Static task
static1
Behavioral task
behavioral1
Sample
07f91251fd5de9b68bfc62eeca9c40641942668c0904e4872ce4463480260d12.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
07f91251fd5de9b68bfc62eeca9c40641942668c0904e4872ce4463480260d12.exe
Resource
win10v2004-20220812-en
General
-
Target
07f91251fd5de9b68bfc62eeca9c40641942668c0904e4872ce4463480260d12
-
Size
121KB
-
MD5
5d6bfaa2350ba57ce7bbf1a599d53f15
-
SHA1
ccc6ccbaeb22d99f5293e9d67bd58bd6f6b69ea9
-
SHA256
07f91251fd5de9b68bfc62eeca9c40641942668c0904e4872ce4463480260d12
-
SHA512
0665a973fd7cc02b08dd1a5c279256378bfa7e2221ad7be45500ef46231aba79bc858050d322ddda46f72f4bde0c752ea28462c51ba29f5a8a07f779a66881ff
-
SSDEEP
1536:FZsifkRJquSmNRp114f3SH+3BelWqGrx6c+5c/jgQc0avQyjfnX5vJPrVyHkxL+F:FYRLSkqrqxctVqQGnRJPrF+dT
Malware Config
Signatures
Files
-
07f91251fd5de9b68bfc62eeca9c40641942668c0904e4872ce4463480260d12.exe windows x86
4fbc07aebcbc5bd05b7cde742d12c261
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MapVirtualKeyExA
SetMessageQueue
MapVirtualKeyW
TrackPopupMenuEx
FindWindowA
DdeFreeStringHandle
GetWindowRgn
SetWindowRgn
CallMsgFilterW
CreateWindowExW
RegisterClassExW
LoadIconW
LoadCursorW
SetWindowTextW
LoadBitmapW
ExitWindowsEx
BringWindowToTop
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
EnableWindow
IsWindowEnabled
keybd_event
DeleteMenu
SetFocus
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
SetActiveWindow
GetMessageTime
GetMessagePos
MapWindowPoints
UpdateWindow
GetMenu
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CallWindowProcW
SystemParametersInfoA
IsIconic
GetWindowPlacement
MessageBeep
IsChild
GetTopWindow
GetNextDlgTabItem
GetNextDlgGroupItem
ReleaseCapture
GetDesktopWindow
SetCapture
GetClientRect
GetWindowRect
SetCursor
SetRect
IsRectEmpty
CopyAcceleratorTableW
OffsetRect
PtInRect
CharNextW
GetFocus
ChangeDisplaySettingsW
MoveWindow
GetDlgCtrlID
IsWindow
IsDialogMessageW
SendDlgItemMessageW
GetDlgItem
CharUpperW
SetWindowsHookExW
CallNextHookEx
GetActiveWindow
GetKeyState
GetCursorPos
GetWindowTextW
GetSysColorBrush
UnhookWindowsHookEx
IntersectRect
CopyRect
GetSysColor
GetWindowDC
GetDC
ClientToScreen
RegisterClipboardFormatW
InvalidateRgn
MessageBoxW
LoadStringW
RedrawWindow
GetSystemMetrics
DrawStateW
PostThreadMessageW
InvalidateRect
SystemParametersInfoW
EndPaint
ReleaseDC
DrawTextW
BeginPaint
SetForegroundWindow
DestroyMenu
EndDialog
CreateDialogIndirectParamW
UnregisterClassA
EqualRect
ShowWindow
SetWindowPos
IsWindowVisible
ValidateRect
DefWindowProcW
GetWindowLongW
DestroyWindow
DispatchMessageW
TranslateMessage
GetMessageW
PostMessageW
PeekMessageW
SetWindowLongW
GrayStringW
DrawTextExW
TabbedTextOutW
PostQuitMessage
GetWindow
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
SendMessageW
GetParent
GetLastActivePopup
comdlg32
GetFileTitleW
shell32
ShellExecuteW
SHGetFolderPathW
oledlg
OleUIBusyW
ole32
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
OleIsCurrentClipboard
CLSIDFromString
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemAlloc
CoTaskMemFree
CoRevokeClassObject
advapi32
RegEnumKeyExW
GetNumberOfEventLogRecords
RegQueryInfoKeyA
RegSaveKeyW
GetSidSubAuthority
GetServiceKeyNameW
RegEnumKeyA
AreAllAccessesGranted
PrivilegedServiceAuditAlarmA
OpenProcessToken
RegReplaceKeyW
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumValueW
RegDeleteKeyW
RegSetValueExW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
AdjustTokenPrivileges
RegQueryValueExW
RegOpenKeyW
RegEnumKeyW
RegQueryValueW
RegOpenKeyExW
LookupPrivilegeValueW
gdi32
SetBkMode
GetStockObject
DeleteObject
SetTextColor
SelectObject
CloseMetaFile
AngleArc
GetObjectW
CombineRgn
CheckColorsInGamut
AddFontResourceA
CreateBrushIndirect
AbortPath
AddFontMemResourceEx
BitBlt
GetDeviceCaps
SaveDC
RestoreDC
SetBkColor
SetMapMode
GetClipBox
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
ScaleViewportExtEx
DPtoLP
GetRgnBox
GetTextColor
GetBkColor
GetMapMode
CreateRectRgnIndirect
CreateFontIndirectW
BeginPath
SetWindowExtEx
opengl32
glFinish
wglSwapMultipleBuffers
glClear
glRasterPos4i
glGetMaterialiv
glLightModelfv
glGetMaterialfv
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
shlwapi
PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathAddBackslashW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
kernel32
GetExitCodeProcess
CreatePipe
GetFileAttributesA
CreateProcessA
MoveFileA
DeleteFileA
GetLogicalDriveStringsW
ResetEvent
FormatMessageA
GetThreadLocale
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
CompareStringA
lstrcmpW
GlobalDeleteAtom
SetErrorMode
GetModuleHandleW
FreeResource
GetCurrentProcessId
lstrlenA
GlobalFree
GlobalAlloc
GlobalLock
SetFilePointer
FormatMessageW
LocalFree
lstrlenW
MulDiv
SetLastError
GetExitCodeThread
GetDriveTypeW
WideCharToMultiByte
CreateEventW
SetEvent
GetModuleHandleA
GetCurrentProcess
GetVersionExW
GetProcAddress
LoadLibraryExW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetLocaleInfoW
GetSystemDefaultLCID
GetEnvironmentVariableW
GetCommandLineW
GetDriveTypeA
GetCurrentDirectoryA
CreateDirectoryW
RemoveDirectoryW
GetSystemDirectoryW
GetWindowsDirectoryW
GetTempPathW
GetCurrentDirectoryW
GetDiskFreeSpaceExW
GetFullPathNameW
CopyFileW
DeleteFileW
SetFileAttributesW
GetFileAttributesW
MultiByteToWideChar
SetEndOfFile
LoadLibraryW
FreeLibrary
CreateFileW
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
WriteFile
CreateFileA
SetEnvironmentVariableW
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
IsValidLocale
EnumSystemLocalesA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
QueryPerformanceCounter
HeapCreate
HeapDestroy
GetStartupInfoA
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
FlushFileBuffers
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapSize
GetFileType
SetStdHandle
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
RtlUnwind
GetLocaleInfoA
GetACP
GetTickCount
GlobalFlags
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GetFileTime
GetVolumeInformationW
DuplicateHandle
GetFileSize
UnlockFile
LockFile
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
GlobalUnlock
ReadFile
SetFilePointerEx
FindResourceExW
CreateMutexW
ReleaseMutex
GetUserDefaultLCID
GetSystemDefaultLangID
SetCurrentDirectoryW
CreateThread
WaitForSingleObject
CloseHandle
GetModuleFileNameW
GetLastError
Sleep
FindResourceW
LoadResource
LockResource
LCMapStringW
SizeofResource
IsBadStringPtrA
GetCPInfoExW
WriteProfileSectionA
CreateTapePartition
VirtualFree
HeapUnlock
RaiseException
GetCurrentThreadId
Sections
.text Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 53.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ