Static task
static1
Behavioral task
behavioral1
Sample
ad2f5359220b52c3949ae988489121f27d3e9f28c9e46258823d26ef6ebf5582.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ad2f5359220b52c3949ae988489121f27d3e9f28c9e46258823d26ef6ebf5582.exe
Resource
win10v2004-20220901-en
General
-
Target
ad2f5359220b52c3949ae988489121f27d3e9f28c9e46258823d26ef6ebf5582
-
Size
317KB
-
MD5
31cd8cb7f919a1b2630b33b6dca386ca
-
SHA1
1639c28b8f964cd2c54b86380642a6c09db9e8cf
-
SHA256
ad2f5359220b52c3949ae988489121f27d3e9f28c9e46258823d26ef6ebf5582
-
SHA512
a2d1e0309569cf3c59f2e3bf4bbf3ccd0426eca5b9b91b6f6d8115eaea438527d25fa3c4cb2a1351a3741052f34b675faa277924a09352d6572b4b324d68461a
-
SSDEEP
3072:D5mM0L+Cxofp3IHnuWmAyizi4BN4Ag0FuBWmAF/+/3kQ3l48nO9f/K7oMmu34r+P:GL+qI5sVGAOHCQkQ3l48nkfNn9r+0w
Malware Config
Signatures
Files
-
ad2f5359220b52c3949ae988489121f27d3e9f28c9e46258823d26ef6ebf5582.exe windows x86
cd319c9b65c4acfdb9d64a59552ce9e5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
WindowFromPoint
WinHelpW
WinHelpA
WaitMessage
UpdateWindow
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TranslateAcceleratorA
SystemParametersInfoA
AnimateWindow
ShowScrollBar
ShowCaret
SetWindowsHookExA
SetWindowTextW
SetWindowTextA
SetWindowPos
SetWindowLongW
SetWindowLongA
SetTimer
SetScrollInfo
SetParent
SetMenu
SetKeyboardState
SetForegroundWindow
SetFocus
SetDlgItemTextW
SetDlgItemTextA
SetCursorPos
SetCursor
SetClipboardData
SetClassLongA
SetCaretPos
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
ScrollWindow
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassExW
RegisterClassW
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
PeekMessageA
OpenClipboard
OffsetRect
OemToCharBuffA
OemToCharA
MoveWindow
ModifyMenuW
ModifyMenuA
MessageBeep
MapWindowPoints
LoadMenuA
LoadImageA
LoadIconA
LoadBitmapA
LoadAcceleratorsA
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsIconic
IsDlgButtonChecked
IsDialogMessageA
IsClipboardFormatAvailable
InvalidateRect
IntersectRect
InsertMenuA
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextLengthW
GetWindowTextLengthA
GetWindowTextW
GetWindowTextA
GetWindowRect
GetWindowLongW
GetWindowLongA
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollPos
GetParent
GetWindow
GetNextDlgTabItem
GetMessageA
GetMenuStringW
GetMenuStringA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetKeyboardState
GetKeyState
GetFocus
GetDlgItemTextW
GetDlgItemTextA
GetDlgItemInt
GetDlgCtrlID
GetDC
GetCursorPos
GetClipboardFormatNameA
GetClipboardData
GetClientRect
GetClassNameW
GetClassNameA
GetClassLongA
GetClassInfoW
GetAsyncKeyState
GetActiveWindow
FindWindowA
FillRect
ExitWindowsEx
EnumClipboardFormats
EnumChildWindows
EndPaint
EndDialog
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextA
DrawStateA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DispatchMessageA
DialogBoxParamW
DestroyWindow
DestroyIcon
DestroyCaret
DeleteMenu
DefWindowProcW
DefWindowProcA
DefMDIChildProcW
DefFrameProcW
CreateWindowExW
CreateWindowExA
CreateMenu
CreateMDIWindowW
CreateCaret
CountClipboardFormats
CloseClipboard
CheckRadioButton
CheckMenuItem
CheckDlgButton
CharUpperBuffW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallWindowProcA
CallNextHookEx
BringWindowToTop
BeginPaint
AppendMenuW
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharUpperA
CharToOemBuffA
CharToOemA
GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
TrackPopupMenu
ClientToScreen
DestroyMenu
CreatePopupMenu
AppendMenuA
SendDlgItemMessageA
GetDlgItem
LoadCursorA
LoadMenuW
GetTabbedTextExtentA
ClipCursor
BroadcastSystemMessageW
CopyAcceleratorTableA
RegisterClipboardFormatW
MapVirtualKeyExA
CreateIconIndirect
RegisterDeviceNotificationW
GetWindowDC
LoadMenuIndirectW
ArrangeIconicWindows
ShowWindow
GetSystemMetrics
MessageBoxW
gdi32
GetTextExtentPoint32A
TextOutW
TextOutA
StretchDIBits
StretchBlt
StartPage
StartDocW
StartDocA
SetTextAlign
SetStretchBltMode
SetPixelV
SetPixel
SetBkColor
SelectClipRgn
RemoveFontResourceA
Rectangle
PtInRegion
MoveToEx
LineTo
GetTextMetricsA
GetTextExtentPoint32W
GetTextColor
GetPixel
GetDeviceCaps
GetDIBits
GetCharABCWidthsFloatW
GetBkColor
ExtTextOutW
ExtTextOutA
ExtCreatePen
EndPage
EndDoc
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePen
CreateFontA
CreateDIBitmap
CreateDIBSection
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
AbortDoc
GetObjectA
GetStockObject
DeleteObject
SetBkMode
SetTextColor
CreateFontIndirectA
SelectObject
CreateBitmapIndirect
AngleArc
AddFontResourceA
CloseMetaFile
CreateBrushIndirect
ColorCorrectPalette
CloseEnhMetaFile
CloseFigure
CreateDCW
AddFontResourceW
kernel32
WinExec
WaitForSingleObject
VirtualQueryEx
VirtualProtectEx
VirtualProtect
VirtualFreeEx
UnmapViewOfFile
TerminateThread
TerminateProcess
SystemTimeToFileTime
SuspendThread
Sleep
SetUnhandledExceptionFilter
SetThreadPriority
SetPriorityClass
SetLastError
SetFileTime
SetFileAttributesW
SetFileAttributesA
SetEvent
ResumeThread
ResetEvent
RemoveDirectoryW
ReadProcessMemory
QueryPerformanceFrequency
QueryPerformanceCounter
QueryDosDeviceA
OpenProcess
OpenFileMappingA
MulDiv
MoveFileExW
MoveFileW
MoveFileA
MapViewOfFile
LockResource
LocalUnlock
LocalLock
LocalFileTimeToFileTime
LoadResource
LoadLibraryW
LoadLibraryA
IsBadWritePtr
IsBadReadPtr
HeapFree
HeapAlloc
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalMemoryStatus
GlobalHandle
GlobalLock
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetVolumeInformationA
GetVersionExA
GetTimeZoneInformation
GetTickCount
GetTempPathW
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemInfo
GetShortPathNameA
GetProfileStringA
GetProcessHeap
GetModuleFileNameW
GetFileTime
GetFileAttributesW
WriteProcessMemory
GetDriveTypeA
GetDiskFreeSpaceExA
GetDiskFreeSpaceA
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetCurrentDirectoryA
GetCommandLineW
GetCPInfo
GetACP
FormatMessageW
FormatMessageA
FlushInstructionCache
FlushFileBuffers
FindResourceA
FindNextFileW
FindNextFileA
FindFirstFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumSystemCodePagesA
EnumCalendarInfoA
DosDateTimeToFileTime
DeviceIoControl
DeleteFileW
CreateThread
CreateProcessW
CreateProcessA
CreateFileW
CreateEventA
CreateDirectoryW
CopyFileW
CompareStringW
CompareStringA
TlsSetValue
TlsGetValue
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
SetFilePointer
_hread
_hwrite
_lcreat
_lopen
_lread
lstrcatA
lstrcatW
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrcpyA
lstrcpyW
lstrcpynW
lstrlenW
SetFilePointerEx
GetFileSizeEx
FindFirstVolumeA
FindNextVolumeA
GetCPInfoExA
GetLongPathNameW
GetLongPathNameA
HeapReAlloc
HeapCreate
GetModuleHandleW
IsDebuggerPresent
TlsAlloc
TlsFree
InterlockedIncrement
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetOEMCP
IsValidCodePage
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
GetFileAttributesA
DeleteTimerQueueTimer
GetStringTypeExA
HeapCompact
AddAtomW
SetCurrentDirectoryW
VirtualAllocEx
WaitForDebugEvent
CloseHandle
CreateFileA
DeleteFileA
GetFileType
GetSystemTime
GetFileSize
GetStdHandle
RaiseException
ReadFile
RtlUnwind
SetEndOfFile
Sections
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ