Static task
static1
Behavioral task
behavioral1
Sample
4e7dd1d723121b12f0984ad34ce9cb67006c1fef5fc2a8148461e1b156cbf88d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4e7dd1d723121b12f0984ad34ce9cb67006c1fef5fc2a8148461e1b156cbf88d.exe
Resource
win10v2004-20220812-en
General
-
Target
4e7dd1d723121b12f0984ad34ce9cb67006c1fef5fc2a8148461e1b156cbf88d
-
Size
2.5MB
-
MD5
73e622b1d2f7d7ec92c299eba4f8bc20
-
SHA1
ee9b31af2367b6c2a76d6b8f1a40840adfdfd5b8
-
SHA256
4e7dd1d723121b12f0984ad34ce9cb67006c1fef5fc2a8148461e1b156cbf88d
-
SHA512
4645c853b6e86944ea968a0709ba3b220621951f231d955d418008e4d568791175796d50d1c452e89cc9764deb0f950d2f7b82de6c851e343c024967c759d0d7
-
SSDEEP
24576:5PCT+jHRire4e9/TjoCLgg+NkE+6wn1n7mog+68eOqh5EDN+6Nqmc5iFBRxC+9mQ:5aM0exTH+NCZ1nJiO7DUmJBRcatDDd
Malware Config
Signatures
Files
-
4e7dd1d723121b12f0984ad34ce9cb67006c1fef5fc2a8148461e1b156cbf88d.exe windows x86
6dc3e91c87588a0f32c5c233dec96abf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WinExec
SetFileTime
GetFileInformationByHandle
GetFileTime
GetFileSizeEx
GetDiskFreeSpaceA
SetFilePointerEx
FlushFileBuffers
_lwrite
SetFilePointer
SetEndOfFile
GetProcAddress
GetModuleHandleA
LoadLibraryA
CreateEventA
SetEvent
WaitForSingleObject
SetThreadPriority
GetCurrentThread
DefineDosDeviceA
GetCurrentProcessId
FormatMessageW
VirtualQuery
ReleaseMutex
CreateMutexA
OpenMutexA
GetVolumeInformationW
GetLogicalDrives
GetFileSize
CreateDirectoryA
OutputDebugStringA
GetVersionExA
GetCurrentDirectoryA
LocalFree
FindClose
FindFirstFileA
GetWindowsDirectoryA
DeleteFileA
GetTempPathA
SetCurrentDirectoryA
QueryDosDeviceA
GetSystemInfo
SetUnhandledExceptionFilter
_lread
InterlockedExchangeAdd
QueryPerformanceCounter
GetProcessWorkingSetSize
GetProcessTimes
GetThreadTimes
GlobalMemoryStatus
GetProcessHeap
InterlockedExchange
ResetEvent
InterlockedCompareExchange
HeapFree
HeapAlloc
GetDiskFreeSpaceExA
GetModuleFileNameW
VirtualAlloc
HeapDestroy
HeapReAlloc
HeapSize
CompareStringW
CompareStringA
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetLocaleInfoW
GetFullPathNameA
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
LCMapStringW
LCMapStringA
IsValidCodePage
GetACP
GetCPInfo
FatalAppExitA
GetSystemTimeAsFileTime
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
FindNextFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileType
SetStdHandle
ExitProcess
CreateThread
ResumeThread
ExitThread
RtlUnwind
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
CreatePipe
DeviceIoControl
VirtualLock
SetFileAttributesA
GetStartupInfoA
VirtualUnlock
GetVolumePathNameA
GetSystemDirectoryA
ReadFile
CreateProcessA
GetFileAttributesA
Sleep
GetVolumeInformationA
GetDriveTypeA
WriteFile
GetTickCount
CreateFileA
SetVolumeLabelA
GetModuleFileNameA
FindResourceExA
lstrcmpiW
FindResourceA
LoadLibraryExW
FreeLibrary
IsProcessorFeaturePresent
InitializeCriticalSection
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
lstrlenW
DeleteCriticalSection
SetEnvironmentVariableA
GetOEMCP
CreateSemaphoreW
GetLastError
CloseHandle
lstrcpynW
LeaveCriticalSection
EnterCriticalSection
FindResourceExW
GetCurrentProcess
FlushInstructionCache
SetLastError
RaiseException
GlobalFree
GetCurrentThreadId
FindResourceW
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
FreeResource
WideCharToMultiByte
VirtualFree
MultiByteToWideChar
user32
wsprintfA
SendMessageTimeoutA
RegisterClassExA
CreateWindowExA
SetLayeredWindowAttributes
GetWindowLongA
ExitWindowsEx
MessageBoxA
wsprintfW
GetKeyState
EnumWindows
GetWindowTextA
PostMessageA
SetWindowLongA
SetWindowTextA
GetClassNameA
SendMessageA
GetClassInfoA
UnregisterClassA
LoadIconA
RegisterClassA
GetUpdateRect
DefWindowProcA
ReleaseDC
RegisterDeviceNotificationA
SetDlgItemInt
GetDlgItemInt
EndDialog
IsDialogMessageW
ShowWindow
SetFocus
GetDlgItem
SetWindowPos
MapWindowPoints
GetClientRect
GetMonitorInfoW
GetWindowTextLengthA
GetActiveWindow
GetClipboardOwner
GetClipboardViewer
GetDesktopWindow
GetFocus
GetInputState
GetMessagePos
GetMessageTime
GetOpenClipboardWindow
GetProcessWindowStation
GetQueueStatus
GetCaretPos
CallNextHookEx
LoadCursorA
UnhookWindowsHookEx
DialogBoxParamW
CharNextW
FillRect
GetSysColorBrush
FindWindowW
IsIconic
GetLastActivePopup
EndPaint
BeginPaint
GetSysColor
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
DestroyCursor
LoadCursorW
MessageBoxW
SetCursor
PostMessageW
GetCursorPos
CreatePopupMenu
IsWindowVisible
InsertMenuW
MonitorFromWindow
GetWindowLongW
GetWindowRect
GetWindow
GetParent
SetWindowTextW
EnableWindow
SetTimer
KillTimer
PostQuitMessage
MoveWindow
CopyRect
IsWindowEnabled
CreateDialogParamW
DestroyWindow
SetWindowLongW
UpdateLayeredWindow
GetDC
SendMessageW
DefWindowProcW
IsWindow
UpdateWindow
InvalidateRect
SystemParametersInfoW
GetCapture
SetCapture
ReleaseCapture
SetForegroundWindow
TrackPopupMenu
DestroyMenu
DestroyIcon
GetSystemMetrics
LoadImageW
MessageBeep
SetDlgItemTextW
GetWindowTextLengthW
GetWindowTextW
GetMenu
AdjustWindowRectEx
CallWindowProcW
CreateWindowExW
SetWindowRgn
EnumChildWindows
ClientToScreen
PtInRect
GetDlgCtrlID
GetDialogBaseUnits
advapi32
RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegQueryValueExA
RegOpenKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegOpenKeyExA
StartServiceA
OpenServiceA
CreateServiceA
CloseServiceHandle
OpenSCManagerA
DeleteService
ControlService
QueryServiceStatus
IsWellKnownSid
GetTokenInformation
CryptReleaseContext
CryptGenRandom
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteValueW
ole32
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CreateStreamOnHGlobal
shell32
ord680
SHChangeNotify
SHGetFolderPathA
Shell_NotifyIconW
SHGetFileInfoA
SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListA
ShellExecuteA
ShellExecuteW
oleaut32
VarUI4FromStr
SysAllocStringLen
SysFreeString
shlwapi
PathFileExistsA
comctl32
_TrackMouseEvent
ord17
InitCommonControlsEx
gdi32
CreateDIBSection
CreateRectRgn
CombineRgn
GetStockObject
SetTextColor
TextOutW
SetTextAlign
SelectObject
CreateSolidBrush
GetTextMetricsA
GetTextExtentPoint32W
LineTo
MoveToEx
CreatePen
CreateCompatibleDC
SetBkMode
DeleteObject
DeleteDC
gdiplus
GdipDeleteStringFormat
GdiplusShutdown
GdiplusStartup
GdipDrawImageRectRect
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDrawImageRectRectI
GdipCreateStringFormat
GdipDrawString
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipCreateBitmapFromResource
GdipCloneImage
GdipDisposeImage
GdipFree
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipAlloc
GdipGetImageHeight
GdipGetImageWidth
comdlg32
GetSaveFileNameW
GetOpenFileNameW
Sections
.text Size: 643KB - Virtual size: 642KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
plnwxli Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE