitialize
OleSetMenuDescriptor
CLSIDFromString
CoUninitialize
CoInitialize
OleUninitialize
CoCreateInstance
oleaut32
SysAllocStringByteLen
winmm
timeGetTime
timeEndPeriod
timeBeginPeriod
shlwapi
StrRChrA
comctl32
ImageList_Create
ImageList_AddMasked
ImageList_GetImageCount
ord17
Sections
.text Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ