Static task
static1
Behavioral task
behavioral1
Sample
9d5e3fa5c237fd07e0beb4513fc02d5847c5592e08443ddfdedf2dfc4bf9da82.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9d5e3fa5c237fd07e0beb4513fc02d5847c5592e08443ddfdedf2dfc4bf9da82.exe
Resource
win10v2004-20220812-en
General
-
Target
9d5e3fa5c237fd07e0beb4513fc02d5847c5592e08443ddfdedf2dfc4bf9da82
-
Size
616KB
-
MD5
7f0d0e8f86067f75af8dd996bd2426b3
-
SHA1
7c1d8a5e86d6782734f431c67ade640d4c0534b7
-
SHA256
9d5e3fa5c237fd07e0beb4513fc02d5847c5592e08443ddfdedf2dfc4bf9da82
-
SHA512
f0876dfe7d05a20f7588dd5e5f7d44abb5eaccbf27cb8f3e868750459e685f3d108fa29da6864fac0fc51f15a34078339b67dba9972fb444dd38f8a99b006fa2
-
SSDEEP
12288:AMSmO+iqR4k5cZU1BHSpjTUClcaz/fV0AFCrv+9UCRRW4pMaAj:BSmO+iqQUPHSpjTUWc61V8r+9xRRWJj
Malware Config
Signatures
Files
-
9d5e3fa5c237fd07e0beb4513fc02d5847c5592e08443ddfdedf2dfc4bf9da82.exe windows x86
e14c6c306932bb2075c325836688c32c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
midiOutPrepareHeader
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutWrite
waveOutPause
waveOutReset
waveOutClose
waveOutGetNumDevs
waveOutOpen
midiOutUnprepareHeader
midiStreamOpen
midiStreamStop
midiOutReset
midiStreamClose
midiStreamRestart
midiStreamProperty
ws2_32
WSAAsyncSelect
closesocket
recvfrom
ioctlsocket
recv
inet_ntoa
getpeername
accept
WSACleanup
kernel32
SetLastError
GetTimeZoneInformation
GetVersion
SetSystemPowerState
WideCharToMultiByte
GetACP
HeapSize
RaiseException
GetLocalTime
GetSystemTime
MultiByteToWideChar
GetStartupInfoA
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetFileTime
GlobalFlags
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalFree
InterlockedDecrement
InterlockedIncrement
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DuplicateHandle
lstrcpynA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
TerminateProcess
GetCurrentProcess
GetFileSize
SetFilePointer
WritePrivateProfileStringA
GetFileAttributesA
GetCommandLineA
SetCurrentDirectoryA
CreateSemaphoreA
ResumeThread
ReleaseSemaphore
EnterCriticalSection
LeaveCriticalSection
CreateEventA
GetFullPathNameA
FindResourceA
LoadResource
LockResource
CreateThread
GetModuleFileNameA
Sleep
GetProfileStringA
CreateFileA
InterlockedExchange
WriteFile
ReadFile
GetLastError
WaitForMultipleObjects
SetEvent
GlobalAlloc
WaitForSingleObject
CloseHandle
MulDiv
GetCurrentThreadId
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
FreeLibrary
GlobalSize
GlobalLock
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
GetVersionExA
lstrcatA
lstrlenA
WinExec
lstrcpyA
FindFirstFileA
FindNextFileA
FindClose
GetVolumeInformationA
GetTickCount
GlobalUnlock
GlobalReAlloc
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
SetEnvironmentVariableA
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetStdHandle
RtlUnwind
user32
CloseClipboard
GetMessageA
DispatchMessageA
SetRectEmpty
RegisterClipboardFormatA
ClientToScreen
WindowFromPoint
ShowWindow
SetCursor
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
DrawFocusRect
DrawEdge
DrawFrameControl
DrawIconEx
CreateIconFromResource
CreateIconFromResourceEx
MessageBoxA
LoadImageA
EnumDisplaySettingsA
GetDlgCtrlID
ReleaseDC
GetDC
EnableMenuItem
GetSubMenu
EqualRect
CreateAcceleratorTableA
CreateMenu
ModifyMenuA
IsWindowEnabled
AppendMenuA
GetKeyState
CopyAcceleratorTableA
PostQuitMessage
IsZoomed
GetSystemMenu
DeleteMenu
GetClassInfoA
DefWindowProcA
GetCursorPos
SetCursorPos
GetMenu
SetMenu
PeekMessageA
IsIconic
SetActiveWindow
LoadStringA
DestroyMenu
SetFocus
SetWindowPos
GetActiveWindow
GetTopWindow
GetWindow
IsChild
DestroyAcceleratorTable
DestroyCursor
SetWindowRgn
UpdateWindow
GetMessagePos
ScreenToClient
ChildWindowFromPointEx
GetFocus
CopyRect
LoadBitmapA
WinHelpA
KillTimer
SetTimer
ReleaseCapture
GetCapture
SetCapture
PostMessageA
GetScrollRange
SetScrollRange
SetScrollPos
InflateRect
SetRect
IntersectRect
DestroyIcon
IsWindow
IsRectEmpty
LoadCursorA
GetParent
SetParent
PtInRect
GetClientRect
OffsetRect
FillRect
IsWindowVisible
wsprintfA
EnableWindow
InvalidateRect
RedrawWindow
GetSystemMetrics
GetWindowRect
SendMessageA
GetWindowLongA
SetWindowLongA
GetSysColor
CreatePopupMenu
LoadIconA
TranslateMessage
SystemParametersInfoA
ValidateRect
SetForegroundWindow
GetDesktopWindow
GetClassNameA
FindWindowA
GetDlgItem
GetWindowTextA
GetForegroundWindow
ExitWindowsEx
TranslateAcceleratorA
UnregisterClassA
GetWindowPlacement
RegisterWindowMessageA
GetLastActivePopup
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
DestroyWindow
GetWindowTextLengthA
GetMenuItemID
GetMenuItemCount
RegisterClassA
GetScrollPos
AdjustWindowRectEx
MapWindowPoints
SendDlgItemMessageA
CharUpperA
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
MoveWindow
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetNextDlgTabItem
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
CreateDialogIndirectParamA
EndDialog
GetSysColorBrush
gdi32
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetViewportExtEx
ExtSelectClipRgn
CreateDCA
GetDeviceCaps
DPtoLP
CreateBitmap
CreateCompatibleDC
SelectObject
BitBlt
GetObjectA
CreatePen
PatBlt
Rectangle
Ellipse
RoundRect
Escape
GetCurrentObject
CreateRectRgn
CombineRgn
GetTextExtentPoint32A
CreateSolidBrush
GetStockObject
CreateFontIndirectA
LineTo
MoveToEx
ExcludeClipRect
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
CreateCompatibleBitmap
EndPage
StartPage
GetPolyFillMode
GetStretchBltMode
GetROP2
GetBkColor
GetBkMode
GetTextColor
EndDoc
CreateRoundRectRgn
CreateEllipticRgn
PathToRegion
EndPath
BeginPath
DeleteDC
CreateRectRgnIndirect
LPtoDP
DeleteObject
SelectClipRgn
GetClipRgn
CreateDIBitmap
StretchBlt
SetStretchBltMode
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
GetWindowOrgEx
GetViewportOrgEx
GetWindowExtEx
CreatePolygonRgn
SetBkColor
GetDIBits
RealizePalette
SelectPalette
CreatePalette
FillRgn
GetSystemPaletteEntries
SaveDC
SetTextColor
GetClipBox
GetTextMetricsA
StartDocA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegQueryValueA
RegOpenKeyExA
RegSetValueExA
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyExA
RegCloseKey
OpenProcessToken
shell32
ShellExecuteA
Shell_NotifyIconA
ole32
CLSIDFromString
OleUninitialize
OleInitialize
oleaut32
LoadTypeLi
RegisterTypeLi
UnRegisterTypeLi
comctl32
ImageList_Destroy
ord17
comdlg32
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
Sections
.text Size: 400KB - Virtual size: 399KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ