Static task
static1
Behavioral task
behavioral1
Sample
3241876340e3ae40f536316af68536459b409c9baf348f9bbd8c534bc017ae94.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3241876340e3ae40f536316af68536459b409c9baf348f9bbd8c534bc017ae94.exe
Resource
win10v2004-20220901-en
General
-
Target
3241876340e3ae40f536316af68536459b409c9baf348f9bbd8c534bc017ae94
-
Size
700KB
-
MD5
b59bf378ff5696f9370d940ac523c805
-
SHA1
3a07331e4a907f509a37a641d9d1d0a96afc8412
-
SHA256
3241876340e3ae40f536316af68536459b409c9baf348f9bbd8c534bc017ae94
-
SHA512
87ea6beb56172bb8ff03000db2abed851e2402d7d7387e5a196dd6135630d050c65540db948af9ec408bc55fe4e29722453bec8af61b92b5147754d5d14d51dd
-
SSDEEP
12288:4bHEtq9S8Rdgv4TEXDF9NZtNnJ/bME/fPl1xC/LY1y/eIqeISq:4MCSOdgv/TF9NDNnJzMaf9E8M/eGISq
Malware Config
Signatures
Files
-
3241876340e3ae40f536316af68536459b409c9baf348f9bbd8c534bc017ae94.exe windows x86
0fff46598225b7905f1413d1461e33ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExW
OpenThreadToken
InitializeAcl
RegEnumKeyW
RegCreateKeyExA
GetFileSecurityA
RegQueryInfoKeyW
RegQueryValueExW
CryptDeriveKey
RegCreateKeyA
RegOpenKeyExA
RegEnumKeyA
LookupPrivilegeValueW
GetTokenInformation
RegSetValueExW
RegisterEventSourceA
RegDeleteKeyA
RegEnumKeyExA
CreateServiceA
CryptDestroyHash
CloseServiceHandle
RegDeleteKeyW
RegCreateKeyExW
ImpersonateSelf
SetEntriesInAclW
RegCloseKey
FreeSid
CryptHashData
ReportEventA
IsValidSecurityDescriptor
DeregisterEventSource
RegQueryInfoKeyA
RegDeleteValueW
RegisterServiceCtrlHandlerA
CryptReleaseContext
RegFlushKey
OpenServiceA
RegOpenKeyW
AddAce
RegDeleteValueA
GetLengthSid
CryptCreateHash
RegSetValueA
RegSetValueExA
RegQueryValueExA
RegEnumValueW
AccessCheck
StartServiceCtrlDispatcherA
LookupPrivilegeValueA
SetFileSecurityW
InitializeSecurityDescriptor
EqualSid
RegSetValueW
OpenProcessToken
RegCreateKeyW
OpenSCManagerA
RegEnumValueA
AllocateAndInitializeSid
CryptAcquireContextA
AdjustTokenPrivileges
RegEnumKeyExW
RegOpenKeyA
wsock32
WSACleanup
oleaut32
LoadTypeLi
kernel32
GetSystemDirectoryA
MapViewOfFile
SuspendThread
TerminateThread
SetEnvironmentVariableW
FindFirstFileW
CreateProcessA
lstrlenW
GetEnvironmentVariableA
CreateToolhelp32Snapshot
GetTickCount
OpenFileMappingW
FreeEnvironmentStringsA
GetVersionExA
GetFileSize
FileTimeToSystemTime
GetProcessHeap
GetStringTypeW
CloseHandle
GetOEMCP
HeapDestroy
GlobalHandle
GetFileTime
SetFileAttributesA
FreeResource
GetStringTypeA
ReadFile
LoadLibraryW
lstrcpynA
GetThreadLocale
GetCommandLineW
InterlockedCompareExchange
EnumResourceLanguagesW
OpenFile
MulDiv
DuplicateHandle
GetPrivateProfileIntA
GetStartupInfoA
GetLocaleInfoW
GetSystemDefaultLangID
ResumeThread
GetLocaleInfoA
DosDateTimeToFileTime
GetUserDefaultLCID
GlobalAlloc
SetFilePointer
SizeofResource
GetSystemTimeAsFileTime
InitializeCriticalSection
GlobalAddAtomA
lstrcmpiA
LocalFree
GetProcessVersion
GetSystemInfo
lstrcatA
LocalAlloc
GetCurrentProcessId
SetUnhandledExceptionFilter
GetCurrentThread
SetEvent
GetEnvironmentStrings
HeapSize
SetStdHandle
LCMapStringA
OpenProcess
MultiByteToWideChar
FlushFileBuffers
EnumResourceLanguagesA
RaiseException
CompareStringW
TlsGetValue
GetFullPathNameW
WritePrivateProfileStringA
GetConsoleMode
GetCPInfo
MoveFileW
SetHandleCount
GetModuleFileNameW
GetFullPathNameA
GetTempPathA
TerminateProcess
GetStdHandle
RtlUnwind
HeapCreate
FormatMessageA
LockResource
GetFileType
GetDiskFreeSpaceA
CreateProcessW
LeaveCriticalSection
DeleteFileA
HeapReAlloc
lstrcmpW
lstrcpyA
GlobalGetAtomNameA
GetComputerNameA
FileTimeToLocalFileTime
CreateFileMappingA
GetSystemTime
FreeLibrary
GetModuleHandleA
FileTimeToDosDateTime
GlobalDeleteAtom
IsDebuggerPresent
OpenMutexA
VirtualFree
Sleep
SetCurrentDirectoryA
UnmapViewOfFile
InterlockedExchange
GetCurrentProcess
TlsSetValue
FreeEnvironmentStringsW
WriteConsoleA
GetEnvironmentStringsW
GetDateFormatA
WritePrivateProfileStringW
QueryPerformanceCounter
GetLastError
VirtualAlloc
GetVersionExW
UnhandledExceptionFilter
IsValidCodePage
WriteConsoleW
SetConsoleCtrlHandler
_llseek
GlobalFindAtomA
FindNextFileA
VirtualProtect
CreateThread
GlobalFree
WaitForSingleObject
FindClose
LocalFileTimeToFileTime
GlobalSize
CreateFileA
CreateDirectoryA
EnterCriticalSection
GetConsoleCP
GetProfileStringA
FatalAppExitA
SetLastError
GetCommandLineA
InterlockedIncrement
GetUserDefaultUILanguage
GetACP
GlobalFlags
IsBadCodePtr
VirtualQuery
GetConsoleOutputCP
HeapFree
DeleteCriticalSection
RemoveDirectoryA
CreateMutexA
GetTimeFormatA
GetVersion
GetStringTypeExW
GetCurrentThreadId
FormatMessageW
GetLocalTime
_lcreat
GlobalReAlloc
GlobalLock
InterlockedDecrement
QueryPerformanceFrequency
WriteFile
SetErrorMode
UnlockFile
EnumSystemLocalesA
TlsFree
GetModuleFileNameA
CopyFileA
TlsAlloc
LoadLibraryA
lstrlenA
LCMapStringW
GetTimeZoneInformation
GetStartupInfoW
WideCharToMultiByte
CompareStringA
OpenEventA
LocalReAlloc
GlobalUnlock
GetUserDefaultLangID
HeapAlloc
FindResourceA
GetProcAddress
GetCurrentDirectoryA
GetExitCodeThread
_lwrite
FindNextFileW
GetVolumeInformationA
SetEnvironmentVariableA
GetStringTypeExA
FindFirstFileA
CreateSemaphoreA
ExitProcess
IsValidLocale
LoadResource
SetEndOfFile
ExitThread
lstrcmpA
LockFile
user32
EndDialog
AdjustWindowRect
KillTimer
SetTimer
AppendMenuA
GetDlgCtrlID
GetMenuItemID
OemToCharBuffA
PtInRect
GetClipboardFormatNameA
WaitMessage
GetScrollPos
SendDlgItemMessageA
ShowCursor
GetLastActivePopup
UnregisterHotKey
GetClassInfoW
PostMessageA
SystemParametersInfoA
GetScrollInfo
SetClipboardData
GetWindowRgn
GetMenuStringA
GetAsyncKeyState
GetWindowLongA
DrawIconEx
wsprintfW
IsWindow
SetWindowLongA
DrawStateA
SetDlgItemInt
EndDeferWindowPos
RegisterWindowMessageA
GetUpdateRgn
GetDCEx
GetPropA
TranslateMessage
UnpackDDElParam
IsWindowVisible
InvalidateRect
WindowFromPoint
CreateWindowExW
SendMessageA
ChangeClipboardChain
LoadAcceleratorsA
TabbedTextOutA
DdeFreeStringHandle
EmptyClipboard
GetClassLongW
GetWindowTextA
CopyIcon
TranslateAcceleratorA
RegisterWindowMessageW
ModifyMenuA
SetRectEmpty
IsDialogMessageW
GetClassNameA
InvalidateRgn
GetCapture
TrackPopupMenuEx
BringWindowToTop
GetWindowDC
GetClassLongA
LoadImageA
CopyRect
SetWindowTextA
HideCaret
BeginDeferWindowPos
GetDC
GetWindowTextLengthA
CloseWindow
EnableMenuItem
SetMenuItemInfoW
CharNextA
LoadBitmapA
LoadMenuA
GetWindowLongW
SetPropW
PeekMessageW
SetPropA
GetMessageW
MapWindowPoints
RegisterClassExA
LoadIconA
GetSysColor
TrackPopupMenu
RemoveMenu
GetClassNameW
DialogBoxParamA
ShowWindow
SetWindowPos
DrawFocusRect
LoadCursorW
IsDialogMessageA
RemovePropA
SetScrollRange
DrawTextA
SetWindowRgn
DestroyMenu
GetScrollRange
GetParent
SetCursorPos
GetMenuItemInfoA
IsClipboardFormatAvailable
SetWindowsHookExW
LoadCursorA
GetDesktopWindow
GetUpdateRect
SetRect
IsChild
CopyAcceleratorTableW
DrawTextW
wvsprintfA
GetIconInfo
FillRect
PostQuitMessage
SetWindowsHookExA
WinHelpA
PeekMessageA
GetSysColorBrush
SetWindowLongW
DestroyCursor
RegisterClassA
CheckMenuItem
SetCapture
EnableWindow
SetDlgItemTextA
SetCursor
GetKeyboardState
SetParent
SetMenuItemBitmaps
MessageBeep
GetClassInfoA
mouse_event
RegisterClassW
DefWindowProcW
CreateWindowExA
ModifyMenuW
InsertMenuW
IsMenu
LoadStringA
MoveWindow
UnionRect
LockWindowUpdate
SetWindowContextHelpId
EndPaint
LoadBitmapW
SetMenuDefaultItem
GetWindowRect
GetCursorPos
SetMenu
MessageBoxW
GetMenuItemCount
DestroyIcon
RemovePropW
ReleaseDC
CloseClipboard
GetDlgItem
UnhookWindowsHookEx
ClientToScreen
DrawIcon
IsIconic
DispatchMessageA
GetMenuItemInfoW
ShowScrollBar
DrawMenuBar
InsertMenuA
CheckDlgButton
InsertMenuItemA
LoadIconW
GetWindow
GetMonitorInfoW
GetMenuCheckMarkDimensions
GetMenu
ScreenToClient
EnumWindows
DrawFrameControl
RegisterClipboardFormatA
wsprintfA
GetForegroundWindow
GrayStringA
CreateDialogParamW
CallWindowProcW
SendDlgItemMessageW
TranslateMDISysAccel
GetClassInfoExA
GetWindowPlacement
GetMessageA
GetMessagePos
OffsetRect
DestroyWindow
FrameRect
ReleaseCapture
InflateRect
DefDlgProcA
CharUpperA
SetActiveWindow
UpdateWindow
CreateDialogIndirectParamW
ShowOwnedPopups
UnregisterClassA
EqualRect
GetMenuState
FindWindowA
GetKeyState
GetNextDlgTabItem
SetWindowTextW
BeginPaint
LoadMenuW
IsRectEmpty
MapVirtualKeyExA
AttachThreadInput
LoadImageW
RegisterClipboardFormatW
CallNextHookEx
CreateCaret
GetActiveWindow
IsWindowEnabled
SystemParametersInfoW
SetForegroundWindow
AdjustWindowRectEx
ExcludeUpdateRgn
MessageBoxA
CreatePopupMenu
SendMessageW
ValidateRect
SetFocus
GetSubMenu
PostThreadMessageA
GetSystemMenu
IntersectRect
DefWindowProcA
UnregisterClassW
SetScrollPos
GetSystemMetrics
GetWindowTextW
OpenClipboard
GetFocus
MapDialogRect
EnumChildWindows
SetWindowPlacement
DialogBoxIndirectParamW
GetMessageTime
GetClientRect
mfc42
ord1576
comctl32
ImageList_SetDragCursorImage
ImageList_EndDrag
PropertySheetW
ImageList_GetImageCount
ImageList_Read
ImageList_SetOverlayImage
ImageList_SetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_DragLeave
PropertySheetA
ImageList_DragMove
ImageList_LoadImageA
ImageList_Write
ImageList_GetImageInfo
ImageList_Draw
ImageList_AddMasked
ImageList_GetIconSize
ImageList_DragEnter
_TrackMouseEvent
CreateStatusWindowW
InitCommonControlsEx
ImageList_Add
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
DestroyPropertySheetPage
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_DragShowNolock
ImageList_Create
CreatePropertySheetPageA
ord17
Sections
.text Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 456KB - Virtual size: 455KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ