Static task
static1
Behavioral task
behavioral1
Sample
44532c468d33d38252a71adafb9f6b0d0c4df6af4291ead068465f7e2aeadf8f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
44532c468d33d38252a71adafb9f6b0d0c4df6af4291ead068465f7e2aeadf8f.exe
Resource
win10v2004-20221111-en
General
-
Target
44532c468d33d38252a71adafb9f6b0d0c4df6af4291ead068465f7e2aeadf8f
-
Size
136KB
-
MD5
1cdfee1855f936436adacb7bd1eaa570
-
SHA1
327d76fa2df9df21fbd2cb9af0f03521a961efe0
-
SHA256
44532c468d33d38252a71adafb9f6b0d0c4df6af4291ead068465f7e2aeadf8f
-
SHA512
a019788f2ba67ff37822dc9a872e5c61db9b45e9165d057f295d477dde8e55f6a2198fde214205397ce23990859e887e5d6ccbd44c8bb571e71d591a0faff0a8
-
SSDEEP
3072:3hqrLhwaa19B7wIUMya6r2XtM7zPUdt1hKKztJlnd2Q0LsqplCB9yWh+:3hqrL2aa19mIUn29M7zAtztJ72Q0Lpfa
Malware Config
Signatures
Files
-
44532c468d33d38252a71adafb9f6b0d0c4df6af4291ead068465f7e2aeadf8f.exe windows x86
4bbcbf5a08bb724cbb2477f673f8dac4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
WriteConsoleW
TlsFree
GetFileAttributesExW
CloseHandle
GetEnvironmentStringsW
FindFirstChangeNotificationW
OutputDebugStringW
SetStdHandle
WaitForSingleObject
IsDebuggerPresent
GetLocaleInfoW
IsProcessorFeaturePresent
HeapFree
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
GetSystemDefaultLangID
GetUserDefaultLCID
FindCloseChangeNotification
GetOEMCP
LoadResource
GetLocaleInfoA
LoadLibraryW
Sleep
RemoveDirectoryW
TlsAlloc
GetModuleHandleA
GetCurrentProcessId
GetStartupInfoA
GetCurrentThread
RtlUnwind
GetTempFileNameW
GetModuleFileNameW
GetPrivateProfileStringW
VirtualQuery
LocalAlloc
GetCurrentThreadId
GlobalLock
GetModuleHandleW
GetSystemDirectoryW
GlobalAlloc
GetProcAddress
VerLanguageNameW
GetConsoleCP
ReadFile
FileTimeToSystemTime
GetWindowsDirectoryW
lstrcpynA
SetFilePointer
TlsGetValue
WaitForMultipleObjects
VirtualFree
GetConsoleMode
GetFileAttributesW
GetModuleHandleExW
VirtualAllocEx
GetVersion
lstrcmpW
CompareStringW
GetTempPathW
CopyFileW
ExpandEnvironmentStringsA
SetHandleCount
CreateFileA
HeapCreate
GlobalSize
GetConsoleOutputCP
FindResourceW
MultiByteToWideChar
WritePrivateProfileStringW
ExpandEnvironmentStringsW
SetUnhandledExceptionFilter
GetProcessHeap
CreateFileW
ExitProcess
WideCharToMultiByte
RaiseException
FlushInstructionCache
DebugBreak
LCMapStringA
GetStringTypeW
GetCommandLineW
SetEvent
GetStringTypeA
GetDateFormatW
lstrcmpiW
LockResource
LeaveCriticalSection
DeleteCriticalSection
lstrcpyW
lstrlenW
GetModuleFileNameA
IsValidCodePage
SetConsoleCtrlHandler
LoadLibraryExW
GetComputerNameW
GetPrivateProfileIntW
SetLastError
HeapSize
FindClose
GetStdHandle
GetCurrentProcess
CompareStringA
VirtualAlloc
FindNextFileW
WriteFile
GetACP
GetStartupInfoW
TerminateProcess
InterlockedIncrement
lstrcatW
TlsSetValue
FreeEnvironmentStringsW
LocalFree
HeapDestroy
FreeLibrary
HeapReAlloc
SizeofResource
LCMapStringW
InitializeCriticalSectionAndSpinCount
lstrcpynW
CreateDirectoryW
DeleteFileW
GlobalUnlock
GetFileSize
GetCPInfo
FlushFileBuffers
MulDiv
WritePrivateProfileSectionW
GetDateFormatA
FormatMessageW
GetFileType
OpenEventW
lstrlenA
GetVersionExW
WriteConsoleA
GetTimeFormatA
EnumSystemLocalesA
MoveFileW
InterlockedExchange
FindFirstFileW
ResetEvent
GetLastError
QueryPerformanceCounter
WinExec
FindNextChangeNotification
IsValidLocale
LoadLibraryA
UnhandledExceptionFilter
EnterCriticalSection
FatalAppExitA
CreateEventW
SystemTimeToTzSpecificLocalTime
CreateThread
user32
GetParent
RegisterWindowMessageW
GetMonitorInfoW
LoadImageW
GetDesktopWindow
GetMenu
GetWindowTextLengthW
CreateWindowExW
InsertMenuW
SetCaretPos
DrawFocusRect
LoadMenuW
GetWindowThreadProcessId
IsWindowVisible
GetClientRect
SetDlgItemInt
RemoveMenu
MapWindowPoints
UpdateWindow
GetScrollInfo
DrawTextW
GetDlgItemTextW
RegisterClassW
GetDC
ShowScrollBar
EnableMenuItem
DestroyMenu
DeferWindowPos
BeginPaint
LoadIconW
EndDialog
GetClassInfoW
TranslateMDISysAccel
DefFrameProcW
AppendMenuW
GetWindowPlacement
EndDeferWindowPos
PtInRect
SetWindowPos
IsWindowEnabled
GetMessageW
SetDlgItemTextW
MessageBoxW
wvsprintfW
MessageBeep
DrawMenuBar
ReleaseDC
GetActiveWindow
GetSystemMetrics
CloseClipboard
GetMessagePos
SetParent
GetClassLongW
SetWindowTextA
SetForegroundWindow
CharNextW
GetMenuDefaultItem
SystemParametersInfoW
GetMenuItemID
GetWindow
DispatchMessageW
LoadStringA
IsClipboardFormatAvailable
TranslateAcceleratorW
PostMessageW
IsWindow
UnregisterClassA
RegisterClassExW
GetMenuItemInfoW
ShowWindow
FillRect
GetDoubleClickTime
GetKeyState
LoadCursorW
GetDlgCtrlID
GetSystemMenu
CharLowerW
ScreenToClient
CreateCaret
FindWindowW
KillTimer
SetCapture
AdjustWindowRectEx
LockWindowUpdate
TrackPopupMenu
DrawEdge
WindowFromPoint
OpenClipboard
ModifyMenuW
UnregisterClassW
IsMenu
TrackPopupMenuEx
SetMenu
UnhookWindowsHookEx
TranslateMessage
SetClipboardData
GetCursorPos
GetWindowTextW
ShowCaret
ScrollWindowEx
DialogBoxParamW
SetCursor
SetScrollInfo
GetWindowLongW
EndPaint
GetClassInfoExW
PostQuitMessage
BringWindowToTop
BeginDeferWindowPos
EqualRect
SendMessageW
GetCapture
InvalidateRect
ClientToScreen
RegisterClipboardFormatW
IntersectRect
GetFocus
IsChild
CallWindowProcW
CreatePopupMenu
EnableWindow
MoveWindow
SetMenuDefaultItem
DefWindowProcW
GetWindowRect
SetTimer
SetMenuItemInfoW
GetSysColorBrush
OffsetRect
PeekMessageW
LoadStringW
RedrawWindow
DrawFrameControl
DrawIconEx
SetWindowPlacement
GetDlgItemInt
GetMenuItemCount
EmptyClipboard
SetFocus
CallNextHookEx
ReleaseCapture
DestroyCaret
DefMDIChildProcW
MonitorFromWindow
SetWindowTextW
LoadAcceleratorsW
SetWindowsHookExW
LoadBitmapW
SetRectEmpty
GetSubMenu
InflateRect
DragDetect
SetWindowLongW
GetClassNameW
CopyRect
SetScrollPos
FrameRect
DestroyWindow
GetDlgItem
GetWindowDC
GetMenuStringW
gdi32
GetTextMetricsW
CreateDIBSection
LPtoDP
SetTextColor
SelectObject
SetViewportOrgEx
Rectangle
GetViewportOrgEx
RestoreDC
CreatePen
CreateBitmap
SetBrushOrgEx
Polyline
SelectClipRgn
GetClipBox
SelectPalette
Polygon
SetBkColor
CreateFontIndirectW
GetObjectW
LineTo
DeleteDC
IntersectClipRect
GetStockObject
ExtTextOutW
CreateFontW
MoveToEx
CreateCompatibleDC
SaveDC
CreateCompatibleBitmap
CreatePalette
GetTextExtentPoint32W
GetClipRgn
BitBlt
SetBkMode
SetWindowOrgEx
GetTextExtentPointW
GetDeviceCaps
CreateSolidBrush
CreatePatternBrush
DeleteObject
DPtoLP
PatBlt
RealizePalette
CreateRectRgn
SetPolyFillMode
TextOutW
comdlg32
ChooseColorW
GetOpenFileNameW
ChooseFontW
GetSaveFileNameW
advapi32
RegConnectRegistryW
RegRestoreKeyW
GetNamedSecurityInfoW
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
MapGenericMask
GetSecurityDescriptorGroup
SetSecurityDescriptorDacl
LookupPrivilegeValueW
GetLengthSid
IsTextUnicode
GetSidSubAuthorityCount
GetSecurityDescriptorSacl
RegUnLoadKeyW
RegQueryValueExA
RegGetKeySecurity
RegEnumValueA
RegReplaceKeyW
GetSidSubAuthority
RegDeleteValueW
GetSidIdentifierAuthority
RegQueryValueExW
RegCloseKey
GetSecurityDescriptorDacl
RegSaveKeyW
OpenProcessToken
AdjustTokenPrivileges
GetSecurityDescriptorControl
GetSecurityDescriptorOwner
RegSetKeySecurity
RegOpenKeyExA
GetUserNameW
RegDeleteKeyW
GetTokenInformation
CopySid
InitializeAcl
RegOpenKeyExW
RegEnumValueW
InitializeSecurityDescriptor
SetNamedSecurityInfoW
RegLoadKeyW
RegSetValueExW
ole32
CoTaskMemAlloc
oleaut32
SysFreeString
VarUI4FromStr
SystemTimeToVariantTime
VarI4FromStr
VarDecFromStr
VarDecCmp
VarR8FromStr
msacm32
acmDriverID
msvcrt
_CItan
Sections
.text Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ