Static task
static1
Behavioral task
behavioral1
Sample
d1317c6edb12ae881df580d93a91554d578b7a9772df97017bd324e52cfee1d3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d1317c6edb12ae881df580d93a91554d578b7a9772df97017bd324e52cfee1d3.exe
Resource
win10v2004-20220901-en
General
-
Target
d1317c6edb12ae881df580d93a91554d578b7a9772df97017bd324e52cfee1d3
-
Size
1.2MB
-
MD5
f199ae805d4fed78ec2898ffd4fcf772
-
SHA1
f895f197443a0ba5cf1451ffa6561f267cb422aa
-
SHA256
d1317c6edb12ae881df580d93a91554d578b7a9772df97017bd324e52cfee1d3
-
SHA512
cd53c3ec23d51029a31f4e34af72b59ab4e7d62524afee2e3e309408d45b5a7b1a11ea1ed2fde2507ce5f8ddb94918024e70e810485c7ccdba28af157c137dd3
-
SSDEEP
24576:X0DdO4ggHc6+V7gRovSUz+JrGn48V0I9gr6bpI5Wx4bEW8HpyQArUik:X0Xx0SUzOrG4ZIOg2Mt7pyQAc
Malware Config
Signatures
Files
-
d1317c6edb12ae881df580d93a91554d578b7a9772df97017bd324e52cfee1d3.exe windows x86
7545a8fa97cc9b191cabf9afdc7babb9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
UuidCreate
UuidToStringA
RpcStringFreeA
UuidFromStringA
mpr
WNetOpenEnumA
WNetCloseEnum
WNetEnumResourceA
kernel32
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
lstrcmpA
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetModuleHandleW
InterlockedIncrement
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetAtomNameA
SystemTimeToFileTime
GetFileAttributesExA
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileSizeEx
GetFileTime
GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
GetCurrentDirectoryA
RtlUnwind
InterlockedDecrement
ExitProcess
HeapFree
GetTimeFormatA
GetDateFormatA
HeapReAlloc
UnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
VirtualProtect
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
ExitThread
HeapSize
SetHandleCount
GetStdHandle
GetTimeZoneInformation
IsValidCodePage
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
FatalAppExitA
InitializeCriticalSectionAndSpinCount
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
CompareStringW
SetEnvironmentVariableA
GetModuleFileNameW
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GetThreadLocale
GlobalDeleteAtom
CompareStringA
lstrcmpW
FileTimeToLocalFileTime
FindNextFileA
SuspendThread
GetCurrentThreadId
ResumeThread
SetThreadPriority
SetLastError
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenW
MulDiv
RaiseException
Beep
GetExitCodeProcess
lstrcatA
lstrcpyA
SetEvent
GetProcessHeap
HeapAlloc
CreateMutexA
SetCurrentDirectoryA
SetConsoleCtrlHandler
SetComputerNameA
GetACP
IsBadReadPtr
TerminateThread
SetUnhandledExceptionFilter
SetPriorityClass
CreateEventA
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
VirtualFreeEx
OpenMutexA
GetLogicalDrives
GetComputerNameA
OpenFile
_lclose
GetSystemTimes
GetDiskFreeSpaceExA
GlobalMemoryStatusEx
SetSystemPowerState
GetSystemWindowsDirectoryA
GetFileSize
ReadDirectoryChangesW
ReleaseMutex
MoveFileA
SetLocalTime
WTSGetActiveConsoleSessionId
DeviceIoControl
Module32First
GetProcessTimes
FileTimeToSystemTime
WaitForSingleObject
MoveFileExA
GetSystemTime
GetTickCount
LocalAlloc
GetLocalTime
SetFilePointer
WriteFile
CreatePipe
CreateProcessA
PeekNamedPipe
TerminateProcess
CreateThread
GetTempPathA
CreateFileA
ReadFile
WinExec
LocalFree
FormatMessageA
LoadLibraryExA
lstrlenA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetLogicalDriveStringsA
GetDriveTypeA
CopyFileA
GetFileAttributesA
DeleteFileA
CreateDirectoryA
FindFirstFileA
GetStringTypeExA
GlobalFindAtomA
GetCurrentProcessId
FindClose
FindResourceA
LoadResource
LockResource
SizeofResource
GetModuleFileNameA
GetLastError
GetSystemDirectoryA
GetPrivateProfileStringA
GetVersion
Sleep
OutputDebugStringA
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetSystemInfo
GetVersionExA
FreeLibrary
ReadProcessMemory
LoadLibraryA
GetCurrentProcess
GetModuleHandleA
GetProcAddress
OpenProcess
WideCharToMultiByte
lstrcmpiA
CreateToolhelp32Snapshot
CloseHandle
Process32First
Process32Next
GetSystemTimeAsFileTime
user32
TabbedTextOutA
FillRect
UnpackDDElParam
ReuseDDElParam
GetMenuBarInfo
ReleaseCapture
LoadAcceleratorsA
InvalidateRect
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
TranslateAcceleratorA
CharUpperA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
ScrollWindowEx
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
MapVirtualKeyA
GetKeyNameTextA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetFocus
GetWindowTextLengthA
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
DrawTextExA
TrackPopupMenuEx
SetMenu
SetCapture
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
GetParent
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
CopyRect
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowPos
OffsetRect
IntersectRect
GetWindowPlacement
GetWindowRect
GetWindow
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
PeekMessageA
ValidateRect
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
EnumDisplaySettingsA
ChangeDisplaySettingsA
GetDC
ReleaseDC
wsprintfA
RegisterWindowMessageA
EnumThreadWindows
UnregisterDeviceNotification
GetCursorPos
LoadMenuA
GetSubMenu
GrayStringA
ClientToScreen
BeginPaint
EndPaint
InflateRect
PostQuitMessage
ShowOwnedPopups
GetSysColorBrush
GetMenuItemInfoA
GetDialogBaseUnits
UnregisterClassA
IsRectEmpty
DeleteMenu
GetSystemMenu
SetParent
ScrollWindow
UnionRect
SetMenuDefaultItem
TrackPopupMenu
DestroyMenu
LoadImageA
RegisterHotKey
RegisterDeviceNotificationA
WindowFromPoint
WaitMessage
DestroyIcon
SetRect
GetDCEx
LockWindowUpdate
SetScrollRange
GetPropA
SetWindowLongA
RemovePropA
GetSystemMetrics
LoadIconA
SetForegroundWindow
IsIconic
DrawIcon
IsWindow
GetDesktopWindow
GetWindowDC
KillTimer
SetTimer
DrawTextA
LoadBitmapA
PtInRect
wvsprintfA
GetForegroundWindow
EnumWindows
IsWindowEnabled
GetWindowLongA
GetWindowTextA
FindWindowExA
SetFocus
GetDlgCtrlID
GetWindowThreadProcessId
IsWindowVisible
GetLastInputInfo
keybd_event
SendMessageTimeoutA
FindWindowA
PostMessageA
LoadCursorA
SetCursor
EnableWindow
GetClientRect
SendMessageA
ExitWindowsEx
MessageBoxA
SystemParametersInfoA
ScreenToClient
gdi32
SetWindowExtEx
SetWindowOrgEx
OffsetWindowOrgEx
GetBkColor
StretchDIBits
CreateFontA
GetCharWidthA
GetTextMetricsA
GetTextExtentPoint32A
DPtoLP
GetMapMode
CombineRgn
SetRectRgn
CreateFontIndirectA
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
GetStockObject
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
CopyMetaFileA
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
DeleteObject
BitBlt
CreateCompatibleDC
CreatePatternBrush
GetObjectA
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
PatBlt
CreateRectRgnIndirect
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CreateDCA
ScaleWindowExtEx
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
EnumPrintersA
ClosePrinter
advapi32
CloseServiceHandle
RegEnumKeyA
RegDeleteKeyA
RegSetValueA
RegQueryValueA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
DeleteService
CreateServiceA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
ConvertSidToStringSidA
LookupAccountNameA
RegEnumKeyExA
RegOpenKeyA
RegEnumValueA
ReadEncryptedFileRaw
RegDeleteValueA
DuplicateTokenEx
CreateProcessAsUserA
EnumServicesStatusA
QueryServiceConfigA
GetTokenInformation
LookupAccountSidA
OpenEncryptedFileRawA
WriteEncryptedFileRaw
CloseEncryptedFileRaw
RegQueryValueExA
RegCreateKeyA
ControlService
StartServiceA
ChangeServiceConfigA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenSCManagerA
OpenServiceA
QueryServiceStatus
shell32
ExtractIconA
ShellExecuteA
ShellExecuteExA
Shell_NotifyIconA
SHGetFileInfoA
DragFinish
DragQueryFileA
SHChangeNotify
shlwapi
PathRemoveFileSpecW
PathFindExtensionA
PathRemoveExtensionA
PathStripToRootA
PathIsUNCA
StrStrIA
PathFindFileNameA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
WriteFmtUserTypeStg
CoTaskMemFree
SetConvertStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
CreateBindCtx
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoInitializeEx
StringFromGUID2
CoDisconnectObject
CLSIDFromString
WriteClassStg
oleaut32
SystemTimeToVariantTime
VarBstrFromDate
VarCyFromStr
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarDateFromStr
SysStringLen
SysFreeString
SysAllocStringByteLen
SysStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SysReAllocStringLen
ws2_32
gethostname
WSAStartup
closesocket
send
connect
htons
gethostbyname
socket
recv
accept
listen
bind
WSAGetLastError
sendto
htonl
setsockopt
recvfrom
select
getsockname
inet_ntoa
WSACleanup
inet_addr
wininet
InternetCheckConnectionA
setupapi
SetupDiCallClassInstaller
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiGetClassDescriptionA
SetupDiGetDeviceRegistryPropertyA
SetupDiSetClassInstallParamsA
gdiplus
GdipDeleteGraphics
GdipDisposeImage
GdipSaveImageToFile
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipGetImageGraphicsContext
GdipScaleWorldTransform
GdipDrawImageI
GdiplusShutdown
GdiplusStartup
GdipCloneImage
GdipAlloc
GdipFree
psapi
GetModuleBaseNameA
EnumProcessModules
GetProcessMemoryInfo
netapi32
NetApiBufferFree
NetUserEnum
NetShareEnum
iphlpapi
GetIpNetTable
GetAdaptersInfo
wtsapi32
WTSQueryUserToken
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
dbghelp
SymCleanup
SymFromAddr
StackWalk64
SymFunctionTableAccess64
SymInitialize
SymGetModuleBase64
Sections
.text Size: 752KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ