Static task
static1
Behavioral task
behavioral1
Sample
b911c2668a7b98b620ca8314662a0e7938f892976d038cf179cb87fce5653dd6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b911c2668a7b98b620ca8314662a0e7938f892976d038cf179cb87fce5653dd6.exe
Resource
win10v2004-20221111-en
General
-
Target
b911c2668a7b98b620ca8314662a0e7938f892976d038cf179cb87fce5653dd6
-
Size
156KB
-
MD5
b64a7dfd731d2d30b59561bd89a68ff3
-
SHA1
0aceafaa92b4c3726d5ec5c96fac31b2d26375a9
-
SHA256
b911c2668a7b98b620ca8314662a0e7938f892976d038cf179cb87fce5653dd6
-
SHA512
99388d79257f19e07bcd71847b281e81c70641616a6b654a28c0d5d28a65309f835e18779850f488de971b87bf76f12e72106d9fb20fb2a417e66024a396c06c
-
SSDEEP
3072:D+gtxCUCkKgtcRz+YpZgR/MpuHC7texWex:DNCDkKY7/47k0ex
Malware Config
Signatures
Files
-
b911c2668a7b98b620ca8314662a0e7938f892976d038cf179cb87fce5653dd6.exe windows x86
52305f9d828ba19a40bc44228c241c26
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetFileTitleW
shell32
DragQueryFileW
DragAcceptFiles
ExtractIconW
SHGetFileInfoW
ShellExecuteW
DragFinish
ole32
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitializeEx
CoInitialize
advapi32
RegSetValueW
RegSetValueExW
RegCreateKeyW
RegCreateKeyExW
GetFileSecurityW
SetFileSecurityW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
gdi32
CombineRgn
SetRectRgn
CreateRectRgnIndirect
GetBkColor
StretchDIBits
CreateFontW
GetCharWidthW
PatBlt
CreatePatternBrush
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
SetViewportExtEx
SetTextColor
CreateFontIndirectW
GetStockObject
CreateSolidBrush
GetDeviceCaps
GetClipBox
GetObjectW
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
GetTextMetricsW
GetTextExtentPoint32W
SaveDC
RestoreDC
SetBkMode
SetMapMode
ExcludeClipRect
IntersectClipRect
DeleteObject
SelectClipRgn
SetBkColor
BitBlt
GetPixel
CreateRectRgn
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
ScaleViewportExtEx
shlwapi
PathStripToRootW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
PathIsUNCW
kernel32
GetEnvironmentStrings
InterlockedIncrement
InterlockedDecrement
FreeEnvironmentStringsA
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
SetProcessPriorityBoost
FindNextChangeNotification
CreateTimerQueue
GetProcessHeap
GetProcessIoCounters
CancelIo
ClearCommBreak
AreFileApisANSI
GetProcessTimes
GetMailslotInfo
GetCommTimeouts
GetLogicalDrives
GetNamedPipeHandleStateA
LocalUnlock
GetTapeParameters
FindFirstFileExW
DisableThreadLibraryCalls
SetStdHandle
FreeResource
EraseTape
GetProcessPriorityBoost
PrepareTape
DecodePointer
SetHandleInformation
ResetEvent
SetCommState
GetModuleFileNameA
EncodeSystemPointer
GetModuleFileNameW
CreateIoCompletionPort
CreateMemoryResourceNotification
GlobalUnlock
GlobalDeleteAtom
CancelWaitableTimer
GetThreadContext
IsProcessInJob
GetWriteWatch
FreeLibrary
GetACP
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
GetLastError
CreateFileW
SizeofResource
LockResource
LoadResource
FindResourceW
lstrcpyW
GlobalLock
GlobalAlloc
LoadLibraryW
GetModuleHandleW
SetLastError
MultiByteToWideChar
WideCharToMultiByte
MulDiv
lstrlenW
LocalFree
FormatMessageW
GlobalFree
GetCurrentThreadId
GetVersionExA
lstrcmpW
CompareStringW
GetVersionExW
GlobalFindAtomW
GlobalAddAtomW
GlobalGetAtomNameW
GetCurrentProcessId
GetModuleHandleA
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
GetFileAttributesW
SetFileTime
GetFileTime
GetTempFileNameW
GetFullPathNameW
GetDiskFreeSpaceW
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
lstrlenA
GetThreadLocale
FileTimeToSystemTime
SystemTimeToFileTime
WritePrivateProfileStringW
MoveFileW
DeleteFileW
GetStringTypeExW
lstrcmpiW
ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileW
GetVolumeInformationW
GetShortPathNameW
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetFileSizeEx
SetErrorMode
GetStartupInfoW
RtlUnwind
RaiseException
SetEnvironmentVariableA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
VirtualAlloc
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
TerminateProcess
GetCPInfo
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
HeapSize
ExitProcess
Sleep
HeapReAlloc
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 13.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ