Static task
static1
Behavioral task
behavioral1
Sample
8dffb7338500ff1e08a0372acad152c7e488b644b7e718bba8b9e41fe052f285.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8dffb7338500ff1e08a0372acad152c7e488b644b7e718bba8b9e41fe052f285.exe
Resource
win10v2004-20221111-en
General
-
Target
8dffb7338500ff1e08a0372acad152c7e488b644b7e718bba8b9e41fe052f285
-
Size
4.4MB
-
MD5
d2eb276b05536b09298093a66a838081
-
SHA1
2bb3c3833b367e3468a94de4d613e34848b52ff6
-
SHA256
8dffb7338500ff1e08a0372acad152c7e488b644b7e718bba8b9e41fe052f285
-
SHA512
33cdea75262d501b39013ddf2c3eda7afaa0146460742028d6eaf9f31fa574f29605159b74fc528c76c3e727e791967af8260308cfdff7c81e618d32092f5dc0
-
SSDEEP
98304:fKLXWMxx5ZyesNVFvrrtOU0p3BBNm+UJ2S2ntb0sGjV46n+:C7BOyNm+UJpstblGjR+
Malware Config
Signatures
Files
-
8dffb7338500ff1e08a0372acad152c7e488b644b7e718bba8b9e41fe052f285.exe windows x86
70d40fe58415fccb0df3a00c0feaa945
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsValidCodePage
SetFilePointerEx
ReadConsoleW
MoveFileExW
GetConsoleMode
GetConsoleCP
LCMapStringW
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
GetStringTypeW
GetStdHandle
QueryPerformanceFrequency
HeapQueryInformation
GetEnvironmentStringsW
SetStdHandle
FreeLibraryAndExitThread
ExitThread
VirtualQuery
VirtualAlloc
GetSystemInfo
GetModuleHandleExW
ExitProcess
GetCommandLineW
GetCommandLineA
RtlUnwind
OutputDebugStringW
FreeEnvironmentStringsW
SetEnvironmentVariableA
FindFirstFileExA
WriteConsoleW
CreateFileW
GetFileType
GlobalFree
LoadResource
SizeofResource
CreateMutexA
FindResourceW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
GetLastError
GetSystemDirectoryA
SetFileAttributesA
GetFileAttributesA
DecodePointer
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GlobalAlloc
GlobalLock
GlobalUnlock
GetVersionExA
FreeLibrary
WinExec
lstrcpyA
lstrcatA
lstrlenA
LoadLibraryA
GetWindowsDirectoryA
MultiByteToWideChar
CreateThread
TerminateThread
CloseHandle
GetTickCount
GetTempPathA
DeleteFileA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
CreateFileA
GetVolumeInformationA
SetLastError
GlobalSize
LockResource
LocalFree
MulDiv
FormatMessageA
CopyFileA
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringA
EncodePointer
GetCurrentThreadId
GetSystemDirectoryW
FreeResource
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
LoadLibraryW
FindResourceA
GlobalAddAtomA
GlobalFindAtomA
GlobalGetAtomNameA
CompareStringA
SetEvent
WaitForSingleObject
SetThreadPriority
ResumeThread
GetCurrentThread
lstrcmpA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentProcessId
GetDiskFreeSpaceA
GetFileTime
GetFullPathNameA
SetFileTime
GetTempFileNameA
ReplaceFileA
SystemTimeToFileTime
SearchPathA
GetProfileIntA
FileTimeToSystemTime
GetThreadLocale
FindClose
FindFirstFileA
FlushFileBuffers
GetFileSize
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
DuplicateHandle
GetCurrentProcess
LoadLibraryExA
GetShortPathNameA
lstrcmpiA
MoveFileA
GetStringTypeExA
LocalAlloc
SystemTimeToTzSpecificLocalTime
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
GlobalFlags
GetACP
CompareStringW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
VirtualProtect
GetOEMCP
GetCPInfo
GetCurrentDirectoryA
FileTimeToLocalFileTime
GetFileAttributesExA
GetFileSizeEx
LocalFileTimeToFileTime
SetErrorMode
FindNextFileA
VerSetConditionMask
VerifyVersionInfoA
FindResourceExW
Sleep
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
user32
DestroyIcon
InsertMenuItemA
DestroyMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
IntersectRect
GetSystemMetrics
CharUpperA
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatA
GetWindowThreadProcessId
ShowOwnedPopups
PostQuitMessage
TranslateMessage
GetMessageA
GetDesktopWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
IsDlgButtonChecked
CheckDlgButton
SetDlgItemTextA
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetLastActivePopup
GetTopWindow
GetClassLongA
MapWindowPoints
MessageBoxA
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
GetScrollRange
UnpackDDElParam
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
SetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
CreateWindowExA
GetTabbedTextExtentW
InvalidateRgn
GetClassNameA
LoadBitmapW
UnregisterClassA
GetSysColor
SetRect
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
PostMessageA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
SendDlgItemMessageA
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
RemoveMenu
InsertMenuA
ReuseDDElParam
GetSystemMenu
DeleteMenu
SystemParametersInfoA
IsZoomed
SetCursorPos
DrawIcon
SetWindowRgn
GetKeyNameTextA
MapVirtualKeyA
GetMenuItemInfoA
GetSysColorBrush
RealChildWindowFromPoint
TrackMouseEvent
LoadImageW
GetMenuItemCount
GetMenuItemID
CopyImage
GetAsyncKeyState
LoadAcceleratorsW
LoadMenuW
PostThreadMessageA
CharNextA
SetScrollRange
CopyAcceleratorTableA
OffsetRect
OpenClipboard
SetClipboardData
EmptyClipboard
GetCapture
SetCapture
ReleaseCapture
GetDC
ReleaseDC
SetCursor
GetCursorPos
ScreenToClient
SetRectEmpty
InflateRect
EqualRect
PtInRect
LoadCursorW
IsWindowVisible
BringWindowToTop
MessageBeep
GetClipboardData
GetKeyState
CreatePopupMenu
EnableMenuItem
AppendMenuA
IsRectEmpty
GetParent
SetParent
GetActiveWindow
DrawTextA
DrawTextExA
GrayStringA
DrawStateA
TabbedTextOutA
RedrawWindow
DrawFocusRect
FillRect
FrameRect
CopyRect
GetWindowLongA
DestroyCursor
LoadImageA
IsWindow
SetWindowLongA
LoadCursorA
CopyIcon
GetWindow
CreateMenu
DrawIconEx
GetIconInfo
EnableScrollBar
ShowScrollBar
GetNextDlgGroupItem
SetCaretPos
GetCaretPos
WindowFromPoint
GetMenuStringA
GetMenuState
UnionRect
GetDCEx
GetSubMenu
LockWindowUpdate
HideCaret
InvertRect
NotifyWinEvent
GetMenuDefaultItem
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongA
DrawEdge
DrawFrameControl
WaitMessage
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
SendMessageA
EnableWindow
UpdateWindow
CloseClipboard
IsClipboardFormatAvailable
GetFocus
SetTimer
KillTimer
InvalidateRect
GetClientRect
GetWindowRect
GetWindowRgn
SubtractRect
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
GetUpdateRect
CharUpperBuffA
ModifyMenuA
GetDoubleClickTime
SetMenuDefaultItem
DestroyAcceleratorTable
CreateAcceleratorTableA
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
gdi32
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
OffsetRgn
EnumFontFamiliesExA
CreateRoundRectRgn
Polyline
CreatePolygonRgn
SetDIBColorTable
StretchBlt
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
GetTextFaceA
GetWindowOrgEx
GetTextExtentPoint32W
GetTextExtentPointA
GetTextAlign
GetStretchBltMode
GetPolyFillMode
GetNearestColor
GetBkMode
GetROP2
GetRgnBox
GetTextColor
CreateDIBSection
CreateEllipticRgn
GetViewportOrgEx
SetAbortProc
EndPage
StartPage
EndDoc
StretchDIBits
GetCharWidthA
GetTextMetricsA
SetRectRgn
PatBlt
GetMapMode
CreateRectRgnIndirect
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
MoveToEx
StartDocA
SetTextAlign
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetCurrentPositionEx
GetClipBox
ExcludeClipRect
DeleteDC
CreatePatternBrush
CreateHatchBrush
CreateBitmap
CreateDCA
CopyMetaFileA
GetBkColor
CreateRectRgn
GetTextExtentPoint32A
CreateFontIndirectA
ExtTextOutA
TextOutA
RectVisible
PtVisible
Escape
DeleteObject
CreateCompatibleBitmap
SelectObject
PolyBezier
Polygon
LPtoDP
DPtoLP
AbortDoc
SetPixel
Rectangle
GetStockObject
GetDeviceCaps
Ellipse
CreatePen
GetObjectA
CreateFontA
CreateCompatibleDC
BitBlt
CreateSolidBrush
msimg32
AlphaBlend
TransparentBlt
winspool.drv
OpenPrinterA
ClosePrinter
GetJobA
DocumentPropertiesA
advapi32
SystemFunction036
FreeSid
CheckTokenMembership
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExW
GetFileSecurityA
SetFileSecurityA
RegCreateKeyExA
RegEnumKeyA
RegDeleteKeyA
RegSetValueA
RegQueryValueA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
RegCloseKey
AllocateAndInitializeSid
shell32
ShellExecuteA
ShellExecuteExA
SHGetFileInfoA
DragQueryFileA
DragFinish
SHAddToRecentDocs
ExtractIconA
SHGetPathFromIDListA
SHAppBarMessage
SHBrowseForFolderA
DragAcceptFiles
SHGetDesktopFolder
SHGetSpecialFolderLocation
comctl32
ord17
shlwapi
PathFileExistsA
PathFindExtensionA
PathFindFileNameA
PathRemoveExtensionA
PathIsUNCA
PathStripToRootA
PathRemoveFileSpecW
UrlUnescapeA
StrFormatKBSizeA
uxtheme
GetThemePartSize
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
DrawThemeText
OpenThemeData
CloseThemeData
IsAppThemed
GetThemeColor
GetCurrentThemeName
GetWindowTheme
GetThemeSysColor
ole32
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CreateILockBytesOnHGlobal
CoLockObjectExternal
OleFlushClipboard
CoRevokeClassObject
OleIsCurrentClipboard
CoRegisterMessageFilter
CoGetClassObject
CoDisconnectObject
OleRun
CoInitializeEx
OleDraw
CreateStreamOnHGlobal
CLSIDFromString
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateInstance
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CLSIDFromProgID
OleLockRunning
DoDragDrop
RegisterDragDrop
RevokeDragDrop
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoUninitialize
oleaut32
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantChangeType
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantInit
SafeArrayAccessData
SafeArrayUnaccessData
VariantCopy
VarBstrFromDate
SysAllocString
LoadTypeLi
OleCreateFontIndirect
VariantClear
GetActiveObject
SysFreeString
SysAllocStringLen
SafeArrayDestroy
SysAllocStringByteLen
oledlg
ord8
gdiplus
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipBitmapLockBits
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
wininet
InternetQueryDataAvailable
InternetSetStatusCallback
InternetGetLastResponseInfoA
InternetQueryOptionA
InternetWriteFile
InternetSetFilePointer
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetGetConnectedState
HttpQueryInfoA
InternetReadFile
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
winmm
PlaySoundA
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 463KB - Virtual size: 463KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ