Static task
static1
Behavioral task
behavioral1
Sample
1b077c5f9c6707bfc09b05d769ab9bd408255adf52fb50a5ee31bb608ab1a79b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1b077c5f9c6707bfc09b05d769ab9bd408255adf52fb50a5ee31bb608ab1a79b.exe
Resource
win10v2004-20220812-en
General
-
Target
1b077c5f9c6707bfc09b05d769ab9bd408255adf52fb50a5ee31bb608ab1a79b
-
Size
88KB
-
MD5
fca083b9d216eba3fa7ed0b499a7c252
-
SHA1
c007a9ab124525153113e0ea4fa69d8423577df4
-
SHA256
1b077c5f9c6707bfc09b05d769ab9bd408255adf52fb50a5ee31bb608ab1a79b
-
SHA512
f0cdd2b08b2acda409551802fc68abaad57fa8c7980189e6b102d466dc5494c0a8090e710a3027c691b68dc5dbb9984d15c566e372b4aedca1a9067f4824fe79
-
SSDEEP
1536:0x9WAbAvqntGDChB8Ye9xYfqdZcwvJPE/bBuWRHhneqO0uJd8DssbY6vGD1Rq:0x9WAbEqy/xVPDPHWFdHXbxvGD1Rq
Malware Config
Signatures
Files
-
1b077c5f9c6707bfc09b05d769ab9bd408255adf52fb50a5ee31bb608ab1a79b.exe windows x86
c287d66e745cf94508006c76a28dbd55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
t2embed
_TTGetEmbeddedFontInfo@28
TTRunValidationTestsEx
TTGetEmbeddingType
_TTEmbedFontFromFileA@52
TTRunValidationTests
TTEnableEmbeddingForFacename
TTIsEmbeddingEnabled
_TTRunValidationTests@8
_TTLoadEmbeddedFont@40
TTDeleteEmbeddedFont
TTEmbedFont
_TTGetEmbeddingType@8
TTGetEmbeddedFontInfo
_TTCharToUnicode@24
TTGetNewFontName
TTEmbedFontEx
TTEmbedFontFromFileA
_TTIsEmbeddingEnabled@8
_TTDeleteEmbeddedFont@12
TTCharToUnicode
_TTIsEmbeddingEnabledForFacename@8
_TTEnableEmbeddingForFacename@8
TTIsEmbeddingEnabledForFacename
_TTEmbedFont@44
TTLoadEmbeddedFont
gdi32
PATHOBJ_bEnum
EngAlphaBlend
SetViewportExtEx
GetBkMode
FloodFill
OffsetClipRgn
DdEntry15
RemoveFontResourceA
GetKerningPairs
GdiSetBatchLimit
OffsetWindowOrgEx
DdEntry45
EngTextOut
XFORMOBJ_bApplyXform
PATHOBJ_vEnumStartClipLines
ClearBitmapAttributes
GetCharWidth32W
BRUSHOBJ_pvGetRbrush
GetBoundsRect
GetCharWidthFloatA
EngStrokePath
GetEUDCTimeStampExW
GdiGetDC
AbortPath
GetICMProfileA
GdiEntry11
GetCharWidthW
CreateRectRgnIndirect
FONTOBJ_cGetAllGlyphHandles
GetGraphicsMode
FlattenPath
GetRelAbs
GetROP2
SetDeviceGammaRamp
AbortDoc
Polyline
SetMapMode
DdEntry7
DdEntry51
GdiSetAttrs
EqualRgn
ArcTo
CreateCompatibleBitmap
GetEnhMetaFileDescriptionW
PaintRgn
GdiDllInitialize
AddFontResourceA
ExcludeClipRect
DescribePixelFormat
GdiEntry6
AngleArc
CreatePolygonRgn
DdEntry27
DdEntry26
GdiArtificialDecrementDriver
EnumFontFamiliesExW
GetStringBitmapW
ChoosePixelFormat
EnableEUDC
HT_Get8BPPFormatPalette
CreateDCA
DdEntry35
kernel32
RemoveDirectoryW
OpenFileMappingW
CreateFileMappingW
GlobalWire
QueryDosDeviceA
EndUpdateResourceA
ExitProcess
AddLocalAlternateComputerNameW
VirtualAlloc
ResumeThread
GetSystemTimeAsFileTime
LoadLibraryA
IsDBCSLeadByteEx
GetCommProperties
TransmitCommChar
MoveFileExW
ReleaseActCtx
SetFileValidData
LZRead
LZCloseFile
NlsGetCacheUpdateCount
CreateWaitableTimerW
GetFullPathNameA
DefineDosDeviceW
GetCommandLineA
FlushViewOfFile
QueryPerformanceCounter
EnumSystemLocalesA
SetCriticalSectionSpinCount
InterlockedPushEntrySList
SetComputerNameA
SetVolumeLabelW
GetModuleHandleA
LZCopy
WriteProfileStringW
SetConsoleCP
BindIoCompletionCallback
oleaut32
VarI4FromDate
VarUI1FromBool
OleSavePictureFile
VarI4FromI2
VarR8FromI1
VarI1FromUI1
VarR4FromUI4
BSTR_UserMarshal
SysAllocStringLen
VarUI8FromDisp
SafeArrayGetRecordInfo
VarFormatCurrency
VarBstrFromR4
VarI2FromDec
RevokeActiveObject
GetErrorInfo
DosDateTimeToVariantTime
VarFormatNumber
VarI2FromUI4
CreateStdDispatch
VarI4FromUI1
VarI1FromR8
VarBoolFromR4
VarI8FromUI2
QueryPathOfRegTypeLib
VarI8FromUI4
VarI1FromDate
VarUI2FromStr
VarI2FromUI8
VarDecInt
VarR4FromUI2
GetRecordInfoFromGuids
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ