Static task
static1
Behavioral task
behavioral1
Sample
fa625bc68e0f82fa051350d4fd6e77409799cdeb364d2a96d4e9f16561d420eb.exe
Resource
win7-20220812-en
General
-
Target
fa625bc68e0f82fa051350d4fd6e77409799cdeb364d2a96d4e9f16561d420eb
-
Size
362KB
-
MD5
d3b82789307ce1564228f658764c2aeb
-
SHA1
b3804e62f6795a1f2f9df370a0bcf34684f01838
-
SHA256
fa625bc68e0f82fa051350d4fd6e77409799cdeb364d2a96d4e9f16561d420eb
-
SHA512
7d6fbe67283278dc9fbe4b6fb69b82c0affa4f974e35f8c19bac43885b2ce2cfac0eb508790d93639038351ef0f181de07de92ae5cbae784f1007ad011e4979c
-
SSDEEP
6144:7G5TQSRfjjAcJi41kjVFUFbmqjWQ9HDhwmR103ek51:y3JNCFUFCqN93037L
Malware Config
Signatures
Files
-
fa625bc68e0f82fa051350d4fd6e77409799cdeb364d2a96d4e9f16561d420eb.exe windows x86
1141272e7b00e24a05cc1b8c2baf58f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mpr
WNetAddConnection2W
kernel32
GetFileTime
GetModuleHandleA
GetVersionExA
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
GlobalFlags
GetSystemTimeAsFileTime
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
SetStdHandle
GetFileType
ExitProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
CreateFileW
GetACP
GetOEMCP
IsValidCodePage
GetStdHandle
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
VirtualQuery
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetCurrentDirectoryA
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
CloseHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
InterlockedIncrement
InterlockedDecrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GetCurrentProcessId
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
LoadLibraryW
CompareStringA
lstrcmpW
SetErrorMode
GetModuleFileNameW
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
WideCharToMultiByte
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
SetLastError
GetModuleFileNameA
LoadLibraryA
lstrcpyA
LocalFree
LocalAlloc
RaiseException
GetLastError
InterlockedExchange
FreeLibrary
GetProcAddress
GetFullPathNameA
HeapFree
GetProcessHeap
HeapAlloc
GetPrivateProfileStringW
lstrlenW
GetCommandLineW
GetModuleHandleW
GetPrivateProfileIntW
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
SetFileAttributesW
CopyFileW
DeleteFileW
GetTempPathW
GetFileAttributesW
GetDriveTypeW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GetCurrentDirectoryW
SetCurrentDirectoryW
GetCPInfo
user32
ShowWindow
SetWindowTextW
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMessageW
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
IsWindow
GetForegroundWindow
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
GetClientRect
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
ClientToScreen
GrayStringW
DestroyMenu
DrawTextExW
DrawTextW
TabbedTextOutW
CharUpperW
GetWindowTextW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetWindowThreadProcessId
SendMessageW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
PostMessageW
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
AdjustWindowRectEx
UnregisterClassA
gdi32
DeleteDC
CreateBitmap
GetStockObject
RectVisible
PtVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
GetDeviceCaps
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
TextOutW
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
RegOpenKeyExA
RegQueryValueExA
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
shlwapi
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
oleaut32
VariantInit
VariantClear
VariantChangeType
Sections
.text Size: 216KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hrdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE