Static task
static1
Behavioral task
behavioral1
Sample
254ddefeef7d7f6b8a74ffa2a3241ec0a35b81cdbcc6889b98be1c7673f41fea.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
254ddefeef7d7f6b8a74ffa2a3241ec0a35b81cdbcc6889b98be1c7673f41fea.exe
Resource
win10v2004-20221111-en
General
-
Target
254ddefeef7d7f6b8a74ffa2a3241ec0a35b81cdbcc6889b98be1c7673f41fea
-
Size
712KB
-
MD5
ff5940666b200804d8849ab76a9f4566
-
SHA1
018a41e68483eb401510a7edd3a7db7838999b24
-
SHA256
254ddefeef7d7f6b8a74ffa2a3241ec0a35b81cdbcc6889b98be1c7673f41fea
-
SHA512
26f27bbcbae24118da2a31a9852ad605032724383ea071d952c1ac5b6065dac223e92b1202b808c039b2125a4f0ab7d0f0ace566c4bc67c31aa2deaae534d863
-
SSDEEP
12288:z2lubDnc4qh/z7CgbJOMMLZR2GSt0TjNJP/77xQ29xlkpwGlPAyMmZz:guHc4qhCg1utuEjNz/3ipwGlPAq
Malware Config
Signatures
Files
-
254ddefeef7d7f6b8a74ffa2a3241ec0a35b81cdbcc6889b98be1c7673f41fea.exe windows x86
94822c879a53afbbf3e99c98fa0b4cd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ExtractIconExW
FreeIconList
SHGetSpecialFolderPathA
SHGetSettings
comctl32
CreatePropertySheetPageW
InitCommonControlsEx
CreateMappedBitmap
ImageList_LoadImage
ImageList_SetFlags
MakeDragList
ImageList_Add
ImageList_GetDragImage
CreateStatusWindowA
ImageList_Destroy
ImageList_GetImageCount
ImageList_SetDragCursorImage
ImageList_Read
ImageList_DragShowNolock
CreateToolbarEx
ImageList_DrawEx
ImageList_DragLeave
ImageList_DragMove
ImageList_BeginDrag
ImageList_Create
CreatePropertySheetPage
ImageList_GetImageInfo
_TrackMouseEvent
ImageList_GetIconSize
CreateStatusWindowW
user32
UnpackDDElParam
BringWindowToTop
LoadCursorA
MessageBoxW
IsDlgButtonChecked
DdeFreeDataHandle
GetMenuStringW
WinHelpW
CheckMenuRadioItem
CreateMenu
GetListBoxInfo
SetClipboardData
SetMenuItemBitmaps
CreateDialogParamW
AnimateWindow
DefFrameProcA
EnableMenuItem
ClipCursor
RegisterClassExA
SetDoubleClickTime
EndMenu
InvalidateRect
LockWindowUpdate
ShowWindow
OpenWindowStationA
ExcludeUpdateRgn
CreateWindowExW
RegisterClassW
CloseClipboard
UnloadKeyboardLayout
OpenInputDesktop
GetClassInfoExA
IsMenu
CreateCursor
GetMessageExtraInfo
GetScrollRange
OpenIcon
GetMenuCheckMarkDimensions
GetDlgItemTextA
wvsprintfA
TabbedTextOutW
CreateCaret
DlgDirListComboBoxA
SendNotifyMessageA
CharToOemW
MonitorFromPoint
CharUpperBuffA
PtInRect
RegisterDeviceNotificationW
ExitWindowsEx
EnumWindowStationsW
SetRect
FindWindowW
DrawStateA
RegisterClassA
ScrollWindowEx
UnregisterClassA
GetClipboardSequenceNumber
SubtractRect
VkKeyScanExA
DefWindowProcA
SetPropW
CharLowerBuffW
DrawStateW
DestroyWindow
GetQueueStatus
ValidateRgn
CreateWindowExA
EnumDisplaySettingsW
CreateWindowStationA
GetCursorInfo
IsCharAlphaNumericW
EnumDisplayMonitors
advapi32
LookupPrivilegeDisplayNameA
RegSetValueExA
CryptGetHashParam
RegDeleteValueW
RegRestoreKeyW
LogonUserA
RegSaveKeyW
RegEnumKeyExW
RegOpenKeyExW
StartServiceW
LookupPrivilegeNameA
CryptVerifySignatureA
CryptSignHashW
LookupSecurityDescriptorPartsW
RegFlushKey
kernel32
SetThreadLocale
LCMapStringA
InterlockedDecrement
HeapAlloc
GlobalAddAtomW
GetCurrentThreadId
GetTimeZoneInformation
HeapFree
GetACP
EnterCriticalSection
GetProcessHeap
DeleteFileW
GetCommandLineW
LoadLibraryExW
InterlockedIncrement
ExitProcess
SetFilePointer
GetVersionExA
GetExitCodeThread
WriteConsoleInputA
VirtualQuery
WritePrivateProfileSectionW
UnlockFile
SetConsoleCtrlHandler
GetPrivateProfileStringW
GetCalendarInfoW
LCMapStringW
RtlUnwind
LockResource
LoadLibraryW
IsValidCodePage
GetLastError
GetPrivateProfileIntA
SetPriorityClass
AddAtomA
GetStdHandle
ConvertDefaultLocale
GetTimeFormatA
FindNextChangeNotification
GetModuleFileNameW
HeapDestroy
GetStartupInfoA
IsDebuggerPresent
TlsFree
IsValidLocale
GetStartupInfoW
GetCurrentProcessId
TlsSetValue
GetConsoleOutputCP
HeapReAlloc
GetProfileSectionA
GetDateFormatA
GetSystemTime
GetUserDefaultLCID
FreeLibrary
GetConsoleCP
FindNextFileA
GetFileSize
ReadConsoleOutputCharacterA
GetStringTypeW
ReadFile
VirtualFree
WideCharToMultiByte
CompareStringA
SetLastError
EnumSystemLocalesA
CompareStringW
SetEnvironmentVariableA
GetCommandLineA
TlsGetValue
SetConsoleCP
LeaveCriticalSection
GetFileType
UnhandledExceptionFilter
GetCurrentThread
GetModuleFileNameA
EnumCalendarInfoExW
FreeEnvironmentStringsW
MultiByteToWideChar
OpenMutexA
GetFileAttributesExW
WriteFile
InterlockedExchange
GetCurrentProcess
GetSystemTimeAsFileTime
CreateMutexA
GetTickCount
HeapSize
TerminateThread
VirtualLock
GetProcAddress
GetConsoleMode
TerminateProcess
GetModuleHandleA
CreateFileA
LoadLibraryExA
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetLocaleInfoA
SetStdHandle
LocalHandle
GetLocaleInfoW
QueryPerformanceCounter
MapViewOfFile
GetOEMCP
lstrcat
CloseHandle
GetWindowsDirectoryA
VirtualAlloc
FreeEnvironmentStringsA
GetDiskFreeSpaceA
LoadLibraryA
SetConsoleMode
WriteConsoleA
GetPriorityClass
WriteProfileStringW
VirtualQueryEx
InitializeCriticalSection
TlsAlloc
GetPrivateProfileStructA
FlushFileBuffers
CreateMailslotW
GetProcessShutdownParameters
GetEnvironmentStrings
GetCPInfo
GetLogicalDriveStringsW
ReadFileEx
CreateDirectoryExW
DeleteCriticalSection
SetHandleCount
Sleep
FreeResource
SetConsoleOutputCP
SetVolumeLabelW
WriteConsoleW
HeapCreate
lstrcpyn
GetStringTypeA
wininet
InternetConfirmZoneCrossing
InternetSecurityProtocolToStringA
InternetSetOptionW
gdi32
GetBrushOrgEx
CreateDCW
FillPath
GetObjectA
GetTextFaceW
EnumICMProfilesA
GetDeviceCaps
DeleteDC
CloseFigure
SetEnhMetaFileBits
ResetDCW
StretchDIBits
GetViewportExtEx
CreateFontIndirectW
FloodFill
GetColorAdjustment
ScaleWindowExtEx
TextOutA
DeviceCapabilitiesExW
LineTo
SetTextAlign
GdiPlayDCScript
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 460KB - Virtual size: 459KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ