Static task
static1
Behavioral task
behavioral1
Sample
4317390f34e207779c3a72a59a395a7ed701bfa1ec7ceffca4b0d8dc180f4d41.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4317390f34e207779c3a72a59a395a7ed701bfa1ec7ceffca4b0d8dc180f4d41.exe
Resource
win10v2004-20221111-en
General
-
Target
4317390f34e207779c3a72a59a395a7ed701bfa1ec7ceffca4b0d8dc180f4d41
-
Size
756KB
-
MD5
91e8c6ea7e284179fbf7cc174958b3da
-
SHA1
f9927369e9bc781f0087b10481e1ed72b6e76299
-
SHA256
4317390f34e207779c3a72a59a395a7ed701bfa1ec7ceffca4b0d8dc180f4d41
-
SHA512
852239d61744cd48adf00f8d987e3cef0d3c77e99c920521e9a9bf0768eae4768aa047f0cdd12cc397b22cb5f550755443b8fa043ecb838a40ad1f6497d44e7b
-
SSDEEP
12288:9brPF7MvbdKqvC1vbv1rC4IPufV1FYH7LbqjNC4TN7MCb1gyUwgtv9cVskSLlubk:NrPJwC1vprDIPufvSH7qJzTdtb1UuJ9g
Malware Config
Signatures
Files
-
4317390f34e207779c3a72a59a395a7ed701bfa1ec7ceffca4b0d8dc180f4d41.exe windows x86
8fddc9a795d69975aab199723eeb6fb0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
kernel32
GetDriveTypeA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
InitializeCriticalSection
CreateFileA
GetStringTypeA
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
LoadLibraryA
GetCurrentDirectoryA
GetFullPathNameW
LCMapStringW
LCMapStringA
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetLastError
GetLastError
CopyFileW
DeleteFileW
GetTempPathW
GetLongPathNameW
CreateFileW
CloseHandle
RemoveDirectoryW
SetCurrentDirectoryW
FindFirstFileW
FindClose
CreateDirectoryW
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
Sleep
HeapSize
ExitProcess
HeapCreate
HeapDestroy
VirtualAlloc
VirtualFree
DeleteCriticalSection
IsValidCodePage
GetOEMCP
GetStringTypeW
LoadLibraryW
GetACP
GetCPInfo
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GlobalAlloc
GetCommandLineW
FormatMessageW
GetCurrentThreadId
CreateProcessW
LocalFree
GlobalFree
MoveFileExW
SetFileAttributesW
GetTempFileNameW
InterlockedIncrement
InterlockedCompareExchange
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
Process32FirstW
GetCurrentProcessId
GetVersionExW
GetSystemInfo
Process32NextW
GetModuleHandleW
CreateToolhelp32Snapshot
FlushFileBuffers
GetFileSize
TlsFree
WriteFile
ReadFile
FindNextFileW
CreateMutexW
ReleaseMutex
OpenMutexW
WaitForSingleObject
GetProcAddress
SetFilePointer
FreeLibrary
GetTickCount
GlobalReAlloc
GlobalUnlock
GlobalLock
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
GetVersionExA
GetProcessHeap
GetStartupInfoW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
user32
DestroyAcceleratorTable
GetSystemMetrics
DestroyMenu
RegisterClassExW
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
SetCursor
SetCapture
SetTimer
KillTimer
PostMessageW
ReleaseCapture
GetCursorPos
DrawIconEx
GetClassLongW
CheckDlgButton
GetWindowTextLengthW
EnableWindow
EndDialog
DialogBoxParamW
CreateDialogParamW
DefWindowProcW
RegisterClassW
SetFocus
ScreenToClient
CreateWindowExW
GetSysColor
GetWindowTextW
FillRect
GetScrollInfo
ScrollWindow
GetWindowLongW
SetWindowLongW
SetScrollInfo
BeginPaint
EndPaint
IsDlgButtonChecked
GetSysColorBrush
OffsetRect
SetWindowPos
GetWindowRect
DrawTextW
GetDesktopWindow
PtInRect
SetCursorPos
SetRect
SetWindowRgn
UpdateLayeredWindow
GetCursor
IntersectRect
SubtractRect
MonitorFromPoint
GetMonitorInfoW
RedrawWindow
TrackMouseEvent
CallWindowProcW
InflateRect
InvalidateRect
GetDC
ReleaseDC
GetDlgCtrlID
MoveWindow
GetDlgItem
DestroyWindow
PostQuitMessage
MessageBoxW
SetWindowTextW
GetClientRect
GetMenu
EnableMenuItem
FindWindowW
IsIconic
ShowWindow
SetForegroundWindow
LoadMenuW
SetWindowPlacement
SetMenu
LoadAcceleratorsW
SendMessageW
UpdateWindow
GetMessageW
GetParent
GetClassNameW
TranslateAcceleratorW
IsDialogMessageW
GetWindowPlacement
gdi32
CombineRgn
GetPixel
StretchBlt
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteDC
GetDeviceCaps
SetViewportOrgEx
CreatePen
CreateFontIndirectW
CreateSolidBrush
SelectObject
Rectangle
SetTextColor
SetBkMode
GetTextExtentPointW
OffsetRgn
GetStockObject
ExtCreateRegion
GetObjectW
MoveToEx
LineTo
TextOutW
CreateDIBSection
SetBkColor
SelectClipRgn
DeleteObject
EnumFontFamiliesExW
comdlg32
GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError
ChooseColorW
GetFileTitleW
shell32
SHGetSpecialFolderPathW
DragAcceptFiles
DragFinish
SHFileOperationW
DragQueryFileW
ziplib
UnZip
ZipFolder
imm32
ImmDisableIME
msimg32
GradientFill
TransparentBlt
AlphaBlend
advapi32
BuildExplicitAccessWithNameW
GetSecurityDescriptorSacl
SetEntriesInAclW
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetNamedSecurityInfoW
GetSecurityInfo
SetNamedSecurityInfoW
RegQueryValueExW
RegCreateKeyExW
RegCloseKey
Sections
.text Size: 548KB - Virtual size: 545KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ