Static task
static1
Behavioral task
behavioral1
Sample
622bbbd0f3ba4a67e4ab78a03d533f8a975b986c4b56f0400e12c1f0fbbf7e0d.exe
Resource
win7-20220901-en
General
-
Target
622bbbd0f3ba4a67e4ab78a03d533f8a975b986c4b56f0400e12c1f0fbbf7e0d
-
Size
247KB
-
MD5
5792c868120e919b3bd6dec019f27ef5
-
SHA1
be3242492b64431b50efe3d152b302456139b4e6
-
SHA256
622bbbd0f3ba4a67e4ab78a03d533f8a975b986c4b56f0400e12c1f0fbbf7e0d
-
SHA512
2ea71cd23d6309910710276a17f92ce1b3df5fafdc684f2fe08dfe1e5436f516912c492ae9f3129e53467f210ace9df611a138700c19170c3495dfb56b2d68c1
-
SSDEEP
3072:sDHVd23WYZTsMGAhJt5llXrDZfWD6XmNYhxLOa/GDU1TA8Q6mT7eOPdAhWl9cQqj:1sQh7HBJTW5dZt9AYlyQ57jOZ+RBWa8
Malware Config
Signatures
Files
-
622bbbd0f3ba4a67e4ab78a03d533f8a975b986c4b56f0400e12c1f0fbbf7e0d.exe windows x86
db6ccf2ddfc82ff8e6592778b6591919
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memmove
memcpy
_vsnprintf
rand
srand
time
wcstoul
_vsnwprintf
_amsg_exit
_initterm
free
_wcsicmp
malloc
_XcptFilter
kernel32
GetStringTypeExA
GetVersion
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
LoadLibraryA
LoadLibraryW
GetProcAddress
GetACP
GlobalReAlloc
GlobalFree
GlobalAlloc
CompareStringW
FindResourceW
SizeofResource
LoadResource
LockResource
FreeLibrary
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
WaitForMultipleObjects
CreateThread
FileTimeToLocalFileTime
WriteFile
GetSystemTimeAsFileTime
GetVersionExW
lstrlenW
lstrlenA
GetTimeZoneInformation
IsDBCSLeadByteEx
LocalAlloc
LocalReAlloc
lstrcmpiA
IsDBCSLeadByte
Sleep
LocalFree
GetModuleFileNameW
OpenFileMappingW
ResetEvent
InterlockedCompareExchange
InterlockedExchange
GetTempPathW
GetLocalTime
HeapFree
HeapAlloc
GetProcessHeap
FileTimeToSystemTime
CreateDirectoryW
MoveFileExW
CloseHandle
SetEvent
OpenEventW
InitializeCriticalSectionAndSpinCount
ReadFile
SetFilePointer
CreateFileW
UnmapViewOfFile
CreateMutexW
MapViewOfFile
CreateFileMappingW
WaitForSingleObject
ReleaseMutex
CreateEventW
LeaveCriticalSection
DuplicateHandle
GetCurrentProcess
EnterCriticalSection
DeleteCriticalSection
GetLastError
OpenMutexW
UnregisterWaitEx
GetCurrentProcessId
InterlockedIncrement
InterlockedDecrement
RegisterWaitForSingleObject
OpenProcess
SystemTimeToTzSpecificLocalTime
MultiByteToWideChar
RemoveDirectoryW
SystemTimeToFileTime
GetSystemTime
CompareFileTime
DeleteFileW
SetFileAttributesW
FindFirstFileW
FindNextFileW
FindClose
GetFileAttributesW
VirtualAlloc
EnumDateFormatsExA
SetConsoleMenuClose
WaitNamedPipeA
WriteFileGather
GetCommProperties
_lclose
GetCPInfoExA
GetStringTypeW
ExpandEnvironmentStringsW
DosPathToSessionPathW
BuildCommDCBAndTimeoutsA
ReadDirectoryChangesW
HeapSetInformation
GetModuleHandleA
GetNamedPipeHandleStateW
GetSystemDefaultLCID
GetDefaultCommConfigA
_lwrite
GetCommTimeouts
GetThreadTimes
GetVDMCurrentDirectories
GetSystemDefaultUILanguage
RequestDeviceWakeup
InitAtomTable
OpenSemaphoreA
_hwrite
SetTermsrvAppInstallMode
GetGeoInfoA
FindFirstVolumeW
CommConfigDialogA
UnlockFileEx
GetConsoleCommandHistoryW
GetOEMCP
WriteConsoleOutputCharacterA
lstrcat
CreateDirectoryA
GetProfileStringA
Heap32ListFirst
FindAtomW
GetAtomNameW
SetVolumeLabelW
CreateEventA
SetCommBreak
lstrcpyn
CancelDeviceWakeupRequest
_hread
FreeUserPhysicalPages
GetLongPathNameW
GetStringTypeA
AddAtomA
GetFileInformationByHandle
GlobalUnWire
GetConsoleTitleW
DeleteTimerQueueTimer
WriteConsoleA
IsBadStringPtrA
GetLongPathNameA
SetLocaleInfoA
CommConfigDialogW
AllocateUserPhysicalPages
GlobalAddAtomA
ReadConsoleInputA
AreFileApisANSI
ScrollConsoleScreenBufferA
LoadLibraryExW
AddRefActCtx
GetDiskFreeSpaceA
FindNextVolumeMountPointA
EnumCalendarInfoA
EnumUILanguagesA
FreeResource
SetInformationJobObject
OpenJobObjectA
WriteProfileStringW
CloseConsoleHandle
OpenThread
GetConsoleAliasesA
WinExec
VerifyVersionInfoA
WriteProfileSectionA
CreateHardLinkW
GetStartupInfoA
LocalSize
ole32
CoTaskMemFree
StgOpenStorageEx
StringFromGUID2
StgCreateStorageEx
CoCreateInstance
PropVariantClear
CoTaskMemAlloc
CoUninitialize
CoInitializeEx
CoWaitForMultipleHandles
CLSIDFromString
CoCreateGuid
shlwapi
StrStrNIW
UrlEscapeW
StrToIntA
HashData
SHCreateStreamOnFileW
StrCmpIW
SHStrDupW
PathAppendW
PathFileExistsW
StrCmpW
ChrCmpIW
PathFindFileNameW
PathRemoveFileSpecW
PathCombineW
StrStrIW
StrChrW
StrCmpNIW
StrToInt64ExW
PathFindExtensionW
PathRemoveExtensionW
StrRChrW
SHSetValueW
rpcrt4
UuidCreateSequential
RpcServerInqCallAttributesW
user32
UnlockWindowStation
IsRectEmpty
OemToCharA
BroadcastSystemMessageExW
GetClipboardOwner
DdeQueryStringA
GetKeyboardType
DdeCmpStringHandles
ExcludeUpdateRgn
ToAsciiEx
MenuWindowProcW
EmptyClipboard
TileChildWindows
SetWindowTextW
UnionRect
IsWinEventHookInstalled
SetLastErrorEx
CreateMDIWindowA
GetParent
CharUpperW
DestroyReasons
DestroyCursor
RealGetWindowClassA
RecordShutdownReason
GetCursorPos
LoadMenuA
GetTabbedTextExtentA
CloseWindowStation
LoadIconW
RegisterDeviceNotificationW
GetWindow
OpenInputDesktop
ReleaseDC
DrawCaptionTempW
GetWindowThreadProcessId
GetMenuDefaultItem
MonitorFromWindow
CharToOemBuffA
PrivateExtractIconsW
GetRegisteredRawInputDevices
DdeGetData
SetWindowsHookExA
SetMessageQueue
TranslateAccelerator
GetMenuItemCount
SetMenuItemBitmaps
GetUserObjectSecurity
DrawTextA
RegisterHotKey
VkKeyScanExW
EnumDisplayMonitors
SetActiveWindow
RegisterWindowMessageA
UnloadKeyboardLayout
GetTaskmanWindow
CreateSystemThreads
CreateDialogIndirectParamAorW
LoadCursorA
WCSToMBEx
MessageBeep
CheckMenuRadioItem
RegisterClassA
SendMessageTimeoutA
GetPriorityClipboardFormat
SetMenu
CreateWindowExA
GetWindowDC
LoadIconA
gdi32
SetMetaRgn
GdiGradientFill
GdiAddGlsBounds
EngCreateBitmap
SetPaletteEntries
PATHOBJ_vEnumStartClipLines
bMakePathNameW
GdiGetSpoolMessage
EngMarkBandingSurface
GdiGetBatchLimit
AddFontResourceExA
GdiEntry9
CombineRgn
ScaleWindowExtEx
FONTOBJ_cGetGlyphs
GetRelAbs
GdiConvertBrush
CLIPOBJ_cEnumStart
GdiInitializeLanguagePack
GdiGetLocalFont
GdiEntry14
PolylineTo
DdEntry13
CreateDIBSection
CopyMetaFileW
GetEnhMetaFileA
RestoreDC
DdEntry24
EudcUnloadLinkW
GetCharABCWidthsFloatW
SetFontEnumeration
GdiReleaseLocalDC
DdEntry16
ExcludeClipRect
DdEntry7
SetDCBrushColor
LPtoDP
ExtFloodFill
EngTextOut
GdiEntry2
STROBJ_dwGetCodePage
GdiCleanCacheDC
EnumFontsA
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.������� Size: 2KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.������ Size: 4KB - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 205KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ