Static task
static1
Behavioral task
behavioral1
Sample
c7be0c734b47125472aaa339e1026e4e975825ffde5afa49dcb537fb6dccaaa0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c7be0c734b47125472aaa339e1026e4e975825ffde5afa49dcb537fb6dccaaa0.exe
Resource
win10v2004-20220901-en
General
-
Target
c7be0c734b47125472aaa339e1026e4e975825ffde5afa49dcb537fb6dccaaa0
-
Size
34KB
-
MD5
36c29935b441198f015990162b51b21a
-
SHA1
d4be8dfb2e314db4e6943673112e338fca7a9b3f
-
SHA256
c7be0c734b47125472aaa339e1026e4e975825ffde5afa49dcb537fb6dccaaa0
-
SHA512
2f9bfd956755477c6af8fe01dc4268b05cdd416ab8c87b1e982e353951844161a381b2e4ac9b9a510c8512f197504e830706f81827a7269f39c1f5172bf5d117
-
SSDEEP
384:rFcW3BdvKeFK+kBmkJn3P9puWKAd+uOU94DdcpvlbJFzdqsdBqLCr0Ep4AWqAZi7:rlbUjmy9BDBvlbJxdqBLc0EpGqAZrB10
Malware Config
Signatures
Files
-
c7be0c734b47125472aaa339e1026e4e975825ffde5afa49dcb537fb6dccaaa0.exe windows x86
44ad7f589c89714f631150955566f453
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
InterlockedCompareExchange
GetProcAddress
LoadLibraryA
GetWindowsDirectoryW
user32
DdeUninitialize
DefWindowProcA
DeferWindowPos
DeleteMenu
DestroyCursor
DlgDirListA
DlgDirSelectComboBoxExA
DragObject
DrawEdge
DrawIcon
DrawIconEx
EnableScrollBar
EnableWindow
EnumDesktopWindows
EnumDisplayMonitors
EnumDisplaySettingsExW
EnumPropsA
EnumWindowStationsW
FindWindowExA
FindWindowExW
FindWindowW
FlashWindowEx
GetAltTabInfoA
GetCapture
GetClassInfoA
GetClassNameW
GetClassWord
GetClientRect
GetClipboardViewer
GetDlgItemTextA
GetForegroundWindow
GetKeyNameTextA
GetKeyboardLayout
GetKeyboardState
GetLastInputInfo
GetListBoxInfo
GetMenu
GetMenuItemCount
GetMenuState
GetMessageExtraInfo
GetMonitorInfoA
GetOpenClipboardWindow
GetPriorityClipboardFormat
GetQueueStatus
GetScrollInfo
GetScrollPos
GetSubMenu
GetSystemMenu
DdePostAdvise
GetWindowContextHelpId
GetWindowPlacement
GetWindowRect
GetWindowTextA
GrayStringA
IMPQueryIMEA
InsertMenuA
IntersectRect
InvalidateRect
IsCharAlphaA
IsCharAlphaNumericW
IsCharLowerW
IsChild
IsDialogMessageA
IsDlgButtonChecked
IsWindow
IsWindowUnicode
LoadBitmapW
LockSetForegroundWindow
MessageBoxExW
ModifyMenuA
OemToCharBuffW
PostThreadMessageW
RealGetWindowClass
RegisterClassExA
RegisterClassW
RegisterDeviceNotificationW
RegisterHotKey
ReleaseCapture
SendDlgItemMessageA
SendIMEMessageExA
SendMessageCallbackA
SendMessageCallbackW
SendMessageW
SendNotifyMessageA
SendNotifyMessageW
SetCaretBlinkTime
SetCaretPos
SetClassLongW
SetClassWord
SetMenuItemInfoA
SetMenuItemInfoW
SetUserObjectInformationW
SetWinEventHook
SubtractRect
SwitchToThisWindow
TabbedTextOutA
ToAscii
ToUnicodeEx
TranslateAcceleratorW
UnpackDDElParam
UpdateLayeredWindow
UpdateWindow
WaitMessage
WindowFromDC
keybd_event
mouse_event
DdeImpersonateClient
DdeEnableCallback
DdeDisconnectList
DdeConnectList
CreatePopupMenu
CreateIconFromResourceEx
CreateDialogParamA
ClipCursor
CheckMenuRadioItem
CharUpperBuffW
CharPrevExA
CharLowerBuffW
ChangeClipboardChain
CallMsgFilterW
BroadcastSystemMessageA
BringWindowToTop
BlockInput
BeginDeferWindowPos
ArrangeIconicWindows
AdjustWindowRectEx
LoadIconA
GetUpdateRect
comdlg32
ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetFileTitleW
GetOpenFileNameA
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
ChooseColorA
ole32
CLIPFORMAT_UserFree
CLIPFORMAT_UserUnmarshal
CoAddRefServerProcess
CoAllowSetForegroundWindow
CoCreateGuid
CoCreateInstance
CoCreateObjectInContext
CoDisableCallCancellation
CoDosDateTimeToFileTime
CoFileTimeNow
CoGetClassObject
CoGetCurrentLogicalThreadId
CoGetInstanceFromFile
CoGetInstanceFromIStorage
CoGetMarshalSizeMax
CoGetObjectContext
CoGetStdMarshalEx
CoImpersonateClient
CoInitialize
CoLoadLibrary
CoQueryAuthenticationServices
CoQueryReleaseObject
CoReactivateObject
CoRegisterClassObject
CoRegisterMallocSpy
CoRegisterSurrogate
CoReleaseMarshalData
CoRevertToSelf
CoSuspendClassObjects
CoSwitchCallContext
CoTaskMemRealloc
CoTestCancel
CoTreatAsClass
CoUnmarshalInterface
CreateClassMoniker
CreateDataAdviseHolder
CreateFileMoniker
CreateItemMoniker
CreateObjrefMoniker
CreateOleAdviseHolder
CreatePointerMoniker
CreateStdProgressIndicator
CreateStreamOnHGlobal
DllGetClassObjectWOW
FreePropVariantArray
GetConvertStg
GetDocumentBitStg
GetHGlobalFromILockBytes
GetHGlobalFromStream
HACCEL_UserMarshal
HBITMAP_UserFree
HBRUSH_UserSize
HDC_UserMarshal
HDC_UserSize
HDC_UserUnmarshal
HENHMETAFILE_UserFree
HENHMETAFILE_UserSize
HGLOBAL_UserFree
HICON_UserFree
HICON_UserMarshal
HICON_UserSize
HMENU_UserFree
HMENU_UserSize
HMETAFILEPICT_UserUnmarshal
HMETAFILE_UserSize
HWND_UserFree
IsAccelerator
IsEqualGUID
MonikerCommonPrefixWith
OleConvertIStorageToOLESTREAM
OleConvertIStorageToOLESTREAMEx
OleCreateEmbeddingHelper
OleCreateFromDataEx
OleCreateLink
OleCreateLinkToFile
OleDestroyMenuDescriptor
OleInitialize
OleIsCurrentClipboard
OleQueryCreateFromData
OleRegEnumVerbs
OleRegGetUserType
OleRun
OleSave
OleSetContainedObject
OleSetMenuDescriptor
OleUninitialize
PropStgNameToFmtId
PropVariantClear
PropVariantCopy
ReadClassStg
ReadOleStg
ReadStringStream
RegisterDragDrop
RevokeDragDrop
SNB_UserFree
SNB_UserSize
SNB_UserUnmarshal
STGMEDIUM_UserFree
STGMEDIUM_UserSize
SetConvertStg
StgConvertPropertyToVariant
StgCreateDocfileOnILockBytes
StgOpenAsyncDocfileOnIFillLockBytes
StgOpenPropStg
StgPropertyLengthAsVariant
StringFromCLSID
StringFromGUID2
StringFromIID
UtGetDvtd16Info
WdtpInterfacePointer_UserFree
WdtpInterfacePointer_UserMarshal
WdtpInterfacePointer_UserSize
WdtpInterfacePointer_UserUnmarshal
WriteClassStm
WriteOleStg
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text6 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text5 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ