Static task
static1
Behavioral task
behavioral1
Sample
f563a040c149cdf1cb79ec5adc3c9c1ac95e8eb4b634a206125ac888c2e0bf4b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f563a040c149cdf1cb79ec5adc3c9c1ac95e8eb4b634a206125ac888c2e0bf4b.exe
Resource
win10v2004-20220812-en
General
-
Target
f563a040c149cdf1cb79ec5adc3c9c1ac95e8eb4b634a206125ac888c2e0bf4b
-
Size
1.2MB
-
MD5
196bf2bdaa1efe3182a242ac79e8e495
-
SHA1
cf4af82ad4dd9252a15d83ff21c7376465da8528
-
SHA256
f563a040c149cdf1cb79ec5adc3c9c1ac95e8eb4b634a206125ac888c2e0bf4b
-
SHA512
f666c0ed311998d6966b7d670a15bd4b0e303d0ce2a5a237c7777567599c3e594967bca6804113e8f994ffb0f1a8f4fd264571a19d6767fbfe63666a147d1e20
-
SSDEEP
24576:8uz185iHQZefejh6T4qSH9Y9C5iViV7TEV:8m8sffe6TdQ5t7m
Malware Config
Signatures
Files
-
f563a040c149cdf1cb79ec5adc3c9c1ac95e8eb4b634a206125ac888c2e0bf4b.exe windows x86
de3127d843a4d52243475a05165e799e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
WideCharToMultiByte
ExitProcess
GetSystemTime
lstrcpyW
GetUserDefaultLCID
CopyFileA
FindNextFileA
InterlockedIncrement
GetCurrentDirectoryA
GetPrivateProfileStringA
SetErrorMode
GetCurrentThread
EnumResourceLanguagesA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetTempPathA
SearchPathA
LocalLock
LocalUnlock
GetDiskFreeSpaceA
GetTempFileNameA
GlobalFlags
VirtualProtect
GetProfileIntA
FreeResource
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
WaitForMultipleObjects
CreateEventA
ReleaseMutex
ReleaseSemaphore
CreateSemaphoreA
WaitForSingleObject
TlsFree
TlsAlloc
TlsGetValue
RaiseException
GetCPInfo
GetFileTime
GetFileAttributesA
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalFree
GlobalUnlock
GlobalReAlloc
GetThreadLocale
GlobalLock
GetModuleFileNameA
GetShortPathNameA
FindFirstFileA
FindClose
CloseHandle
DuplicateHandle
GetFileSize
UnlockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
lstrcpynA
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
CompareStringA
lstrcmpiW
FindResourceExA
FindResourceA
LoadResource
DeleteCriticalSection
InitializeCriticalSection
GetLastError
lstrcpyA
lstrcmpA
lstrlenA
UnhandledExceptionFilter
LocalReAlloc
lstrcpynW
LocalFree
lstrcatW
LocalAlloc
ExpandEnvironmentStringsW
CopyFileW
FreeLibrary
SetLastError
WriteConsoleW
GetFileType
GetStdHandle
MultiByteToWideChar
GetModuleHandleW
GetCommandLineW
FindNextFileW
QueryPerformanceCounter
GetModuleHandleA
GetFileAttributesW
lstrlenW
DisableThreadLibraryCalls
GetLocaleInfoA
GetACP
InterlockedExchange
InterlockedDecrement
CreateThread
HeapSize
HeapFree
HeapAlloc
lstrcmpiA
GetWindowsDirectoryA
GlobalAlloc
CreateFileA
user32
SetWindowContextHelpId
CountClipboardFormats
WindowFromDC
CopyAcceleratorTableA
RegisterClipboardFormatA
InsertMenuA
ShowOwnedPopups
ValidateRect
RemoveMenu
IsClipboardFormatAvailable
SetWindowRgn
DrawIcon
FindWindowA
SetCursorPos
DestroyCursor
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
CharNextA
CheckMenuItem
GetMenuCheckMarkDimensions
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetWindowTextA
GetSysColorBrush
GetMenuStringA
GetMenuItemInfoA
BeginPaint
TabbedTextOutA
MapDialogRect
GetNextDlgTabItem
EndDialog
DrawFocusRect
MapVirtualKeyA
GetKeyNameTextA
GrayStringA
DrawTextExA
DrawTextA
GetTabbedTextExtentA
LockWindowUpdate
GetSystemMenu
AppendMenuA
DeleteMenu
IsRectEmpty
GetDC
ReleaseDC
SetTimer
RedrawWindow
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
GetCursorPos
GetWindowThreadProcessId
WindowFromPoint
SetCapture
ClientToScreen
LoadCursorA
LoadMenuA
GetSystemMetrics
GetActiveWindow
ReleaseCapture
InvalidateRect
InsertMenuItemA
CreatePopupMenu
BringWindowToTop
SetMenu
ShowWindow
GetDesktopWindow
IsWindowEnabled
TranslateAcceleratorA
LoadAcceleratorsA
WinHelpA
CreateWindowExA
SetWindowsHookExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetFocus
IsWindow
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
EndDeferWindowPos
GetDlgItem
MapWindowPoints
TrackPopupMenuEx
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
EnableWindow
ShowScrollBar
IsWindowVisible
GetClientRect
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetSysColor
AdjustWindowRectEx
GetParent
ScreenToClient
GetScrollInfo
SetScrollInfo
RegisterClassA
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowRect
CopyRect
PtInRect
GetWindow
LoadStringW
ClipCursor
DrawEdge
EnumChildWindows
wsprintfA
UnregisterClassA
CharUpperW
DestroyMenu
CharLowerA
DialogBoxParamA
CharUpperA
MsgWaitForMultipleObjects
LoadStringA
SetDlgItemTextA
LoadImageA
DestroyIcon
SetWindowPos
CreateDialogParamA
CharPrevA
EnableMenuItem
advapi32
RegSetValueExA
RegUnLoadKeyW
RegOpenKeyExW
RegQueryValueExW
RegLoadKeyW
RegSaveKeyW
RegQueryValueExA
RegCloseKey
RegEnumValueA
RegDeleteKeyA
GetFileSecurityW
ole32
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
msvcrt
strchr
ldexp
memmove
fprintf
malloc
free
vfwprintf
vswprintf
strtod
fgetwc
fflush
wcscpy
exit
_chdir
atol
fwprintf
shlwapi
PathFindExtensionA
PathRemoveExtensionA
PathFindFileNameA
UrlUnescapeA
PathIsUNCA
PathStripToRootA
Sections
.text Size: 180KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ