Static task
static1
Behavioral task
behavioral1
Sample
2c86da4d0e3b660e034a10ad9bc29492f008841599e222701527cac3ddcc1e59.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2c86da4d0e3b660e034a10ad9bc29492f008841599e222701527cac3ddcc1e59.exe
Resource
win10v2004-20221111-en
General
-
Target
2c86da4d0e3b660e034a10ad9bc29492f008841599e222701527cac3ddcc1e59
-
Size
15.1MB
-
MD5
2f1f0913d68f67ea4be263a9fe051b94
-
SHA1
aa22c5d5d1d0f6f11cac7d23fe4d01cfcbf0fb4e
-
SHA256
2c86da4d0e3b660e034a10ad9bc29492f008841599e222701527cac3ddcc1e59
-
SHA512
b52f7f011037c5af10248737dc56a7852ca325728e11fed58bf2c2234acad66dadc638b21936a77d7517e9f0d54e390faa0f9378b5d43bde7b14efbc6a07114b
-
SSDEEP
393216:Vl+Zs5bHawNDjwAtwk0YNMAbICxrgIkeUQ2NFSMtYHu:GCpXNoWC6MAbVklHt
Malware Config
Signatures
Files
-
2c86da4d0e3b660e034a10ad9bc29492f008841599e222701527cac3ddcc1e59.exe windows x86
9618cf2caed4fb2a4989c45cdcbd251e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetModuleHandleW
Sleep
LeaveCriticalSection
EnterCriticalSection
SetEndOfFile
CreateFileW
WriteConsoleW
SetStdHandle
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
GetOEMCP
GetACP
IsValidCodePage
SetFilePointer
GetLastError
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
SetFilePointerEx
GetFileType
GetConsoleMode
GetConsoleCP
FlushFileBuffers
AreFileApisANSI
GetModuleHandleExW
ExitProcess
WriteFile
lstrcmpiW
DeleteCriticalSection
SetLastError
GetCurrentThreadId
GetProcAddress
FreeLibrary
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
MultiByteToWideChar
DeleteFileW
SetFileAttributesW
GetCurrentDirectoryW
FindResourceExW
FindResourceW
lstrlenW
SizeofResource
LoadResource
RaiseException
GetCurrentProcess
FlushInstructionCache
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
LockResource
FreeResource
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetStartupInfoW
TlsFree
TlsSetValue
ReadConsoleW
InterlockedExchange
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
ReadFile
GetCommandLineW
IsDebuggerPresent
RtlUnwind
ExitThread
CreateThread
VirtualQuery
GetSystemInfo
GetTempFileNameW
GetTempPathW
CloseHandle
WaitForSingleObject
GetCurrentProcessId
VirtualProtect
GetStringTypeW
EncodePointer
DecodePointer
HeapSize
HeapReAlloc
HeapDestroy
VirtualFree
VirtualAlloc
HeapAlloc
HeapFree
GetProcessHeap
InterlockedCompareExchange
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
IsProcessorFeaturePresent
user32
RedrawWindow
SetWindowTextW
GetClientRect
GetWindowRect
MessageBoxW
MapWindowPoints
SetRect
GetWindowLongW
SetWindowLongW
GetParent
FindWindowW
GetWindow
LoadImageW
EndPaint
GetMonitorInfoW
DefWindowProcW
CallWindowProcW
DestroyWindow
DialogBoxParamW
CharNextW
GetActiveWindow
BeginPaint
SetForegroundWindow
GetSystemMetrics
EnableWindow
MsgWaitForMultipleObjects
UnregisterClassW
TranslateMessage
DispatchMessageW
EndDialog
SendMessageW
MessageBoxA
GetDlgItem
SetWindowPos
MonitorFromWindow
PeekMessageW
gdi32
TextOutW
GetObjectW
SetDIBColorTable
GetDIBColorTable
CreateDIBSection
SetTextColor
StretchBlt
SetBkMode
SelectObject
GetClipBox
DeleteObject
DeleteDC
CreateFontW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SetViewportOrgEx
advapi32
RegDeleteKeyW
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
shell32
ShellExecuteExW
ShellExecuteW
SHGetSpecialFolderPathW
ole32
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CreateStreamOnHGlobal
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
msimg32
TransparentBlt
AlphaBlend
gdiplus
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipDeleteGraphics
GdipDrawImageI
GdipGetImagePalette
GdipBitmapUnlockBits
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipBitmapLockBits
GdipCloneImage
dbghelp
MakeSureDirectoryPathExists
Sections
.text Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14.8MB - Virtual size: 14.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE