Static task
static1
Behavioral task
behavioral1
Sample
209d8a6bd9f756ecbb1c00b0908df2e05e097639ab41f1d303fa7c45ccf43a18.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
209d8a6bd9f756ecbb1c00b0908df2e05e097639ab41f1d303fa7c45ccf43a18.exe
Resource
win10v2004-20220812-en
General
-
Target
209d8a6bd9f756ecbb1c00b0908df2e05e097639ab41f1d303fa7c45ccf43a18
-
Size
285KB
-
MD5
258350dbde8a279a5960644d12d0c2e9
-
SHA1
121c868a0fbac044b8a8c536f1cc96da3aeb07e4
-
SHA256
209d8a6bd9f756ecbb1c00b0908df2e05e097639ab41f1d303fa7c45ccf43a18
-
SHA512
c1a75c6e72d43c826908ee9bd97bf37a33308d861451802e034bbafb9c4f780ca9f4102f7edc7aa94e81d66fdf50001bdf3b90ea2874919fd2a8c849d20bf513
-
SSDEEP
3072:HPASepKSylhu/Ix1qcQ7hIx4XodaHt98jItjkZsJNg+WE8bx+2:HdkO0/k1cNPNSjIF9J7W7x
Malware Config
Signatures
Files
-
209d8a6bd9f756ecbb1c00b0908df2e05e097639ab41f1d303fa7c45ccf43a18.exe windows x86
c63b4e1667696f1574f2dbb56834987f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnableMenuItem
GetDlgItem
SendDlgItemMessageA
AppendMenuA
GetWindowLongA
wvsprintfA
SetWindowPos
FindWindowA
RedrawWindow
GetWindowTextA
EnableWindow
GetSystemMetrics
IsWindow
CheckRadioButton
UnregisterClassA
SetCursor
GetSysColorBrush
DialogBoxParamA
DestroyAcceleratorTable
DispatchMessageA
TranslateMessage
LoadIconA
EmptyClipboard
SetClipboardData
SetFocus
CharUpperA
OpenClipboard
IsDialogMessageA
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
RemoveMenu
InvalidateRect
ChildWindowFromPoint
PostMessageA
DestroyCursor
CreateDialogParamA
GetWindowRect
IsMenu
GetSubMenu
SetDlgItemInt
GetWindowPlacement
CharLowerBuffA
LoadCursorA
CheckMenuRadioItem
GetSysColor
KillTimer
DestroyIcon
DestroyWindow
PostQuitMessage
GetClientRect
MoveWindow
GetSystemMenu
SetTimer
SetWindowPlacement
InsertMenuItemA
GetMenu
CheckMenuItem
SetMenuItemInfoA
SetActiveWindow
DefDlgProcA
RegisterClassA
EndDialog
SetDlgItemTextA
EnumClipboardFormats
GetClipboardData
CloseClipboard
GetClassInfoA
CallWindowProcA
SetWindowLongA
IsDlgButtonChecked
SetWindowTextA
CheckDlgButton
GetActiveWindow
MessageBoxA
wsprintfA
GetDlgItemTextA
SendMessageA
GetCursorPos
TrackPopupMenu
ClientToScreen
DestroyMenu
CreatePopupMenu
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegSetValueA
RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
GetUserNameA
gdi32
DeleteObject
CreateFontIndirectA
SelectObject
GetStockObject
SetTextColor
SetBkMode
GetObjectA
dbghelp
ImageNtHeader
ImageRvaToSection
ImageRvaToVa
comctl32
ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_Remove
CreateToolbarEx
InitCommonControlsEx
ImageList_SetBkColor
kernel32
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapFree
VirtualFree
HeapCreate
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
WriteFile
RtlUnwind
GetProcAddress
Sleep
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetThreadIOPendingFlag
FlushFileBuffers
GetThreadPriorityBoost
GetTapeStatus
GetTapeParameters
SetProcessPriorityBoost
SetProcessWorkingSetSize
GetCurrentThreadId
SetInformationJobObject
GetThreadContext
GetProcessTimes
MulDiv
GetStdHandle
TlsSetValue
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
GetModuleHandleW
HeapReAlloc
GetNamedPipeHandleStateA
GetFileAttributesExW
SetStdHandle
ConvertFiberToThread
ExitProcess
SetMessageWaitingIndicator
GetVersion
GetNamedPipeInfo
DisableThreadLibraryCalls
GlobalUnfix
GetWriteWatch
LocalCompact
AreFileApisANSI
FindFirstFileExW
ClearCommError
DecodeSystemPointer
FlushInstructionCache
EncodeSystemPointer
GetProcessId
GetThreadTimes
CancelWaitableTimer
EncodePointer
GetProcessVersion
OpenProcess
SetLastError
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 35.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ