Static task
static1
Behavioral task
behavioral1
Sample
87f7f99f9d694c24122e9ab7000c8da88747f6e7637a3c46005957b8215fc845.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
87f7f99f9d694c24122e9ab7000c8da88747f6e7637a3c46005957b8215fc845.exe
Resource
win10v2004-20220901-en
General
-
Target
87f7f99f9d694c24122e9ab7000c8da88747f6e7637a3c46005957b8215fc845
-
Size
289KB
-
MD5
b69daabf32320c59af219e94351c7309
-
SHA1
9b958f568bc57c9a788f72221575b0554971301f
-
SHA256
87f7f99f9d694c24122e9ab7000c8da88747f6e7637a3c46005957b8215fc845
-
SHA512
ffb199cb6ec3cf620f72039f5681c7f9365e46a2b6cc92831797ed3910d512012fc8b8cd9f71a91fec37f7352614c183cb888bfc007b671b5bebe4c7a01d917a
-
SSDEEP
6144:usRuyvRpqKRb2w7cw3FthGsmsMDtC4efM+gsTKTZDoHaIG17:uuqKMG33btms0tC4e0BsmVDoHad
Malware Config
Signatures
Files
-
87f7f99f9d694c24122e9ab7000c8da88747f6e7637a3c46005957b8215fc845.exe windows x86
281ca085c51a5529616b6ee0024c3738
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeZoneInformation
GetVersion
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFlags
GlobalFree
GlobalGetAtomNameA
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadCodePtr
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadResource
LocalAlloc
LocalFree
GetThreadLocale
LockResource
MulDiv
MultiByteToWideChar
Process32Next
RaiseException
ReadFile
RtlUnwind
SetEndOfFile
SetErrorMode
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnlockFile
VirtualAlloc
VirtualFree
WideCharToMultiByte
WinExec
WritePrivateProfileStringA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
lstrlenW
GetTempPathA
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetShortPathNameA
GetProcessVersion
GetProcAddress
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
GetFileType
GetFileTime
GetFileAttributesA
GetEnvironmentStringsW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetComputerNameA
GetCommandLineA
GetCPInfo
GetACP
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageA
FlushFileBuffers
FindResourceExA
FindResourceA
FindClose
FileTimeToSystemTime
ExitProcess
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteCriticalSection
CreateFileA
CompareStringW
CompareStringA
LockFile
CloseHandle
comctl32
ord17
DestroyPropertySheetPage
user32
IsChild
IsIconic
IsWindow
IsWindowEnabled
LoadBitmapA
LoadCursorA
LoadIconA
LoadStringA
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxA
ModifyMenuA
MoveWindow
OffsetRect
PeekMessageA
PostMessageA
PostQuitMessage
PostThreadMessageA
PtInRect
RedrawWindow
RegisterClassA
RegisterWindowMessageA
ReleaseDC
RemovePropA
SendDlgItemMessageA
GrayStringA
SetActiveWindow
SetCursor
SetFocus
SetForegroundWindow
SetMenuItemBitmaps
SetPropA
SetRect
SetWindowContextHelpId
SetWindowLongA
SetWindowPos
SetWindowTextA
SetWindowsHookExA
SystemParametersInfoA
TabbedTextOutA
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
ValidateRect
WinHelpA
wsprintfA
AdjustWindowRectEx
CallNextHookEx
CallWindowProcA
CharNextA
GetWindowTextA
GetWindowPlacement
GetWindowLongA
GetWindowDC
GetWindow
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetParent
GetSysColor
GetSubMenu
GetNextDlgTabItem
SendMessageA
CharUpperA
CheckMenuItem
ClientToScreen
CreateDialogIndirectParamA
CreateWindowExA
DefWindowProcA
DestroyMenu
DestroyWindow
DispatchMessageA
DlgDirListComboBoxA
DrawTextA
EnableMenuItem
EnableWindow
EndDialog
GetActiveWindow
GetCapture
GetClassInfoA
GetClassLongA
GetClassNameA
GetClientRect
GetCursorPos
GetDC
GetDlgCtrlID
GetDlgItem
GetFocus
GetForegroundWindow
GetKeyState
GetMenu
GetNextDlgGroupItem
GetMessagePos
GetMessageA
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetPropA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
oleaut32
VariantChangeType
VariantTimeToSystemTime
VariantCopy
VariantClear
VarBstrFromDate
SystemTimeToVariantTime
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
OleCreateFontIndirect
comdlg32
ChooseColorA
ChooseColorW
ChooseFontW
FindTextA
FindTextW
GetFileTitleA
GetFileTitleW
GetOpenFileNameA
GetOpenFileNameW
PrintDlgExA
ole32
CLSIDFromProgID
CLSIDFromString
CoFreeUnusedLibraries
CoGetClassObject
CoRegisterMessageFilter
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
OleFlushClipboard
StringFromCLSID
StgOpenStorageOnILockBytes
OleInitialize
OleIsCurrentClipboard
OleUninitialize
StgCreateDocfileOnILockBytes
gdi32
GetStockObject
GetTextColor
GetViewportExtEx
GetWindowExtEx
LPtoDP
OffsetViewportOrgEx
PtVisible
RectVisible
Rectangle
RemoveFontResourceA
GetObjectA
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
SetBkColor
SetMapMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
TextOutA
GetDeviceCaps
GetClipBox
GetBkColor
ExtTextOutA
ExtCreatePen
Escape
DeleteObject
DeleteDC
RestoreDC
DPtoLP
oledlg
ord3
ord8
advapi32
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
LsaGetSystemAccessAccount
Sections
.text Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ