Static task
static1
Behavioral task
behavioral1
Sample
88202ffc8a1869c198cfdbddd57ccb7e6a47b2b19c685e2cd04e708202ad318c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
88202ffc8a1869c198cfdbddd57ccb7e6a47b2b19c685e2cd04e708202ad318c.exe
Resource
win10v2004-20221111-en
General
-
Target
88202ffc8a1869c198cfdbddd57ccb7e6a47b2b19c685e2cd04e708202ad318c
-
Size
316KB
-
MD5
35c6236fdf757ab70d1d942fc9e9ee4c
-
SHA1
2498729c2a29415c512738d9f0671a0443b45dd1
-
SHA256
88202ffc8a1869c198cfdbddd57ccb7e6a47b2b19c685e2cd04e708202ad318c
-
SHA512
70716424bad57b1db1c03972323459e5cb62afc83e910bb79b8fb554f5211677961f2f50b3b641a917172666782cdd305f5b999e2e2e26561c487585f4b6e2d7
-
SSDEEP
6144:D/Bx3dwED1iFdv0hzfFDeuS9SvEcfGr+3XKohgvCwYim:D/r36cydbL9S/y+3XK5vCh
Malware Config
Signatures
Files
-
88202ffc8a1869c198cfdbddd57ccb7e6a47b2b19c685e2cd04e708202ad318c.exe windows x86
ef525d5849e1ea064e2718c2f2691225
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
ntohs
inet_ntoa
inet_addr
htons
WSACleanup
getservbyport
getservbyname
gethostbyname
gethostbyaddr
closesocket
WSAStartup
WSASocketW
WSASetLastError
WSASetEvent
WSASend
WSAResetEvent
WSARecv
WSAGetOverlappedResult
WSAGetLastError
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSAConnect
WSACloseEvent
htonl
oleaut32
VariantInit
VariantClear
VarUI4FromStr
SysStringLen
SysStringByteLen
SysFreeString
SysAllocStringLen
SysAllocString
SafeArrayUnlock
SafeArrayLock
SafeArrayGetVartype
LoadRegTypeLi
LoadTypeLi
OleCreateFontIndirect
OleLoadPicture
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
DispCallFunc
user32
EnableMenuItem
EmptyClipboard
DrawTextW
DrawStateW
DrawIconEx
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DialogBoxParamW
DestroyWindow
DestroyMenu
DestroyIcon
WindowFromPoint
UpdateWindow
EnableWindow
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TranslateAcceleratorW
TrackPopupMenuEx
TrackPopupMenu
DestroyCursor
DestroyAcceleratorTable
DeferWindowPos
DefWindowProcW
CreateWindowExW
CreatePopupMenu
CreateDialogParamW
CreateAcceleratorTableW
CopyRect
CloseClipboard
ClientToScreen
CheckMenuItem
CheckDlgButton
CharUpperW
CharNextW
CharLowerW
ChangeClipboardChain
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
SystemParametersInfoW
ShowWindow
SetWindowsHookExW
SetWindowTextW
SetWindowRgn
SetWindowPos
SetWindowLongW
SetTimer
SetScrollPos
SetScrollInfo
SetRectEmpty
SetRect
SetPropW
SetMenuItemInfoW
SetMenuDefaultItem
SetMenu
SetLayeredWindowAttributes
SetForegroundWindow
SetFocus
SetDlgItemTextW
SetDlgItemInt
SetCursor
SetClipboardViewer
SetClipboardData
SetCapture
SetActiveWindow
SendMessageW
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassExW
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
MsgWaitForMultipleObjects
MoveWindow
MonitorFromRect
MonitorFromPoint
ModifyMenuW
MessageBoxW
MessageBeep
MapWindowPoints
LoadStringW
LoadStringA
LoadMenuW
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
LoadAcceleratorsW
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsMenu
IsIconic
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
InsertMenuItemW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetWindow
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetMonitorInfoW
GetMessageW
GetMessagePos
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetKeyState
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItemTextW
GetDlgItemInt
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetClipboardData
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoExW
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowW
FillRect
ExitWindowsEx
AppendMenuW
AdjustWindowRectEx
EqualRect
EnumWindows
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
UpdateLayeredWindow
comctl32
_TrackMouseEvent
InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_GetIcon
ImageList_DrawEx
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_LoadImageW
ImageList_AddMasked
shlwapi
SHDeleteKeyW
PathRemoveFileSpecW
PathRemoveExtensionW
PathIsDirectoryW
PathFindFileNameW
PathFindExtensionW
PathFileExistsW
PathCombineW
ole32
ReleaseStgMedium
RegisterDragDrop
OleUninitialize
OleSetContainedObject
OleLockRunning
OleInitialize
OleDuplicateData
OleDraw
OleCreate
RevokeDragDrop
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoGetClassObject
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
StringFromGUID2
CreateStreamOnHGlobal
wininet
HttpQueryInfoW
InternetSetCookieW
InternetReadFile
InternetOpenW
InternetOpenUrlW
InternetCloseHandle
DeleteUrlCacheEntryW
shell32
SHBrowseForFolderW
ExtractIconW
DragQueryFileW
DragFinish
DragAcceptFiles
CommandLineToArgvW
SHFileOperationW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
ShellExecuteW
Shell_NotifyIconW
SHChangeNotify
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
winmm
PlaySoundW
kernel32
GetPrivateProfileIntA
CreateDirectoryA
CreateEventA
CreateFileA
CreateMutexA
CreateThread
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TerminateThread
TerminateProcess
SystemTimeToFileTime
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetPriorityClass
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
RtlUnwind
ResumeThread
ResetEvent
ReleaseMutex
ReadFile
QueryPerformanceFrequency
QueryPerformanceCounter
OpenProcess
OpenEventA
MultiByteToWideChar
MulDiv
LockResource
LocalReAlloc
LocalFree
LocalAlloc
LoadResource
LoadLibraryExA
LoadLibraryA
LeaveCriticalSection
IsDBCSLeadByte
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
HeapFree
HeapDestroy
HeapAlloc
GlobalUnlock
GlobalLock
GlobalHandle
GlobalFree
GlobalAlloc
GetVersionExA
GetUserDefaultLCID
GetTimeFormatA
GetTickCount
GetTempPathA
GetTempFileNameA
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDirectoryA
GetSystemDefaultLCID
GetStringTypeExA
GetStartupInfoA
GetShortPathNameA
GetProcessHeap
GetProcAddress
GetPrivateProfileStringA
DeleteCriticalSection
GetPriorityClass
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
GetLocalTime
GetLastError
GetFileAttributesA
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetComputerNameA
FreeResource
FreeLibrary
FormatMessageA
FlushInstructionCache
FindResourceA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToSystemTime
EnterCriticalSection
CompareFileTime
gdi32
ExtTextOutW
ExcludeClipRect
EndPage
EndDoc
DeleteObject
DeleteDC
DPtoLP
CreateSolidBrush
CreateRectRgn
CreatePolygonRgn
CreatePen
CreatePatternBrush
CreateFontW
CreateFontIndirectW
CreateDiscardableBitmap
FillRgn
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CombineRgn
BitBlt
SetStretchBltMode
SetTextColor
SetViewportOrgEx
SetWindowOrgEx
StartDocA
StartPage
StretchBlt
TextOutW
GdiFlush
GetClipBox
GetClipRgn
GetDeviceCaps
GetObjectW
GetPixel
GetStockObject
GetTextColor
GetTextExtentPoint32W
GetTextMetricsW
IntersectClipRect
LPtoDP
LineTo
MoveToEx
PatBlt
Polygon
Polyline
Rectangle
RestoreDC
RoundRect
SaveDC
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
CreateDIBSection
SetDIBitsToDevice
advapi32
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
AdjustTokenPrivileges
comdlg32
GetOpenFileNameW
GetSaveFileNameW
Sections
.text Size: 223KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ