Static task
static1
Behavioral task
behavioral1
Sample
942dcbbb1b0ba562bee266d985f28fb37ce991ea1dc15386e849fde372ac0d59.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
942dcbbb1b0ba562bee266d985f28fb37ce991ea1dc15386e849fde372ac0d59.exe
Resource
win10v2004-20220901-en
General
-
Target
942dcbbb1b0ba562bee266d985f28fb37ce991ea1dc15386e849fde372ac0d59
-
Size
110KB
-
MD5
2ff3f0c6db02599c30cbc824f8f0557e
-
SHA1
dc94423b40f752f1a367ec6aa7de9a60f8203e23
-
SHA256
942dcbbb1b0ba562bee266d985f28fb37ce991ea1dc15386e849fde372ac0d59
-
SHA512
7d01377568367cdc864f114be32d9782d5fb7cc8c0119eda67c0157d89539e57c49b7a5b61a1c11304661fe34ca113c1dabddd5329479da97ca77f72231a9a2a
-
SSDEEP
3072:/7M1Pjbt3xiVVLq/Pyg9xhDPQFu3KZrc6y2:/7M3thuVW9LDPv6D
Malware Config
Signatures
Files
-
942dcbbb1b0ba562bee266d985f28fb37ce991ea1dc15386e849fde372ac0d59.exe windows x86
1c24828e67936344bbbc9be0b7e81bdc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBeep
EnumDisplaySettingsA
BroadcastSystemMessageA
NotifyWinEvent
CreateIconFromResource
OemToCharW
PtInRect
GetDlgItemTextW
CharToOemW
GetWindowPlacement
ExcludeUpdateRgn
SetMessageExtraInfo
SendMessageTimeoutW
CloseDesktop
EditWndProc
CopyAcceleratorTableW
DeleteMenu
RegisterClassA
DrawTextW
EnumClipboardFormats
CharUpperA
SetScrollPos
RegisterDeviceNotificationW
ScrollDC
OemToCharA
TabbedTextOutA
RegisterDeviceNotificationA
LoadKeyboardLayoutA
CopyImage
CreateMenu
GetNextDlgGroupItem
CheckMenuRadioItem
IsCharAlphaW
GetMenuStringW
GetForegroundWindow
PostQuitMessage
GetClassInfoExA
GetWindowRgn
GetMenu
EnumDesktopWindows
FreeDDElParam
UnregisterClassW
CreateDialogParamW
EnumDisplayDevicesW
IsIconic
ScreenToClient
DdeDisconnectList
SendIMEMessageExA
MonitorFromWindow
EnableWindow
IsWindowVisible
MonitorFromRect
CreateWindowStationA
MessageBoxIndirectA
EnumThreadWindows
GetWindowLongA
TranslateMDISysAccel
GetKeyNameTextA
SetWindowRgn
GetClassWord
RemovePropW
IntersectRect
DlgDirSelectComboBoxExA
DdeCreateDataHandle
LoadCursorFromFileA
CharUpperBuffA
GetDlgItemInt
DrawCaption
CreateMDIWindowW
SetProcessWindowStation
OpenDesktopW
GetClipboardFormatNameW
SetKeyboardState
DdeCmpStringHandles
VkKeyScanA
GetMenuItemInfoW
FlashWindowEx
SetDlgItemInt
GetWindowLongW
MapVirtualKeyExA
SetDoubleClickTime
IsDialogMessageW
EnumDisplaySettingsExW
DdeQueryStringW
GetMonitorInfoA
SetLastErrorEx
MessageBoxExW
ReleaseCapture
IsWindowEnabled
GetScrollInfo
RedrawWindow
GetMessageA
GetOpenClipboardWindow
EnumDisplaySettingsExA
MonitorFromPoint
OpenInputDesktop
ReleaseDC
DdeClientTransaction
WaitForInputIdle
GetDlgItemTextA
GetKeyboardLayout
CreateCursor
SetClipboardViewer
DestroyMenu
EnumWindowStationsA
InSendMessageEx
GetMenuDefaultItem
BringWindowToTop
GetAsyncKeyState
SetRectEmpty
GetWindowModuleFileNameW
GetMessageExtraInfo
UnregisterDeviceNotification
OpenWindowStationW
InsertMenuItemW
SetPropW
DrawFrameControl
LookupIconIdFromDirectoryEx
LoadBitmapA
ToAscii
GetWindowModuleFileNameA
EnumDisplayMonitors
ShowScrollBar
LookupIconIdFromDirectory
WINNLSEnableIME
CreateWindowExW
WINNLSGetIMEHotkey
EnumWindowStationsW
IsCharAlphaNumericA
EnumDisplayDevicesA
GetKBCodePage
RegisterClipboardFormatA
GetIconInfo
GetListBoxInfo
DlgDirListW
GetClientRect
IsRectEmpty
EndDeferWindowPos
SetCapture
DestroyWindow
DdeEnableCallback
ShowWindow
BroadcastSystemMessageW
GetCaretPos
GetPropW
DlgDirSelectExW
EnableScrollBar
RemovePropA
CreateDialogParamA
ChangeDisplaySettingsA
SetScrollInfo
SetClassLongW
SetForegroundWindow
SystemParametersInfoA
GetSysColorBrush
GetScrollPos
GetInputState
AppendMenuA
GetMenuBarInfo
GetDesktopWindow
GetCaretBlinkTime
IsCharLowerA
InvalidateRgn
DrawIconEx
DrawStateW
SetWindowPlacement
SetShellWindow
InSendMessage
IsZoomed
DdeUninitialize
GetLastActivePopup
CallMsgFilterA
SetCaretBlinkTime
GetClassInfoA
ChildWindowFromPoint
CreateAcceleratorTableA
GetMessageTime
InvalidateRect
MessageBoxW
FindWindowExW
BroadcastSystemMessage
MsgWaitForMultipleObjectsEx
WaitMessage
RegisterClassExW
UnregisterHotKey
IsCharUpperW
DragDetect
CreateDialogIndirectParamW
LoadStringA
LoadImageA
CascadeWindows
ShowOwnedPopups
DdeAbandonTransaction
LoadMenuA
ChangeDisplaySettingsExW
CreateDesktopW
KillTimer
CharNextExA
CopyAcceleratorTableA
ChangeMenuA
AnimateWindow
GetWindow
CountClipboardFormats
PeekMessageW
LoadStringW
DefFrameProcA
GetProcessWindowStation
GetDC
ReplyMessage
OpenWindowStationA
GetClipboardData
CharUpperW
DefDlgProcW
ImpersonateDdeClientWindow
GetWindowWord
DdeInitializeW
CharLowerBuffW
ole32
CoCreateInstance
OleConvertOLESTREAMToIStorage
CreateDataAdviseHolder
OleCreateMenuDescriptor
CoInitialize
OleGetClipboard
StringFromIID
kernel32
IsValidLocale
HeapDestroy
CloseHandle
GetStdHandle
ReadFile
RtlFillMemory
Heap32ListNext
GlobalSize
VirtualAlloc
WriteConsoleOutputAttribute
GetConsoleCursorInfo
GetFullPathNameW
FindFirstFileA
GetLocalTime
lstrcmp
ExpandEnvironmentStringsA
SetLocaleInfoW
CreateFiber
GetACP
Process32First
CreateEventW
VirtualUnlock
WinExec
OpenMutexA
SetThreadAffinityMask
CancelIo
FoldStringA
GetFileAttributesExA
Process32Next
ReadConsoleInputW
GetSystemDirectoryW
FlushConsoleInputBuffer
GetStartupInfoA
Thread32First
GetNumberOfConsoleInputEvents
GetProcessHeap
DeleteFileA
CopyFileExA
SizeofResource
lstrcatA
GetProcessAffinityMask
SwitchToThread
LoadLibraryExA
lstrcmpiA
TlsGetValue
FindResourceW
GetProcAddress
ReleaseMutex
GetFileType
SetSystemPowerState
ScrollConsoleScreenBufferA
DuplicateHandle
ConvertDefaultLocale
CompareStringW
SetCalendarInfoA
LocalShrink
SetThreadPriority
FindResourceExA
CopyFileW
RequestDeviceWakeup
GetProcessShutdownParameters
GetModuleHandleW
FillConsoleOutputAttribute
IsBadReadPtr
HeapCompact
IsBadWritePtr
GetVersion
TlsAlloc
WaitNamedPipeA
WriteConsoleW
GetAtomNameW
VirtualQueryEx
SetSystemTimeAdjustment
GetCurrentDirectoryW
SetEnvironmentVariableA
QueryPerformanceCounter
UnlockFile
GetPrivateProfileIntA
EnumCalendarInfoW
GlobalFlags
SetComputerNameW
SetConsoleActiveScreenBuffer
CreateSemaphoreW
GetCurrentThreadId
WaitForMultipleObjects
GetBinaryType
EnumSystemCodePagesW
LoadLibraryA
GetFileSize
VerLanguageNameA
RaiseException
WriteFileEx
VirtualProtectEx
SignalObjectAndWait
FindAtomA
GetDiskFreeSpaceA
MapViewOfFileEx
GetLogicalDriveStringsW
LockResource
UnhandledExceptionFilter
ReadConsoleOutputAttribute
ReadFileScatter
GetVersionExA
HeapFree
FindResourceA
GetUserDefaultLCID
SetVolumeLabelW
GetAtomNameA
OpenFileMappingW
CreateSemaphoreA
GetCurrencyFormatA
GetProcessHeaps
PeekNamedPipe
LocalAlloc
EnumResourceTypesA
GetPrivateProfileSectionNamesW
GetProfileStringA
UnlockFileEx
GetCurrencyFormatW
VirtualFreeEx
GetProfileStringW
FormatMessageA
SetHandleInformation
SetWaitableTimer
CreateNamedPipeA
GlobalFree
GetThreadLocale
GetNamedPipeHandleStateW
WriteConsoleOutputW
GetFileTime
HeapWalk
GetConsoleTitleW
GetQueuedCompletionStatus
IsBadStringPtrA
GetTimeFormatW
GetFileAttributesW
CreateWaitableTimerW
QueryDosDeviceW
CreateDirectoryW
HeapCreate
CreateMutexW
TlsFree
GetCurrentDirectoryA
GetCurrentProcess
GetTempPathA
GetComputerNameA
GetCPInfo
GetStringTypeW
FormatMessageW
GetProfileIntW
MoveFileW
FindFirstFileW
FreeEnvironmentStringsW
GlobalReAlloc
LocalFlags
lstrcmpW
FreeLibrary
ConnectNamedPipe
CreateConsoleScreenBuffer
ResumeThread
CancelWaitableTimer
GetConsoleScreenBufferInfo
GetCPInfoExW
OpenWaitableTimerW
SetFileTime
GetProfileIntA
GetEnvironmentStringsA
lstrcpynA
LockFileEx
VirtualProtect
advapi32
SetFileSecurityW
RegSetValueExW
AddAccessAllowedAce
CryptDuplicateKey
GetSecurityInfo
RegSaveKeyW
GetSidIdentifierAuthority
CryptSetProvParam
CryptReleaseContext
GetNamedSecurityInfoA
SetEntriesInAclA
RegRestoreKeyA
GetAccessPermissionsForObjectW
GetSecurityInfoExW
CryptSetKeyParam
shlwapi
StrFormatByteSizeW
PathIsUNCA
SHAutoComplete
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ