Static task
static1
Behavioral task
behavioral1
Sample
da3e4a90730fc87a198eaa4b83c65641f43b0835ba2ff79ddabb2cc5bc794c91.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
da3e4a90730fc87a198eaa4b83c65641f43b0835ba2ff79ddabb2cc5bc794c91.exe
Resource
win10v2004-20221111-en
General
-
Target
da3e4a90730fc87a198eaa4b83c65641f43b0835ba2ff79ddabb2cc5bc794c91
-
Size
213KB
-
MD5
f4c943788a058834e5589fb5d6adeaa1
-
SHA1
45bcee81c82ba663b256976f1a2a328e42f50ca3
-
SHA256
da3e4a90730fc87a198eaa4b83c65641f43b0835ba2ff79ddabb2cc5bc794c91
-
SHA512
e24214d25c6bf3b8ebc7eab722ac3e467433e6f10320aa9e68c0110c86c05c37bcd38c7122f8c738565e4f9a83afc745c5eb52511fe02f4f43bc57169631cfc1
-
SSDEEP
3072:ea9JyHCjnEN5SurHIyyr0H6yL6PrKr/Y6N0j55uw4omPMU0GhSRmV2/:ecUHOENxEtrKr3ejbmMKy
Malware Config
Signatures
Files
-
da3e4a90730fc87a198eaa4b83c65641f43b0835ba2ff79ddabb2cc5bc794c91.exe windows x86
4a87474c02ecbe0b14a84b16e46e31ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
AppendMenuW
RegisterWindowMessageW
ShowCursor
IsWindow
DestroyCursor
DragDetect
GetCapture
CreateDialogIndirectParamW
RegisterClassExW
ReleaseCapture
FindWindowW
IsWindowUnicode
SetWindowLongA
SetClipboardData
GetMenuState
CreateAcceleratorTableW
LoadBitmapW
CreateCursor
ScrollWindow
SetScrollInfo
InsertMenuItemW
LoadStringW
SetMenuItemInfoW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageA
GetMessageW
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetMonitorInfoW
SetForegroundWindow
SetWindowPlacement
CheckMenuRadioItem
EnableMenuItem
CheckMenuItem
DestroyAcceleratorTable
GetSubMenu
GetMenuItemID
ModifyMenuW
DialogBoxIndirectParamW
DialogBoxParamW
RemoveMenu
LoadIconW
DestroyIcon
mouse_event
GetDesktopWindow
GetDCEx
WindowFromPoint
PtInRect
LockWindowUpdate
SetDlgItemInt
MapWindowPoints
GetKeyState
TrackPopupMenu
GetWindowTextW
MessageBoxA
SetCapture
GetActiveWindow
IsChild
GetDlgCtrlID
RedrawWindow
GetCursorPos
SetWindowsHookExW
UnhookWindowsHookEx
SetParent
SetWindowTextW
MonitorFromWindow
CallNextHookEx
CreatePopupMenu
CreateMenu
InsertMenuW
DestroyMenu
CallWindowProcA
CharUpperW
CharLowerW
DrawIcon
EndDialog
ScreenToClient
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
CreateDialogParamW
DrawFocusRect
FillRect
FrameRect
SetWindowLongW
GetWindowLongW
GetSysColor
GetClassNameW
PostQuitMessage
LoadMenuW
InflateRect
ClientToScreen
CallWindowProcW
IsWindowVisible
GetWindowRect
ShowWindow
SetWindowPos
SetClipboardViewer
ChangeClipboardChain
SendDlgItemMessageW
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
RegisterClipboardFormatW
CloseClipboard
MessageBoxW
RegisterClassW
BeginPaint
EndPaint
GetFocus
PostMessageW
LoadCursorW
SetCursor
DestroyWindow
CreateCaret
DestroyCaret
GetSystemMetrics
GetWindowPlacement
CreateWindowExW
GetScrollPos
GetScrollRange
UpdateWindow
DefWindowProcW
DrawFrameControl
GetMenu
ShowCaret
MessageBeep
DrawTextW
SetCaretPos
HideCaret
GetParent
ShowScrollBar
SetScrollRange
InvalidateRect
SetScrollPos
GetKeyboardState
ToAscii
wsprintfW
GetDC
DrawEdge
DrawTextExW
ReleaseDC
GetClientRect
MoveWindow
SetFocus
LoadImageW
DrawIconEx
GetDlgItem
SendMessageW
EnableWindow
SystemParametersInfoW
SetMenu
IsDialogMessageW
IsDialogMessageA
PeekMessageW
IsZoomed
DeleteMenu
RealChildWindowFromPoint
IsIconic
DrawMenuBar
GetMenuItemCount
GetMenuStringW
EmptyClipboard
comdlg32
GetSaveFileNameW
GetOpenFileNameW
ChooseColorW
PrintDlgW
shell32
ShellExecuteW
DragQueryFileW
DragFinish
SHGetSpecialFolderLocation
Shell_NotifyIconW
SHGetMalloc
SHBrowseForFolderW
DragQueryPoint
SHGetPathFromIDListW
ole32
CoUninitialize
CoInitialize
advapi32
RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
IsTextUnicode
RegQueryInfoKeyW
gdi32
CreatePen
GetStockObject
SetROP2
GetROP2
GetTextExtentPoint32W
CreateSolidBrush
SetTextColor
GetPixel
CreateFontIndirectW
GetObjectW
Rectangle
BitBlt
CreateFontW
SaveDC
RestoreDC
MoveToEx
LineTo
CreateHatchBrush
GetTextMetricsW
GetTextExtentPointW
GetDeviceCaps
DeleteObject
SelectObject
DeleteDC
CreateCompatibleBitmap
SetBkMode
DPtoLP
StartDocW
SetTextAlign
ExtTextOutW
EndPage
EndDoc
EnumFontFamiliesExW
CreateBitmap
CreatePatternBrush
SetBrushOrgEx
PatBlt
OffsetWindowOrgEx
SetWindowOrgEx
SetBkColor
StartPage
CreateCompatibleDC
opengl32
glColor3us
glTexCoord4fv
glPixelMapfv
glPassThrough
glTexParameterf
glTexCoord4dv
glStencilFunc
comctl32
ImageList_Create
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_Destroy
ImageList_DragEnter
ImageList_Draw
ImageList_AddMasked
ImageList_SetIconSize
InitCommonControlsEx
ImageList_EndDrag
ImageList_BeginDrag
ImageList_GetImageCount
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Add
ImageList_GetImageInfo
shlwapi
PathIsRelativeW
PathAddExtensionW
PathAppendW
PathRemoveFileSpecW
PathMatchSpecW
PathStripPathW
PathIsDirectoryW
PathCompactPathExW
PathFindFileNameW
PathFindExtensionW
PathFileExistsW
PathRemoveExtensionW
kernel32
GetSystemTimeAsFileTime
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
ReadFile
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
RtlUnwind
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalFree
LoadLibraryW
GetProcAddress
CreateFileW
GetCurrentProcessId
GetCurrentProcess
CloseHandle
GlobalFree
FreeLibrary
GetCurrentDirectoryW
SetCurrentDirectoryW
GetModuleHandleW
GetCurrentThreadId
GetLastError
GlobalLock
GlobalUnlock
GetFileAttributesW
SetFileAttributesW
MoveFileW
GetFullPathNameW
GetLongPathNameW
lstrcmpiW
DeleteFileW
GetModuleHandleA
lstrlenW
GetModuleFileNameW
lstrcatW
lstrcmpW
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
HeapReAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetStdHandle
SetEnvironmentVariableA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEndOfFile
GetDriveTypeA
CompareStringA
CompareStringW
HeapSize
ReplaceFileW
GetPrivateProfileIntA
AddAtomW
FindFirstVolumeMountPointW
SetCalendarInfoW
ReadConsoleA
GetLocaleInfoW
VerLanguageNameA
ExitProcess
HeapFree
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeA
GetStringTypeW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetCurrentDirectoryA
GetTimeFormatA
GetDateFormatA
WriteFile
GetModuleFileNameA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LocalUnlock
LoadLibraryA
HeapDestroy
HeapCreate
VirtualFree
GetCommandLineW
SetLastError
GetTempPathW
LocalAlloc
LocalLock
FindResourceW
LoadResource
LockResource
SizeofResource
GetACP
MulDiv
GetLocalTime
GetDateFormatW
GetTimeFormatW
ExpandEnvironmentStringsW
GetVersionExW
GetSystemInfo
lstrcpynW
CopyFileW
TerminateThread
FindFirstFileW
FindNextFileW
FindClose
CreateMutexW
CreateThread
GlobalSize
CreateDirectoryW
WaitForSingleObject
ReleaseMutex
Sleep
GlobalAlloc
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
lstrcpyW
Sections
.text Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ