Static task
static1
Behavioral task
behavioral1
Sample
9388b55707c22b72da885b89427efd796956deb9762055458d1784892ddcd057.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9388b55707c22b72da885b89427efd796956deb9762055458d1784892ddcd057.exe
Resource
win10v2004-20220812-en
General
-
Target
9388b55707c22b72da885b89427efd796956deb9762055458d1784892ddcd057
-
Size
696KB
-
MD5
b1154539e7001110fa1f69dc8104f49d
-
SHA1
8c0ba392a4a8b8dc447e22558ef819163c18fe06
-
SHA256
9388b55707c22b72da885b89427efd796956deb9762055458d1784892ddcd057
-
SHA512
79bb4efa35eeecc1d89d546ef66146175aec5a3a2ec948c9ca79c5053dd93d4b6ffeb7f1b8bef07d3196ffbb68f8209e902bc96dc487239524a8d04d629b8ffa
-
SSDEEP
12288:IAa58tDKt3kJ3lqPeNMbPbmfptVd4plXw9J7vEnyAKmYRQ58ZJI9ZDJRRbpLn:ISeUJ3wVbDmfvVoEAnyDmYQjzJRRh
Malware Config
Signatures
Files
-
9388b55707c22b72da885b89427efd796956deb9762055458d1784892ddcd057.exe windows x86
477f9ceeeae5b78af7ba98ab7f8e3e01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winspool.drv
DocumentPropertiesA
GetPrinterDriverDirectoryA
OpenPrinterA
EnumJobsA
ord204
EnumPrintersA
ClosePrinter
AddPrinterA
EnumPrinterDriversA
AddPrinterDriverA
advapi32
RegOpenKeyExW
GetFileSecurityW
GetUserNameW
RegEnumKeyW
RegSetValueExW
RegCreateKeyW
RegOpenKeyExA
RegCloseKey
InitializeSecurityDescriptor
RegEnumValueW
RegQueryValueW
RegOpenKeyW
RegDeleteKeyW
RegQueryInfoKeyW
RegQueryValueExW
SetSecurityDescriptorDacl
RegQueryValueExA
RegCreateKeyExW
RegDeleteValueW
user32
SetWindowsHookExW
GetWindowThreadProcessId
GetKeyState
GetWindowTextLengthW
RegisterClipboardFormatW
CreateWindowExW
DestroyMenu
InvalidateRect
GetParent
GetSubMenu
SetFocus
LoadBitmapW
SetTimer
PeekMessageW
DrawFocusRect
GetMenuItemCount
InsertMenuItemW
ShowWindow
TrackPopupMenu
GetClassLongW
wvsprintfW
GetMenuStringW
CharUpperW
SetMenuItemInfoW
GetDesktopWindow
wsprintfW
IsChild
BeginPaint
IsWindowVisible
RegisterClassW
MoveWindow
IntersectRect
CopyRect
GetSysColor
GetMenuCheckMarkDimensions
GetActiveWindow
IsWindowEnabled
OffsetRect
GetMessageW
LoadCursorW
SendMessageW
EndPaint
EnableWindow
DestroyWindow
SetCapture
DefWindowProcW
ScreenToClient
BringWindowToTop
FindWindowW
MessageBoxW
OpenClipboard
CreateAcceleratorTableW
LoadStringW
GetDC
EndDialog
GetWindowPlacement
RegisterClassExW
DestroyCaret
GetSysColorBrush
AppendMenuW
GetWindowDC
PostQuitMessage
DestroyAcceleratorTable
SetWindowTextW
GetClientRect
IsIconic
GetCapture
SetWindowRgn
GetWindow
GetDlgItem
GetClassInfoW
LoadAcceleratorsW
RegisterWindowMessageW
ReleaseCapture
comctl32
ord17
InitCommonControlsEx
ImageList_Create
ImageList_Destroy
gdi32
ExtTextOutA
RoundRect
SetDIBitsToDevice
SetViewportExtEx
LineTo
GetWindowExtEx
GetViewportOrgEx
GetTextMetricsA
SetPixel
SetTextAlign
SetDIBColorTable
PtVisible
RestoreDC
GetTextColor
Escape
DPtoLP
DeleteObject
OffsetRgn
GetTextCharsetInfo
SetWindowExtEx
SaveDC
shell32
SHGetSpecialFolderPathA
Shell_NotifyIconA
ShellExecuteA
SHGetSpecialFolderLocation
SHChangeNotify
SHGetMalloc
ord155
SHFileOperationA
SHBrowseForFolderA
SHGetFileInfoA
DragAcceptFiles
DragFinish
SHGetPathFromIDListA
SHGetDesktopFolder
kernel32
GetACP
SetErrorMode
InitializeCriticalSection
GetStringTypeExW
ResetEvent
GetStringTypeA
ExpandEnvironmentStringsA
GetOEMCP
CreateEventW
GetDateFormatA
lstrlenW
QueryPerformanceCounter
LocalReAlloc
CreateProcessW
GetTimeFormatA
GetUserDefaultLCID
lstrcpyA
GetCommandLineA
HeapReAlloc
GetPrivateProfileStringW
ReadFile
GetCurrentThread
GetLocalTime
LoadLibraryW
CreateMutexW
FindClose
SetFileAttributesW
MapViewOfFile
SetThreadPriority
GetUserDefaultLangID
GlobalReAlloc
ReleaseMutex
GetModuleFileNameA
GetCommandLineW
WideCharToMultiByte
GetStartupInfoW
CreateThread
HeapFree
LoadResource
GlobalDeleteAtom
TerminateProcess
SizeofResource
GetTimeZoneInformation
GetCurrentThreadId
WaitForSingleObject
DeleteFileW
HeapSize
GetVolumeInformationW
FindNextFileW
GetDriveTypeA
FileTimeToSystemTime
GetVersionExA
lstrcatW
GetWindowsDirectoryW
InterlockedExchange
LoadLibraryA
GetSystemTime
CopyFileW
FindResourceW
CompareStringA
FreeLibrary
CompareStringW
lstrcpynW
VirtualProtect
WriteConsoleA
GlobalFlags
TlsFree
GetStdHandle
LocalFileTimeToFileTime
GetStartupInfoA
CreateFileA
SetFileTime
SetStdHandle
GetLastError
FlushFileBuffers
InterlockedDecrement
GetModuleFileNameW
EnterCriticalSection
InterlockedIncrement
GlobalUnlock
GetThreadLocale
IsBadCodePtr
IsDebuggerPresent
lstrcmpiW
GetLocaleInfoW
lstrlenA
GlobalFree
lstrcmpiA
CreateDirectoryW
LeaveCriticalSection
CloseHandle
MoveFileW
SetHandleCount
GetTickCount
RtlUnwind
SetFilePointer
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
FormatMessageW
IsBadWritePtr
SetLastError
GetCPInfo
GetFileAttributesW
LoadLibraryExW
GetCurrentProcess
InterlockedCompareExchange
CreateFileW
FreeEnvironmentStringsW
HeapDestroy
GetEnvironmentStringsW
MulDiv
GetProcAddress
lstrcpyW
VirtualQuery
WriteFile
GlobalHandle
LCMapStringA
GlobalSize
TlsGetValue
VirtualAlloc
GetFileSize
HeapAlloc
SetEnvironmentVariableA
ExitProcess
GetProcessHeap
HeapCreate
DuplicateHandle
SetUnhandledExceptionFilter
CreateFileMappingW
lstrcmpA
GetFileType
MultiByteToWideChar
FindFirstFileW
GetCurrentDirectoryA
GetTempPathW
UnlockFile
GetLocaleInfoA
GetVersion
DeleteCriticalSection
GetSystemInfo
UnhandledExceptionFilter
SuspendThread
IsValidLocale
LockFile
LockResource
LocalAlloc
FreeResource
OpenProcess
ResumeThread
GlobalAlloc
GetFullPathNameW
GlobalLock
lstrcmpW
IsBadReadPtr
GetTempFileNameW
SystemTimeToFileTime
LCMapStringW
UnmapViewOfFile
ConvertDefaultLocale
TlsAlloc
TerminateThread
RemoveDirectoryW
VirtualFree
RaiseException
GlobalAddAtomW
GetEnvironmentStrings
Sleep
WritePrivateProfileStringW
GetModuleHandleW
GetFileTime
GetVersionExW
SetEndOfFile
FreeEnvironmentStringsA
LocalFree
GetStringTypeW
TlsSetValue
FileTimeToLocalFileTime
GetCurrentDirectoryW
ExitThread
SetEvent
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 468KB - Virtual size: 465KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ