Static task
static1
Behavioral task
behavioral1
Sample
94e1a64ee00ef803b1164b10d55ecee1b51110fff689afa4422913a5347608f4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
94e1a64ee00ef803b1164b10d55ecee1b51110fff689afa4422913a5347608f4.exe
Resource
win10v2004-20220812-en
General
-
Target
94e1a64ee00ef803b1164b10d55ecee1b51110fff689afa4422913a5347608f4
-
Size
214KB
-
MD5
3f9554f635dad191e06b5b323e211770
-
SHA1
3487e4aa5266949629f33623f1853f5fa8fc3191
-
SHA256
94e1a64ee00ef803b1164b10d55ecee1b51110fff689afa4422913a5347608f4
-
SHA512
d69d90d921169da430a65aa31a7c8bc1040487f6e6641f1f53f7edc21942f1dd0d943e98847b8da929fa0128527278f7d88fbb1c01c73e03d6071efbc50fcef4
-
SSDEEP
1536:mbTG3aaylH1QKq9w5n/g1zXaENQ8GSEoDHEc13Cd:mbTG3aaylH1jJ4XaGEWHR13Cd
Malware Config
Signatures
Files
-
94e1a64ee00ef803b1164b10d55ecee1b51110fff689afa4422913a5347608f4.exe windows x86
a3d86d0390872115e0a48c95a572b2aa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
InterlockedDecrement
ExitProcess
LoadLibraryA
GetModuleHandleA
lstrcmpiW
FreeLibrary
GetCommandLineA
GetProcessHeap
GetCurrentThreadId
LoadLibraryW
VirtualFree
InterlockedIncrement
GetSystemTimeAsFileTime
GetACP
MultiByteToWideChar
InterlockedDecrement
EnterCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
InterlockedDecrement
EnterCriticalSection
GetLastError
GetCurrentProcess
TerminateProcess
LoadLibraryW
ExitProcess
GetVersionExA
ExitProcess
SetUnhandledExceptionFilter
LocalAlloc
GetVersionExA
VirtualFree
LocalFree
VirtualFree
InterlockedDecrement
WideCharToMultiByte
GetModuleFileNameA
FormatMessageW
HeapDestroy
lstrlenW
GetModuleFileNameA
GetSystemTimeAsFileTime
GetProcAddress
GetCurrentProcess
GetProcessHeap
Sleep
GetModuleFileNameA
HeapReAlloc
HeapAlloc
GetCurrentProcessId
SetLastError
GetCurrentThreadId
GetCommandLineW
GetStartupInfoW
GetModuleHandleA
GetProcessHeap
GetSystemTimeAsFileTime
SetFilePointer
GetProcAddress
UnhandledExceptionFilter
VirtualFree
LoadLibraryW
HeapDestroy
InterlockedDecrement
LoadLibraryA
LoadLibraryA
InterlockedIncrement
HeapFree
SetEvent
WriteFile
GetLastError
HeapFree
InitializeCriticalSection
GetLastError
FormatMessageW
QueryPerformanceCounter
GetSystemTimeAsFileTime
LoadLibraryA
user32
WinHelpW
LoadImageW
IsDlgButtonChecked
IsDialogMessageW
GetWindowRect
InvalidateRect
CopyRect
GetClientRect
GetClientRect
SetFocus
SetRect
CreateDialogParamW
ReleaseCapture
IsDialogMessageW
TranslateMessage
SetDlgItemTextW
IsWindow
DispatchMessageA
EnableWindow
SendMessageW
SendMessageW
UpdateWindow
wsprintfW
GetWindowTextW
GetWindowRect
GetCursorPos
ShowWindow
wsprintfA
EnableWindow
DialogBoxParamW
GetDlgItem
EndDialog
DefWindowProcW
MessageBoxW
LoadImageW
FindWindowW
DestroyMenu
InvalidateRect
PeekMessageW
MessageBoxW
EndPaint
SetFocus
SendMessageA
SetWindowLongW
GetDlgCtrlID
EndDialog
EndPaint
wsprintfW
DialogBoxParamW
SetForegroundWindow
ShowWindow
GetSysColor
CallWindowProcW
FillRect
ShowWindow
EndPaint
PostMessageW
OffsetRect
DispatchMessageA
SystemParametersInfoW
GetDC
CreateDialogParamW
TranslateMessage
WinHelpW
GetWindowRect
GetCursorPos
DestroyIcon
LoadImageW
CreateDialogParamW
GetDlgCtrlID
FillRect
GetDlgItemTextW
GetWindowRect
LoadStringW
BeginPaint
ReleaseCapture
GetKeyState
DispatchMessageW
SetWindowPos
GetDlgItem
CreateDialogParamW
CharNextW
GetDC
PostQuitMessage
SetFocus
DispatchMessageA
LoadAcceleratorsW
UpdateWindow
GetSubMenu
ReleaseCapture
PeekMessageW
gdi32
MoveToEx
GetTextMetricsW
ExtTextOutW
SetBkColor
TextOutW
LineTo
CreateSolidBrush
GetTextExtentPoint32W
LineTo
TextOutW
CreateCompatibleDC
CreateFontIndirectW
LineTo
GetStockObject
CreateSolidBrush
SetBkColor
GetObjectW
CreateCompatibleDC
CreateSolidBrush
MoveToEx
GetTextMetricsW
SetTextColor
GetTextExtentPoint32W
GetTextMetricsW
ExtTextOutW
SetTextColor
SetBkMode
CreateFontIndirectW
SetTextColor
SelectObject
LineTo
GetTextMetricsW
SetTextColor
GetTextMetricsW
CreateCompatibleBitmap
MoveToEx
CreateBitmap
SetBkMode
BitBlt
GetObjectW
GetDeviceCaps
MoveToEx
ExtTextOutW
StretchBlt
CreateCompatibleBitmap
ExtTextOutW
CreateFontIndirectW
GetTextMetricsW
GetStockObject
CreateCompatibleDC
SetBkMode
GetTextMetricsW
MoveToEx
GetTextExtentPoint32W
GetObjectW
BitBlt
SetBkColor
PatBlt
CreateBitmap
CreateCompatibleDC
SetBkMode
GetStockObject
GetTextMetricsW
GetObjectW
MoveToEx
DeleteDC
CreateCompatibleDC
DeleteDC
TextOutW
SelectObject
GetTextExtentPoint32W
CreateCompatibleDC
CreateCompatibleBitmap
GetTextMetricsW
GetTextExtentPoint32W
StretchBlt
DeleteObject
CreateCompatibleDC
GetObjectW
CreateCompatibleDC
TextOutW
SetTextColor
SetBkColor
CreateFontIndirectW
GetObjectW
SetBkMode
SelectObject
GetStockObject
StretchBlt
CreateSolidBrush
SetBkMode
MoveToEx
GetDeviceCaps
CreateCompatibleBitmap
CreateBitmap
GetDeviceCaps
GetStockObject
CreateBitmap
CreateCompatibleDC
DeleteDC
CreateCompatibleBitmap
GetTextExtentPoint32W
GetTextMetricsW
DeleteObject
GetStockObject
DeleteDC
CreateBitmap
GetTextMetricsW
SelectObject
TextOutW
GetObjectW
SetBkColor
ExtTextOutW
StretchBlt
TextOutW
CreateCompatibleDC
PatBlt
BitBlt
PatBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateCompatibleBitmap
StretchBlt
CreateFontIndirectW
StretchBlt
CreateCompatibleBitmap
CreateBitmap
CreateBitmap
LineTo
MoveToEx
GetTextExtentPoint32W
MoveToEx
StretchBlt
CreateCompatibleBitmap
SetBkColor
CreateBitmap
SelectObject
StretchBlt
CreateBitmap
SetBkColor
PatBlt
SetBkMode
CreateBitmap
GetDeviceCaps
ExtTextOutW
CreateBitmap
Sections
.idata Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.fdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.fdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE