Static task
static1
Behavioral task
behavioral1
Sample
fe12846dbd177cc7fa2a8e55dfab5aba331f1c659ee5eac534ca10cf27e8764a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fe12846dbd177cc7fa2a8e55dfab5aba331f1c659ee5eac534ca10cf27e8764a.exe
Resource
win10v2004-20221111-en
General
-
Target
fe12846dbd177cc7fa2a8e55dfab5aba331f1c659ee5eac534ca10cf27e8764a
-
Size
582KB
-
MD5
10b205843ca4fddc9f17ce325110e48f
-
SHA1
2cdf3fc7a9b3375f3c6af58b823c4f928b9c0c58
-
SHA256
fe12846dbd177cc7fa2a8e55dfab5aba331f1c659ee5eac534ca10cf27e8764a
-
SHA512
7981a1f1a1bee4642d4475850e9fd995202e26dc5254f415c254bf68459255aab08fc30774f587dc623b239543a8826b819270bdd2bdfa93a60c1319c2b8b2e6
-
SSDEEP
12288:rMhryC+WOTurmfJwIO0g0JxuP92rTHKwJT/jHaA:2rT02kIxODKw0A
Malware Config
Signatures
Files
-
fe12846dbd177cc7fa2a8e55dfab5aba331f1c659ee5eac534ca10cf27e8764a.exe windows x86
274c10df79644799848eb3eb390eeddd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GetHandleInformation
WaitForSingleObject
CreateFiber
LockFileEx
GetVersion
LocalSize
FindNextFileA
UnmapViewOfFile
DefineDosDeviceW
GetProfileSectionW
FreeResource
GetLocalTime
GlobalGetAtomNameW
GetDateFormatW
WaitNamedPipeW
GetLocaleInfoW
CreateTapePartition
GetFileSize
EnumCalendarInfoW
LoadLibraryExA
FlushInstructionCache
EraseTape
GetDriveTypeW
FindNextVolumeA
GetVolumePathNameW
GetCPInfoExW
SetConsoleCtrlHandler
CreateJobObjectW
CreateMutexA
GetSystemTime
FindResourceExA
GetDefaultCommConfigA
LeaveCriticalSection
FindNextVolumeMountPointA
GetVDMCurrentDirectories
FreeLibrary
CallNamedPipeW
ResumeThread
SetSystemTime
GetAtomNameW
SearchPathA
UnhandledExceptionFilter
SetThreadIdealProcessor
SetThreadPriorityBoost
WriteProfileStringW
UnlockFileEx
UpdateResourceA
IsBadReadPtr
HeapWalk
GetLastError
EnumResourceNamesW
PrepareTape
OpenEventA
ReleaseMutex
SetVolumeMountPointA
PostQueuedCompletionStatus
GetComputerNameA
GetCurrentDirectoryW
lstrcatA
GetProcessAffinityMask
LockResource
FindFirstVolumeMountPointA
GetCompressedFileSizeW
SwitchToFiber
GetSystemTimeAsFileTime
VirtualAlloc
IsValidLocale
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
gdi32
FloodFill
CreateScalableFontResourceW
GetDeviceGammaRamp
ResizePalette
GetTextAlign
GetDIBColorTable
EndDoc
GetClipBox
SelectPalette
GdiPlayJournal
GetDeviceCaps
Chord
SetWinMetaFileBits
GetTextCharsetInfo
ModifyWorldTransform
CreateCompatibleBitmap
CreateEllipticRgn
GetPath
SetICMMode
SetFontEnumeration
GetStretchBltMode
GetCurrentPositionEx
GetGlyphIndicesW
SetPixelV
SetROP2
CopyEnhMetaFileW
CopyMetaFileA
SetMapperFlags
EnumObjects
GetPaletteEntries
GetObjectA
PolyPatBlt
GetPixel
GetTextFaceW
GetOutlineTextMetricsW
CancelDC
GetCharWidthFloatW
SetDCBrushColor
ExcludeClipRect
MaskBlt
SetPixelFormat
EnumFontFamiliesExA
GetTextExtentExPointA
GetTextMetricsA
CreateBitmap
DeleteDC
SelectFontLocal
CreateMetaFileW
FillRgn
SetAbortProc
EnumFontFamiliesA
GetMiterLimit
GetTextExtentPointW
CombineRgn
GetTextExtentPointI
SelectObject
GetGraphicsMode
SetDIBColorTable
GetFontResourceInfoW
SetTextAlign
GdiFlush
CreateCompatibleDC
GetBitmapBits
GetStockObject
StartPage
FixBrushOrgEx
GetNearestPaletteIndex
SetWindowOrgEx
PolyTextOutA
CreateEnhMetaFileA
CreateFontIndirectW
GetLogColorSpaceW
opengl32
glTexCoord2f
glTexCoord1iv
glArrayElement
glColor4b
glRasterPos2sv
glPopAttrib
glColor4iv
glStencilOp
glColor3dv
glGetTexEnvfv
glLightModelfv
wglDeleteContext
glMap1f
glRectsv
glScalef
glClear
glLoadIdentity
glClearDepth
wglDescribeLayerPlane
glRasterPos2s
glFrustum
glTexEnvfv
glLoadName
glTexCoord3i
glRasterPos4iv
wglUseFontBitmapsA
glEnd
glTexGenf
glGetPixelMapuiv
glIndexs
glTexCoord1s
glTexCoord2iv
glRasterPos3dv
glLighti
glFogfv
glMaterialfv
wglUseFontBitmapsW
glTexEnvi
glGetClipPlane
glVertex2i
glEvalPoint2
glVertex4dv
glRasterPos3f
glDebugEntry
wglSetLayerPaletteEntries
glIndexsv
glLineWidth
glColor3ub
wglMakeCurrent
glEvalCoord1d
glVertex3dv
glPixelTransferf
glTexGeni
glTexParameteri
glPopClientAttrib
glOrtho
glGetTexGendv
glGetIntegerv
glRasterPos4i
glEnable
glIndexi
glRectdv
glClearColor
GlmfInitPlayback
glEvalCoord1dv
glMap2d
glLightiv
glNormal3bv
glRotated
glTexCoord4i
wglCreateContext
glNormal3b
wglGetDefaultProcAddress
glCallList
glNormal3d
glRectiv
glTexGeniv
glShadeModel
glRasterPos2i
glVertex4f
glVertex2dv
glRasterPos4fv
glEvalCoord1f
wglSwapMultipleBuffers
glNormal3s
shell32
StrChrW
StrRChrIW
StrChrIA
StrStrIA
StrRChrW
shlwapi
UrlIsNoHistoryW
SHCreateShellPalette
SHGetValueA
SHRegWriteUSValueW
PathCompactPathA
UrlApplySchemeA
UrlGetLocationA
StrTrimA
PathFindOnPathW
PathGetCharTypeA
StrFormatByteSizeW
SHDeleteValueW
StrCSpnIW
UrlCompareA
PathIsPrefixW
PathCanonicalizeW
SHGetInverseCMAP
PathCombineW
PathGetArgsA
SHRegEnumUSKeyW
UrlGetPartA
UrlCreateFromPathW
PathIsUNCServerShareW
PathIsRootA
UrlGetPartW
SHRegOpenUSKeyA
SHEnumKeyExW
SHEnumKeyExA
PathFindFileNameW
PathGetArgsW
PathFindExtensionW
UrlEscapeW
SHRegQueryInfoUSKeyA
SHDeleteOrphanKeyA
PathRemoveArgsA
SHDeleteKeyW
IntlStrEqWorkerA
PathParseIconLocationW
SHSetValueW
PathIsUNCServerA
SHQueryInfoKeyA
PathSetDlgItemPathA
PathFindOnPathA
PathCreateFromUrlA
PathAddExtensionW
SHRegCreateUSKeyA
SHRegOpenUSKeyW
SHDeleteValueA
StrToIntW
PathIsUNCServerW
SHRegSetUSValueW
UrlCreateFromPathA
PathRemoveExtensionW
PathAddBackslashA
PathMakePrettyW
StrIsIntlEqualA
PathFindNextComponentA
SHRegWriteUSValueA
SHQueryInfoKeyW
PathIsFileSpecW
PathRemoveFileSpecW
PathCanonicalizeA
StrDupW
PathIsSystemFolderA
winmm
mmioStringToFOURCCA
waveOutWrite
joySetCapture
waveInReset
waveInGetErrorTextA
mciSendCommandW
midiInGetDevCapsW
timeGetTime
waveInGetID
sndPlaySoundW
mmioRenameA
waveOutGetPlaybackRate
waveInStop
waveOutReset
mciDriverNotify
timeGetSystemTime
mixerGetDevCapsW
auxOutMessage
midiInGetNumDevs
mciLoadCommandResource
PlaySoundW
midiConnect
mmTaskYield
waveOutSetPlaybackRate
midiInClose
mmioAdvance
midiStreamStop
midiInPrepareHeader
joyGetDevCapsA
DrvGetModuleHandle
auxGetDevCapsW
joyConfigChanged
waveInGetDevCapsA
midiOutGetDevCapsA
mmGetCurrentTask
PlaySoundA
midiStreamProperty
auxGetNumDevs
midiOutClose
mmioOpenW
joyGetDevCapsW
midiStreamPause
midiOutCachePatches
waveInMessage
midiOutGetDevCapsW
waveOutOpen
midiOutOpen
midiStreamOut
SendDriverMessage
mciGetDeviceIDFromElementIDW
waveOutGetDevCapsW
mmioDescend
mmioAscend
mciGetYieldProc
waveInAddBuffer
midiOutSetVolume
DriverCallback
timeGetDevCaps
mciGetDeviceIDW
midiStreamPosition
joy32Message
midiOutReset
WOW32DriverCallback
mmTaskSignal
WOW32ResolveMultiMediaHandle
winspool.drv
AddJobA
DocumentPropertiesA
ExtDeviceMode
OpenPrinterA
StartDocDlgW
AddFormA
EndPagePrinter
SetPrinterDataExW
EnumPrinterKeyW
EnumPrintProcessorsA
ADVANCEDSETUPDIALOG
GetPrinterDriverDirectoryW
AddPortExW
SetPortA
DeletePrinterDriverW
DocumentPropertiesW
EXTDEVICEMODE
DevicePropertySheets
GetPrinterDataA
msvcrt
fclose
fsetpos
_wspawnle
fread
fputc
_setmbcp
fprintf
fwprintf
ftell
fopen
memset
__crtLCMapStringA
_unlink
ferror
atan
_mbsnbcpy
feof
sqrt
fwrite
sprintf
fputs
fseek
vwprintf
gets
_HUGE
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
printf
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 524KB - Virtual size: 521KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE