MyCopyMemory
Static task
static1
Behavioral task
behavioral1
Sample
fd5f0e1006a4f471408d5d1bd5514177dbb69731bd74df6d2bc918e813fd2170.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fd5f0e1006a4f471408d5d1bd5514177dbb69731bd74df6d2bc918e813fd2170.exe
Resource
win10v2004-20221111-en
General
-
Target
fd5f0e1006a4f471408d5d1bd5514177dbb69731bd74df6d2bc918e813fd2170
-
Size
828KB
-
MD5
408bf3c0eb9f9b8dec713879fc7063d6
-
SHA1
f9a2ead86654dbb8cb39a0b264ab2b3fd080a4d4
-
SHA256
fd5f0e1006a4f471408d5d1bd5514177dbb69731bd74df6d2bc918e813fd2170
-
SHA512
94558c908297bb1a712afc81593c055cd2c5687d7625757722b19ddba29b09b4ea4b6ff640de2b5033314bcad8d409a97d03e64803b4460eb8b382add99fa827
-
SSDEEP
12288:omyJnYdyV6KCwZQNiyxH1inQjDDbJei2Dks9HUV7E7z/+pb55SdpsE:oVudLKLZQf1jnbJedZ2E7zWb55Sdp
Malware Config
Signatures
Files
-
fd5f0e1006a4f471408d5d1bd5514177dbb69731bd74df6d2bc918e813fd2170.exe windows x86
6e9776db308968370d9eb5e7a02ebd2c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
HeapAlloc
GetProcAddress
VirtualProtect
SetUnhandledExceptionFilter
GetCurrentProcess
OpenEventW
WaitForSingleObject
DuplicateHandle
GlobalHandle
SetLastError
FlushFileBuffers
GetCurrentDirectoryW
LocalAlloc
GlobalLock
CreateEventW
HeapFree
FindResourceA
RaiseException
SetThreadPriority
GetStartupInfoW
InterlockedExchange
LCMapStringW
GetPrivateProfileStringW
GlobalFlags
SetHandleCount
HeapDestroy
DisconnectNamedPipe
SearchPathW
GetLastError
lstrcmpiW
VirtualFree
lstrcmpW
GetCommandLineW
GetFileSizeEx
UnhandledExceptionFilter
HeapQueryInformation
GetFileAttributesW
ReadFile
GetConsoleOutputCP
GetWindowsDirectoryW
GetOverlappedResult
CreateDirectoryW
EnterCriticalSection
lstrcpyW
GetFileAttributesExW
LoadResource
GetVersion
FreeEnvironmentStringsW
GetConsoleTitleA
GetTickCount
TerminateProcess
GlobalFindAtomW
GetTempFileNameW
lstrcmpA
GetLocaleInfoW
GetProfileIntW
PeekNamedPipe
LoadLibraryA
GetCPInfo
GetCurrentThreadId
GlobalAlloc
FindFirstFileW
SetFilePointer
GetUserDefaultUILanguage
IsDebuggerPresent
FreeLibrary
ExitProcess
GetOEMCP
CompareStringW
FreeResource
CreateFileW
LocalFree
user32
DrawTextExW
ClientToScreen
BeginPaint
CreateWindowExW
SetCursor
GetSysColorBrush
RegisterWindowMessageW
ValidateRect
SendDlgItemMessageW
SystemParametersInfoW
GetSystemMenu
GetDoubleClickTime
GetPropW
DestroyCursor
MapWindowPoints
GetUpdateRect
IsChild
ShowOwnedPopups
EndDeferWindowPos
DefMDIChildProcW
ExitWindowsEx
GetParent
TabbedTextOutW
GetMessageW
SetRectEmpty
SetRect
TrackPopupMenu
SetClipboardData
EqualRect
ToUnicodeEx
GetNextDlgGroupItem
FrameRect
GetWindowLongW
UnregisterClassW
PostThreadMessageW
GetFocus
UnregisterClassA
CopyAcceleratorTableW
UnhookWindowsHookEx
SetActiveWindow
PeekMessageW
GetMenuDefaultItem
gdi32
OffsetRgn
GetBoundsRect
ScaleViewportExtEx
StretchDIBits
Escape
RectVisible
Rectangle
RestoreDC
Polygon
SetTextAlign
GetClipBox
CombineRgn
DeleteObject
GetTextCharsetInfo
SetDIBColorTable
Ellipse
SelectPalette
SetWindowOrgEx
SetTextColor
SetWindowExtEx
SetROP2
SetBkColor
EnumFontFamiliesExW
ExcludeClipRect
GetLayout
ExtFloodFill
SetPixelV
LPtoDP
SetPixel
SetBkMode
GetBkMode
GetStockObject
SetMapMode
GetWindowOrgEx
advapi32
RegEnumValueW
GetSecurityDescriptorSacl
RegQueryValueW
OpenProcessToken
RegSetValueExW
RegDeleteValueW
InitializeSecurityDescriptor
CheckTokenMembership
AdjustTokenPrivileges
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegEnumKeyExW
FreeSid
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyW
SetSecurityDescriptorSacl
LookupPrivilegeValueW
SetSecurityDescriptorDacl
RegCloseKey
RegOpenKeyExW
AllocateAndInitializeSid
GetTokenInformation
RegQueryValueExW
shell32
SHGetDiskFreeSpaceExW
SHChangeNotify
DragFinish
SHAppBarMessage
SHGetSpecialFolderPathW
SHBrowseForFolderW
DragQueryFileW
SHGetFolderPathW
SHGetFolderLocation
SHGetFileInfoW
ShellExecuteW
Shell_NotifyIconW
SHGetDesktopFolder
SHGetSpecialFolderLocation
ShellExecuteExW
DuplicateIcon
SHGetPathFromIDListW
ole32
CoLockObjectExternal
IsAccelerator
OleFlushClipboard
RevokeDragDrop
OleLockRunning
OleDuplicateData
DoDragDrop
OleCreateMenuDescriptor
OleTranslateAccelerator
OleIsCurrentClipboard
CoRevokeClassObject
CoInitializeEx
CLSIDFromString
OleDestroyMenuDescriptor
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleInitialize
OleGetClipboard
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
ReleaseStgMedium
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemAlloc
RegisterDragDrop
CoTaskMemFree
oleaut32
VariantClear
SystemTimeToVariantTime
VariantTimeToSystemTime
SysStringByteLen
SysFreeString
SysAllocStringLen
SysAllocString
SysAllocStringByteLen
VariantChangeType
VariantInit
VarBstrCmp
VarBstrCat
SysStringLen
VarBstrFromDate
shlwapi
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathFindFileNameW
ord345
PathRemoveFileSpecW
winmm
PlaySoundW
msimg32
TransparentBlt
AlphaBlend
mpr
WNetAddConnection3W
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
oledlg
OleUIBusyW
gdiplus
GdiplusStartup
GdipCreateBitmapFromScan0
GdipAlloc
GdipBitmapLockBits
GdipCloneImage
GdipDeleteGraphics
GdipGetImageHeight
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipDisposeImage
GdipFree
GdipCreateBitmapFromHBITMAP
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipDrawImageRectI
GdipGetImageWidth
GdipCreateFromHDC
GdiplusShutdown
GdipDrawImageI
GdipSetInterpolationMode
GdipGetImagePaletteSize
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
Exports
Exports
Sections
.text Size: 205KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sew Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qew Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rew Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tew Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dew Size: 278KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 57B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ