Static task
static1
Behavioral task
behavioral1
Sample
b24f14a7b1d7c1ebeefed8ed1b2e42af368bc5796bd45c21037ff41812251e7b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b24f14a7b1d7c1ebeefed8ed1b2e42af368bc5796bd45c21037ff41812251e7b.exe
Resource
win10v2004-20221111-en
General
-
Target
b24f14a7b1d7c1ebeefed8ed1b2e42af368bc5796bd45c21037ff41812251e7b
-
Size
754KB
-
MD5
3afe33e42b389317487171d66a8e2860
-
SHA1
196bfd8f682ba1edd9df6b7137f61e92a7254fb0
-
SHA256
b24f14a7b1d7c1ebeefed8ed1b2e42af368bc5796bd45c21037ff41812251e7b
-
SHA512
7784054f3c43c4f21676c1a6a9625f1564c9d4bac11b4a545f81cd47362495abd11a15194c68110c7f67a24831483543010ff064613ce9867ad110cdcd5e4987
-
SSDEEP
12288:DTFBhv55+Kkn7DzhQ1qc3KgxTmLOICTkp2yS7+9F0ixIUG:x55+VDNQ19KsTm6T2vS7QFI
Malware Config
Signatures
Files
-
b24f14a7b1d7c1ebeefed8ed1b2e42af368bc5796bd45c21037ff41812251e7b.exe windows x86
d74b8f487f0d55617d616ffc76dbd372
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
HeapReAlloc
ExitProcess
HeapSize
SetStdHandle
GetFileType
HeapCreate
VirtualFree
GetStdHandle
GetACP
IsValidCodePage
SetHandleCount
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetDriveTypeA
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
HeapAlloc
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
VirtualProtect
HeapFree
EnterCriticalSection
SetErrorMode
GetTickCount
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GetFileTime
GetFileSizeEx
GetFileAttributesA
CreateFileA
GetCurrentDirectoryA
GetModuleHandleW
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalFlags
VirtualQuery
WriteConsoleW
GetSystemInfo
FindFirstFileA
FindNextFileA
FindClose
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
WritePrivateProfileStringA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
WaitForSingleObject
lstrcmpA
GetThreadLocale
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
FormatMessageA
LocalFree
MulDiv
GetCurrentProcessId
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
GetVersionExA
Sleep
CreateProcessA
GetStartupInfoA
CreatePipe
ReadFile
InitializeCriticalSection
CloseHandle
CopyFileA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
SetLastError
GetCommandLineA
CreateDirectoryA
GetModuleHandleA
DeleteCriticalSection
CreateThread
LoadLibraryA
FreeLibrary
lstrlenW
GetProcAddress
LockResource
SizeofResource
LoadResource
FindResourceA
GetLastError
GetModuleFileNameA
WideCharToMultiByte
InterlockedExchange
MultiByteToWideChar
lstrlenA
LeaveCriticalSection
GetTimeZoneInformation
user32
MessageBeep
GetNextDlgGroupItem
ReleaseCapture
SetCapture
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableA
UnregisterClassA
GetSysColorBrush
DestroyMenu
SetWindowContextHelpId
MapDialogRect
GetMessageA
TranslateMessage
ValidateRect
CharNextA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetWindowThreadProcessId
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CharUpperA
GetClassLongA
GetClassNameA
SetPropA
GetPropA
GetFocus
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
UpdateWindow
PostMessageA
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
IntersectRect
GetWindowPlacement
ReleaseDC
GetDC
GetWindowTextLengthA
RegisterClipboardFormatA
GetWindowTextA
PostThreadMessageA
CallNextHookEx
GetWindow
SetFocus
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
PostQuitMessage
wsprintfW
DrawIcon
GetSystemMetrics
IsIconic
AppendMenuA
GetSystemMenu
SystemParametersInfoA
RedrawWindow
SetWindowRgn
GetWindowLongA
DrawIconEx
GetSysColor
LoadIconA
OffsetRect
GetWindowRect
LoadCursorA
SetCursor
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetClientRect
KillTimer
ScreenToClient
GetCursorPos
LoadBitmapA
CopyRect
SetRect
SetTimer
InvalidateRect
PtInRect
SetRectEmpty
EnableWindow
GetParent
SendMessageA
RemovePropA
gdi32
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetStockObject
SetWindowOrgEx
GetTextColor
GetRgnBox
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
GetObjectA
SetMapMode
SetStretchBltMode
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateRectRgnIndirect
CreateRoundRectRgn
GetTextMetricsA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateSolidBrush
GetBkColor
DPtoLP
GetMapMode
CreateCompatibleBitmap
LPtoDP
BitBlt
CreateFontIndirectA
GetTextExtentPoint32A
CreateFontA
SetDIBColorTable
SelectObject
GetDIBColorTable
StretchBlt
DeleteObject
CreateDIBSection
CreateCompatibleDC
DeleteDC
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
shell32
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA
SHGetSpecialFolderPathA
SHBrowseForFolderA
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
oledlg
ord8
ole32
CoInitialize
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoCreateInstance
oleaut32
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
OleCreateFontIndirect
gdiplus
GdipBitmapUnlockBits
GdiplusStartup
GdiplusShutdown
GdipBitmapLockBits
GdipGetImageWidth
GdipGetImagePalette
GdipAlloc
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipCloneImage
GdipDrawImageI
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipFree
GdipGetImageHeight
iphlpapi
GetAdaptersInfo
SendARP
ws2_32
inet_addr
WSAStartup
gethostbyaddr
mpr
WNetOpenEnumA
WNetCloseEnum
WNetEnumResourceA
netapi32
NetShareDel
NetShareEnum
NetApiBufferFree
Sections
.text Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 338KB - Virtual size: 337KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ