Static task
static1
Behavioral task
behavioral1
Sample
01e380c113c0d9f78529acc2dd6d006ea8c08bb360a3d575579ede4c392c1ba7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
01e380c113c0d9f78529acc2dd6d006ea8c08bb360a3d575579ede4c392c1ba7.exe
Resource
win10v2004-20221111-en
General
-
Target
01e380c113c0d9f78529acc2dd6d006ea8c08bb360a3d575579ede4c392c1ba7
-
Size
1.2MB
-
MD5
1fd89a1978a607bbfe89ad41b6d59dd3
-
SHA1
f0f2e68740768a8a9e676314d86df663cdacba10
-
SHA256
01e380c113c0d9f78529acc2dd6d006ea8c08bb360a3d575579ede4c392c1ba7
-
SHA512
157e1f0afe3c43c5274b0c2249ee930e0cb6eb78d9f89f4d127e572ae22e8841168ee1e5561824a85cf9ef61aa91762e247e0e661073f6ec695420468700cc6b
-
SSDEEP
24576:bBPpAmJ0ET0V7u4nZcPEclU9tjdrPFv/l+onGzLX5+wd9JGtkT:jAmJ0lE4nZYidFlwzLXZ7J6kT
Malware Config
Signatures
Files
-
01e380c113c0d9f78529acc2dd6d006ea8c08bb360a3d575579ede4c392c1ba7.exe windows x86
96911a85230d5883d39d753e3accc661
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
AdjustWindowRect
AppendMenuA
BeginPaint
CallWindowProcA
CheckDlgButton
CheckMenuItem
CheckRadioButton
ClientToScreen
CloseClipboard
CreateCaret
CreateDialogParamA
CreateMDIWindowA
CreateMenu
CreatePopupMenu
CreateWindowExA
DefFrameProcA
DefMDIChildProcA
DefWindowProcA
DestroyCaret
DestroyMenu
DestroyWindow
DialogBoxParamA
DispatchMessageA
DrawMenuBar
EmptyClipboard
EnableMenuItem
EnableWindow
EndDialog
EndPaint
EnumChildWindows
EnumThreadWindows
EnumWindows
FillRect
FrameRect
GetCapture
GetClassInfoA
GetClassLongA
GetClassNameA
GetClipboardData
GetCursorPos
GetDC
GetDesktopWindow
GetDialogBaseUnits
GetDlgCtrlID
GetDlgItem
GetDlgItemTextA
GetKeyState
GetMenu
GetMenuItemCount
GetClientRect
GetMenuStringA
GetParent
GetScrollPos
GetSubMenu
GetSysColor
GetSystemMetrics
GetWindow
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
InsertMenuA
IntersectRect
InvalidateRect
IsDlgButtonChecked
IsIconic
IsWindow
IsZoomed
KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
LoadImageA
MapDialogRect
MapVirtualKeyA
MessageBoxA
MoveWindow
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
PostThreadMessageA
RedrawWindow
RegisterClassA
ReleaseCapture
ReleaseDC
RemoveMenu
ScreenToClient
SendDlgItemMessageA
SendMessageA
SetCapture
SetCaretPos
SetClipboardData
SetCursor
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowCaret
ShowScrollBar
ShowWindow
SystemParametersInfoA
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnregisterClassA
UpdateWindow
WinHelpA
WindowFromPoint
wsprintfA
wsprintfW
GetMenuItemID
comdlg32
ChooseFontA
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
shell32
DragQueryFileA
DragFinish
DragAcceptFiles
ShellExecuteA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
advapi32
RegQueryValueExA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyA
gdi32
ExtTextOutA
ExtTextOutW
GetClipBox
GetDCOrgEx
GetNearestColor
GetObjectA
GetObjectType
GetStockObject
GetTextMetricsA
ExcludeClipRect
LineTo
MoveToEx
RemoveFontResourceA
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetTextAlign
SetTextColor
EnumFontFamiliesA
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateFontA
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
AddFontResourceA
IntersectClipRect
CreateFontIndirectA
dbghelp
SymGetModuleInfoW64
SymGetLinePrev
FindDebugInfoFile
SymSetContext
SymGetSymNext64
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
shlwapi
PathMatchSpecW
PathIsDirectoryW
PathCompactPathExW
PathRemoveFileSpecW
PathFindExtensionW
PathFileExistsW
PathRemoveExtensionW
PathIsRelativeW
PathAppendW
PathAddExtensionW
PathStripPathW
PathFindFileNameW
kernel32
GetFileSize
GetFileTime
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemDirectoryA
GetThreadContext
GetThreadPriority
GetThreadSelectorEntry
GetTickCount
GetUserDefaultLCID
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadResource
GetFileAttributesA
MoveFileA
MulDiv
MultiByteToWideChar
OpenProcess
RaiseException
ReadFile
ReadProcessMemory
ResumeThread
RtlUnwind
SearchPathA
SetConsoleCtrlHandler
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetPriorityClass
SetThreadContext
SetThreadLocale
SetThreadPriority
Sleep
SuspendThread
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VerLanguageNameA
VirtualAlloc
VirtualFree
VirtualProtect
WaitForDebugEvent
GetEnvironmentStrings
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
WideCharToMultiByte
WriteFile
WritePrivateProfileStringA
WriteProcessMemory
lstrcmpiW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetCommandLineA
GetCPInfo
GetACP
FreeLibrary
FlushInstructionCache
FindResourceA
FindNextFileA
FindFirstFileA
FindClose
ExitProcess
EnterCriticalSection
DeleteFileA
DebugActiveProcess
CreateProcessA
CreateFileA
CreateDirectoryA
ContinueDebugEvent
CloseHandle
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetModuleHandleW
HeapCreate
DeleteCriticalSection
HeapReAlloc
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStringsW
QueryPerformanceCounter
IsValidCodePage
HeapSize
LockResource
lstrcpyA
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
GetConsoleCP
LCMapStringW
lstrcpyW
lstrlenW
GetConsoleMode
SetConsoleTitleA
GetTempPathA
WriteConsoleOutputCharacterW
FreeEnvironmentStringsW
CopyFileW
RemoveDirectoryW
WritePrivateProfileStructA
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 991KB - Virtual size: 991KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ