Static task
static1
Behavioral task
behavioral1
Sample
cad366f2666bc1717927173dd79275ab3b3fd8914a7e2e00723c7e4f3501b98d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cad366f2666bc1717927173dd79275ab3b3fd8914a7e2e00723c7e4f3501b98d.exe
Resource
win10v2004-20221111-en
General
-
Target
cad366f2666bc1717927173dd79275ab3b3fd8914a7e2e00723c7e4f3501b98d
-
Size
316KB
-
MD5
fed5ddd32eededc906ab432b4839469d
-
SHA1
99c219739f4e3b1422c7c41a0508a532ce35c964
-
SHA256
cad366f2666bc1717927173dd79275ab3b3fd8914a7e2e00723c7e4f3501b98d
-
SHA512
efe3ffdb9c45acd90ce26320607fc16f9a4aac448cd53ab610fe47339ba8247920313066292250b25bf1e099f1690f75502600284b8451b03a4ab47fdbe4fffb
-
SSDEEP
6144:EE7QzjbxRqkBIoC3gc3ZIZCOkHS5Ezd13UIhoPfpHTLa6LiOE:EE7IjbfqkL4pI2y5e3RGpCR
Malware Config
Signatures
Files
-
cad366f2666bc1717927173dd79275ab3b3fd8914a7e2e00723c7e4f3501b98d.exe windows x86
3cd34457fd00d96da1e5e564e0973e53
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
VerQueryValueA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
gdi32
GetTextExtentExPointW
LPtoDP
CreateCompatibleBitmap
SetBkMode
CreateFontIndirectW
Polyline
StretchDIBits
GetDeviceCaps
DeleteObject
GetMapMode
GetTextExtentPoint32W
BitBlt
SetViewportOrgEx
RestoreDC
SaveDC
CreateSolidBrush
SetMapMode
PtInRegion
SelectClipRgn
GetTextMetricsW
CreateRectRgn
SetTextAlign
DPtoLP
DeleteDC
ExcludeClipRect
CreateCompatibleDC
GetViewportOrgEx
CreateEllipticRgn
SetBkColor
CreatePen
CombineRgn
CreatePolygonRgn
IntersectClipRect
SelectObject
GetObjectW
user32
GetDC
GetFocus
ReleaseCapture
DestroyMenu
CharPrevA
GetKeyState
MessageBeep
GetClipboardData
InvalidateRect
ShowScrollBar
RegisterWindowMessageW
SetClipboardData
LoadBitmapW
LoadCursorW
IntersectRect
PostMessageW
GetKeyboardState
GetWindowLongW
KillTimer
DrawFrameControl
CloseClipboard
ShowWindow
HideCaret
GetAsyncKeyState
TrackPopupMenu
GetCapture
GetSystemMetrics
SetScrollInfo
OemToCharW
InsertMenuW
FindWindowExW
GetWindowTextW
GetScrollInfo
IsRectEmpty
SetWindowRgn
IsWindowVisible
ReleaseDC
DestroyWindow
CreateWindowExW
FindWindowW
MoveWindow
SetCapture
SetCursor
SetWindowTextW
LockWindowUpdate
SetFocus
DrawEdge
SetTimer
mouse_event
DrawTextExW
GetClassLongW
SendMessageA
SetWindowPos
SystemParametersInfoW
InflateRect
SendMessageW
FillRect
MessageBoxA
EnableScrollBar
BringWindowToTop
GetCursor
GetParent
SetForegroundWindow
MessageBoxW
SetWindowLongW
DrawTextW
GetComboBoxInfo
DrawFocusRect
OpenClipboard
FrameRect
PtInRect
GetClientRect
GetSysColor
BeginPaint
SetClassLongW
EqualRect
ScreenToClient
WindowFromPoint
GetWindowRect
PostMessageA
CreatePopupMenu
GetCursorPos
CharUpperA
OffsetRect
UnionRect
RegisterClipboardFormatW
EndPaint
GetWindowDC
kernel32
WideCharToMultiByte
HeapFree
OutputDebugStringW
ReleaseMutex
LoadLibraryExA
WriteFile
FormatMessageA
CreateMutexA
lstrcmpiA
HeapAlloc
FindResourceW
GlobalLock
lstrcpyW
DeleteCriticalSection
GlobalUnlock
CloseHandle
CreateEventA
SetFileTime
GetCommandLineW
SetErrorMode
GlobalAlloc
GetModuleHandleW
FreeLibrary
GlobalFree
FindFirstFileA
ReadFile
GetProcessHeap
OpenMutexA
EnterCriticalSection
WaitForMultipleObjects
GetDateFormatA
lstrlenA
GlobalMemoryStatus
DeleteFileA
LocalFree
CreateFileA
lstrcpynA
MulDiv
SetFilePointer
WaitForSingleObject
GetCurrentThreadId
GetACP
GetFileTime
CompareStringW
CopyFileA
FindNextFileA
HeapReAlloc
LeaveCriticalSection
GlobalSize
FindClose
GetModuleHandleA
GetShortPathNameA
VirtualAllocEx
shlwapi
PathRemoveFileSpecA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
SHGetFileInfoW
ShellExecuteW
comdlg32
GetOpenFileNameW
comctl32
ImageList_Draw
ImageList_GetIconSize
oleaut32
SysAllocStringLen
SysAllocStringByteLen
OleLoadPicture
SysFreeString
advapi32
RegEnumKeyExA
RegSetValueExA
ImpersonateSelf
SetSecurityDescriptorDacl
RevertToSelf
InitializeSecurityDescriptor
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
ole32
RegisterDragDrop
IsEqualGUID
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx
DoDragDrop
RevokeDragDrop
atmlib
ATMFinish
ATMGetNtmFields
ATMGetVersionExA
ATMGetOutlineA
ATMMakePSSA
ATMAddFontEx
ATMMakePSSW
ATMSetFlags
kbdbu
KbdLayerDescriptor
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 282KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ