Static task
static1
Behavioral task
behavioral1
Sample
89eca9be3908bf7ca746f46e5706aaef935122696406c0af52c17d0d08524b64.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89eca9be3908bf7ca746f46e5706aaef935122696406c0af52c17d0d08524b64.exe
Resource
win10v2004-20220812-en
General
-
Target
89eca9be3908bf7ca746f46e5706aaef935122696406c0af52c17d0d08524b64
-
Size
26KB
-
MD5
a3b2913901e47e549f1b71a7950e080b
-
SHA1
418ba837d4b0e5106a7ce4d916d5bec15d672fb6
-
SHA256
89eca9be3908bf7ca746f46e5706aaef935122696406c0af52c17d0d08524b64
-
SHA512
8d04fc781736b370274675f6c301ef3fba69b984f95790b02b9080b46a759cc9f8ae5ad1de2957ea95f0cf726ac345f0c30bb530f006cb59420786a2e5ce7218
-
SSDEEP
384:vVUy9/0zGPEbAId19ht76dmrrKwceoysVUyx+FodPEILwCk2ftrs7Js5vbX:vVUy99Bg9hJywKjzVUysGcekisY
Malware Config
Signatures
Files
-
89eca9be3908bf7ca746f46e5706aaef935122696406c0af52c17d0d08524b64.exe windows x86
71aa2644e8701573f7d2f913f94c7790
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileSectionW
WriteProcessMemory
WriteProfileStringA
WriteConsoleA
lstrcmpi
lstrcpynW
WinExec
WaitForSingleObjectEx
WaitForMultipleObjects
VirtualQuery
VerLanguageNameA
UpdateResourceW
UnhandledExceptionFilter
TlsSetValue
TlsFree
TerminateJobObject
SwitchToThread
SwitchToFiber
SetThreadExecutionState
SetProcessShutdownParameters
SetHandleInformation
SetFileAttributesW
SetFileAttributesA
SetErrorMode
SetEndOfFile
SetCurrentDirectoryA
SetConsoleDisplayMode
SetConsoleCursorPosition
SetComputerNameExA
SearchPathA
ScrollConsoleScreenBufferA
ResetWriteWatch
ReadFileEx
ReadConsoleOutputAttribute
ReadConsoleInputW
Process32FirstW
PeekNamedPipe
OpenWaitableTimerA
OpenEventA
MulDiv
MoveFileExW
Module32Next
MapUserPhysicalPagesScatter
LoadLibraryA
IsValidLanguageGroup
IsSystemResumeAutomatic
IsDBCSLeadByte
IsBadReadPtr
InterlockedExchangeAdd
HeapReAlloc
HeapDestroy
GlobalUnfix
GlobalReAlloc
GetVersionExA
GetUserDefaultUILanguage
GetThreadTimes
GetTapeParameters
GetStringTypeW
GetProcessWorkingSetSize
GetPrivateProfileSectionNamesW
GetPrivateProfileIntW
GetMailslotInfo
GetFileInformationByHandle
GetEnvironmentVariableW
GetCurrencyFormatA
GetConsoleOutputCP
GetConsoleCursorInfo
GetConsoleAliasesW
GetCPInfoExW
GetCPInfoExA
GetBinaryType
GetModuleHandleW
FormatMessageW
FlushConsoleInputBuffer
FindResourceW
EnumResourceTypesW
EnumDateFormatsExW
EnumDateFormatsA
DnsHostnameToComputerNameA
DisconnectNamedPipe
DisableThreadLibraryCalls
DeleteCriticalSection
CreateSemaphoreA
CreateMailslotA
CreateJobObjectA
CreateFileW
ConvertThreadToFiber
ContinueDebugEvent
ConnectNamedPipe
CancelWaitableTimer
CancelTimerQueueTimer
BuildCommDCBAndTimeoutsA
AllocConsole
AddAtomA
GetStartupInfoA
GetStartupInfoW
ExitProcess
_lopen
msvcrt
memset
user32
EnumWindowStationsA
EnumDisplaySettingsExW
EnumDisplaySettingsExA
EmptyClipboard
DrawIconEx
DlgDirSelectExW
DlgDirListA
DdeSetQualityOfService
DdeReconnect
DdePostAdvise
DdeInitializeA
DdeClientTransaction
CreateWindowStationW
CreateWindowExA
CreateIcon
CreateCursor
CopyImage
ClipCursor
CharUpperBuffW
CharToOemW
CharToOemA
CharLowerA
ChangeDisplaySettingsA
CallWindowProcW
CallMsgFilter
BringWindowToTop
BlockInput
WaitForInputIdle
VkKeyScanExW
FillRect
FindWindowA
FindWindowExA
FindWindowW
GetActiveWindow
GetCaretPos
GetClassInfoA
GetCursorPos
GetDC
GetDlgItem
GetKeyboardLayout
GetKeyboardLayoutNameA
GetMenuState
GetMenuStringW
GetPriorityClipboardFormat
GetQueueStatus
GetScrollBarInfo
GetSubMenu
GetTitleBarInfo
GetUpdateRgn
GetWindowInfo
GetWindowModuleFileNameA
GetWindowModuleFileNameW
GetWindowRect
HiliteMenuItem
IMPQueryIMEA
InsertMenuItemA
IntersectRect
InvalidateRgn
IsMenu
LoadIconA
LoadImageA
LoadKeyboardLayoutW
MapWindowPoints
MessageBoxIndirectA
MonitorFromWindow
OpenWindowStationA
PostThreadMessageW
RealGetWindowClassA
RegisterDeviceNotificationW
ReleaseDC
RemovePropA
SetActiveWindow
SetCaretPos
SetClassLongA
SetClassWord
SetDoubleClickTime
SetLayeredWindowAttributes
SetMessageExtraInfo
SetPropA
SetThreadDesktop
SetTimer
SetUserObjectInformationW
VkKeyScanExA
UnhookWinEvent
SwitchDesktop
SetWindowsHookExW
SetWindowsHookExA
SetWindowWord
SetWindowTextA
SetUserObjectSecurity
gdi32
AddFontResourceExW
AddFontResourceW
AnyLinkedFonts
BRUSHOBJ_pvGetRbrush
BeginPath
BitBlt
CopyMetaFileA
CopyMetaFileW
CreateDCA
CreateDIBPatternBrushPt
CreateEllipticRgnIndirect
CreatePalette
EndDoc
EngAlphaBlend
EngCreateBitmap
EngCreateClip
EngCreatePalette
EngDeletePath
EngFindResource
EngLoadModule
EngQueryLocalTime
EngTransparentBlt
EnumEnhMetaFile
ExtCreateRegion
FONTOBJ_pxoGetXform
GdiConsoleTextOut
GdiConvertBitmapV5
GdiConvertBrush
GdiConvertRegion
GdiDeleteSpoolFileHandle
GdiEndPageEMF
GdiEntry12
GdiEntry14
GdiEntry15
GdiEntry7
GdiEntry9
GdiGetPageCount
GdiPlayDCScript
GdiPlayJournal
GdiProcessSetup
GdiStartPageEMF
GetBkColor
GetCharABCWidthsA
AddFontMemResourceEx
GetDCPenColor
GetEUDCTimeStamp
GetEnhMetaFileDescriptionA
GetFontLanguageInfo
GetKerningPairsA
GetLogColorSpaceA
GetObjectA
GetOutlineTextMetricsW
GetTextFaceAliasW
GetTransform
GetViewportExtEx
GetWindowOrgEx
HT_Get8BPPMaskPalette
InvertRgn
MaskBlt
OffsetClipRgn
Pie
PolyDraw
PolylineTo
PtVisible
RectVisible
RemoveFontResourceA
RemoveFontResourceExA
RemoveFontResourceTracking
RestoreDC
ScaleViewportExtEx
SelectClipRgn
SetBrushOrgEx
SetDIBits
SetICMMode
SetMapMode
SetTextColor
SetTextJustification
SetVirtualResolution
SetWinMetaFileBits
SetWorldTransform
StartDocA
StartFormPage
UpdateColors
UpdateICMRegKeyA
UpdateICMRegKeyW
bMakePathNameW
GetDCBrushColor
ExtTextOutW
AbortPath
advapi32
RegOpenKeyA
shell32
SHCreateDirectoryExA
Shell_NotifyIcon
ShellHookProc
ShellExecuteExA
ShellExecuteEx
SHQueryRecycleBinA
SHPathPrepareForWriteW
SHLoadNonloadedIconOverlayIdentifiers
SHIsFileAvailableOffline
SHInvokePrinterCommandA
SHGetSpecialFolderPathW
CheckEscapesW
CommandLineToArgvW
DoEnvironmentSubstA
DoEnvironmentSubstW
DragAcceptFiles
DragFinish
DragQueryFileA
DragQueryFileAorW
DragQueryFileW
ExtractAssociatedIconExA
ExtractAssociatedIconExW
ExtractIconEx
ExtractIconExA
ExtractIconExW
ExtractIconW
FindExecutableA
FindExecutableW
SHAddToRecentDocs
SHAppBarMessage
SHBindToParent
SHBrowseForFolder
SHChangeNotify
SHGetSpecialFolderLocation
SHCreateProcessAsUserW
SHEmptyRecycleBinA
SHFileOperation
SHFileOperationA
SHFileOperationW
SHGetDataFromIDListA
SHGetDiskFreeSpaceExA
SHGetFileInfoA
SHGetFileInfoW
SHGetFolderLocation
SHGetFolderPathW
SHGetIconOverlayIndexA
SHGetInstanceExplorer
SHGetPathFromIDList
SHGetPathFromIDListA
SHGetPathFromIDListW
SHGetSettings
Shell_NotifyIconW
ole32
CoGetTreatAsClass
CoInitialize
CoInitializeEx
CoInitializeWOW
CoRegisterClassObject
CoRegisterMallocSpy
CoRevertToSelf
CoRevokeClassObject
CoTaskMemFree
CoTestCancel
CoUnmarshalInterface
CoWaitForMultipleHandles
CreateGenericComposite
CreateStdProgressIndicator
FmtIdToPropStgName
FreePropVariantArray
GetDocumentBitStg
GetHookInterface
GetRunningObjectTable
HACCEL_UserUnmarshal
HBITMAP_UserSize
HBITMAP_UserUnmarshal
HBRUSH_UserMarshal
HDC_UserMarshal
HENHMETAFILE_UserSize
HGLOBAL_UserFree
HGLOBAL_UserSize
HMENU_UserFree
HMETAFILEPICT_UserFree
HMETAFILEPICT_UserMarshal
HMETAFILEPICT_UserUnmarshal
HMETAFILE_UserFree
HPALETTE_UserSize
HWND_UserFree
HkOleRegisterObject
IIDFromString
MonikerCommonPrefixWith
OleConvertIStorageToOLESTREAMEx
OleCreate
OleCreateFromData
OleCreateLinkEx
OleCreateLinkFromDataEx
CoGetStandardMarshal
OleCreateMenuDescriptor
OleCreateStaticFromData
OleFlushClipboard
OleGetIconOfFile
OleInitialize
OleInitializeWOW
OleLoadFromStream
OleNoteObjectVisible
OleQueryCreateFromData
OleQueryLinkFromData
OleSetAutoConvert
OleSetClipboard
OleTranslateAccelerator
OleUninitialize
PropStgNameToFmtId
ReadClassStm
ReadFmtUserTypeStg
SNB_UserSize
SNB_UserUnmarshal
STGMEDIUM_UserMarshal
SetDocumentBitStg
StgCreateDocfile
StgGetIFillLockBytesOnFile
StgIsStorageILockBytes
StgOpenAsyncDocfileOnIFillLockBytes
StgOpenPropStg
StgPropertyLengthAsVariant
UpdateDCOMSettings
UtConvertDvtd32toDvtd16
WdtpInterfacePointer_UserSize
WdtpInterfacePointer_UserUnmarshal
WriteClassStg
WriteFmtUserTypeStg
CoGetCallerTID
CoFileTimeNow
CoCreateInstanceEx
CoBuildVersion
CoAllowSetForegroundWindow
CLSIDFromProgIDEx
CLIPFORMAT_UserUnmarshal
BindMoniker
OleCreateLinkToFileEx
CoGetPSClsid
CoGetObject
shlwapi
StrChrA
StrChrIA
StrChrIW
StrCmpNA
StrCmpNIA
StrCmpNIW
StrRChrIW
StrRChrW
StrRStrIA
StrRStrIW
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ