Static task
static1
Behavioral task
behavioral1
Sample
c490f3e0784f33ef05cce903b7877f8f7028b995a1b2904f64e0e2e97901ff33.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c490f3e0784f33ef05cce903b7877f8f7028b995a1b2904f64e0e2e97901ff33.exe
Resource
win10v2004-20221111-en
General
-
Target
c490f3e0784f33ef05cce903b7877f8f7028b995a1b2904f64e0e2e97901ff33
-
Size
323KB
-
MD5
bdb1af30056e9b34ee5759ffaaffe23c
-
SHA1
15d1c852199a85430e797bcaf8b46beb22841e77
-
SHA256
c490f3e0784f33ef05cce903b7877f8f7028b995a1b2904f64e0e2e97901ff33
-
SHA512
d80c0204690927d6d803f18db8c95d16918fac85eebcbeae91ff8570d8eb12f0e9bdb566c3111261dc17733429a4510ebf1f3d79813a8dc79c5d5ae44d5a17f7
-
SSDEEP
6144:MVN420dbZKK1E2JkFmsbtzfDamPnkL33KGW9NQlAIyyPFuIBcR1:MhKG2irfk3KGW9NQlJyXIBcR
Malware Config
Signatures
Files
-
c490f3e0784f33ef05cce903b7877f8f7028b995a1b2904f64e0e2e97901ff33.exe windows x86
e1ee0bd78287bddb3f27c4eec634c28f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoResumeClassObjects
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
OleRun
CoInitialize
CoUninitialize
CoRevokeClassObject
CreateStreamOnHGlobal
StringFromGUID2
CoInitializeSecurity
CoRegisterClassObject
shlwapi
PathSetDlgItemPathW
PathAppendW
StrChrW
PathRemoveFileSpecW
StrRetToStrW
PathAddExtensionW
ColorAdjustLuma
PathCompactPathExW
shell32
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteExW
SHGetDesktopFolder
user32
TranslateMessage
GetGUIThreadInfo
CharNextW
GetTabbedTextExtentW
LoadImageW
SetClipboardData
SetDlgItemTextW
ScreenToClient
ExitWindowsEx
CallNextHookEx
AppendMenuW
SetRectEmpty
GetForegroundWindow
SetWindowTextW
SystemParametersInfoW
SetMenuDefaultItem
IsWindowEnabled
GetFocus
SetWindowPlacement
SendMessageW
GetWindowTextLengthW
DialogBoxParamW
CloseClipboard
PostMessageW
GetKeyState
EndDialog
EmptyClipboard
IsWindow
DestroyWindow
SetForegroundWindow
GetDlgItem
DrawIconEx
EndPaint
MessageBoxW
LoadCursorW
MapWindowPoints
IsCharAlphaNumericW
SetWindowLongW
GetClientRect
GetWindowLongW
UnhookWindowsHookEx
OffsetRect
FindWindowExW
DestroyIcon
GetSystemMetrics
GetCursorPos
CopyRect
GetDC
CharUpperBuffW
KillTimer
RegisterWindowMessageW
DrawTextW
UpdateWindow
GetCapture
InvalidateRect
PostThreadMessageW
GetWindowRect
GetWindowPlacement
IsWindowVisible
GetClassNameW
GetClassInfoExW
IsDialogMessageW
FlashWindow
IsRectEmpty
SetCursor
SetWindowsHookExW
GetDlgCtrlID
ShowWindow
CreateDialogParamW
AttachThreadInput
DrawFocusRect
PostQuitMessage
RegisterClassW
UnregisterClassA
SetCapture
GetMessageW
GetWindowTextW
RegisterClassExW
OpenClipboard
GetSysColor
TabbedTextOutW
ReleaseDC
LoadBitmapW
InflateRect
SetWindowPos
SetParent
CallWindowProcW
BeginPaint
GetSystemMenu
GetDesktopWindow
GetActiveWindow
SetTimer
GetWindow
PtInRect
GetNextDlgTabItem
DispatchMessageW
SendInput
GetWindowThreadProcessId
GetClassInfoW
CreateWindowExW
GetTopWindow
PeekMessageW
DrawStateW
GetWindowDC
SetFocus
IsIconic
MoveWindow
ReleaseCapture
MapDialogRect
DefWindowProcW
RedrawWindow
EnableWindow
GetParent
SetWindowTextA
wvsprintfW
GetDlgItemTextW
WaitMessage
DialogBoxParamA
TrackPopupMenuEx
MessageBoxIndirectA
SendDlgItemMessageA
GetScrollPos
GetClassInfoExA
AppendMenuA
InsertMenuA
CreateDialogIndirectParamW
CopyIcon
GetDCEx
RemoveMenu
GetDlgItemInt
CharPrevW
LoadIconW
GetMenuItemInfoA
kernel32
DeleteFileW
ExpandEnvironmentStringsA
CreateWaitableTimerW
MulDiv
GlobalAlloc
CloseHandle
lstrcpynW
lstrcmpW
GetUserDefaultLCID
GetCurrentThreadId
HeapSize
GetTimeFormatW
CreateEventW
GetNumberFormatW
SetWaitableTimer
GetACP
GetProcessHeap
lstrcmpiW
FindFirstFileW
FormatMessageW
UnhandledExceptionFilter
GetDateFormatW
GlobalFree
FindResourceExW
WaitForSingleObject
LocalFree
SetLastError
FindResourceW
IsProcessorFeaturePresent
WideCharToMultiByte
RaiseException
lstrlenA
TerminateThread
GetModuleHandleW
CreateThread
lstrlenW
GlobalUnlock
ResumeThread
GetDriveTypeW
HeapReAlloc
SizeofResource
VirtualAlloc
GetCommandLineW
GlobalLock
lstrcpyW
DeleteCriticalSection
GetSystemTimeAsFileTime
LockResource
WaitForMultipleObjects
OpenEventW
FindNextFileW
FlushInstructionCache
LeaveCriticalSection
HeapAlloc
LocalAlloc
LoadResource
SetUnhandledExceptionFilter
GetUserDefaultLangID
HeapDestroy
FatalAppExitW
VirtualFree
HeapFree
FindClose
LoadLibraryExW
IsDebuggerPresent
GetThreadLocale
EnterCriticalSection
FreeLibrary
userenv
UnloadUserProfile
gdi32
GetObjectW
GetObjectType
ExtCreatePen
CreateRectRgnIndirect
GetBkColor
CreateCompatibleDC
SetBkMode
ExtTextOutW
Polygon
CreateFontIndirectW
SetTextColor
DeleteObject
GetTextExtentExPointW
SetBkColor
GetTextMetricsW
CreatePen
SetTextAlign
SetROP2
BitBlt
GetTextExtentPoint32W
TextOutW
CreateCompatibleBitmap
CreateSolidBrush
DeleteDC
GetDeviceCaps
RoundRect
GetStockObject
SelectObject
SelectClipRgn
CreateRectRgn
CombineRgn
SetViewportOrgEx
PtInRegion
GetClipRgn
GetLayout
msimg32
GradientFill
AlphaBlend
TransparentBlt
oleaut32
LoadTypeLi
SysFreeString
SafeArrayGetVartype
SafeArrayRedim
VariantClear
VariantInit
SafeArrayGetDim
SafeArrayCopy
VariantTimeToSystemTime
SysAllocStringByteLen
SysStringByteLen
DispCallFunc
VariantCopyInd
SysAllocString
SafeArrayAccessData
SysStringLen
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayUnaccessData
GetErrorInfo
SafeArrayGetUBound
SafeArrayUnlock
LoadRegTypeLi
SafeArrayLock
SystemTimeToVariantTime
VarBstrCmp
SysAllocStringLen
advapi32
RegCreateKeyExW
RegSetValueExW
AdjustTokenPrivileges
RegQueryValueExA
RegQueryValueExW
OpenProcessToken
RegNotifyChangeKeyValue
RegOpenKeyExA
RegCloseKey
LookupPrivilegeValueW
RegOpenKeyExW
comctl32
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_AddMasked
ImageList_Draw
ImageList_GetImageCount
ImageList_Create
InitCommonControlsEx
ImageList_GetIcon
_TrackMouseEvent
pstorsvc
ServiceEntry
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 272KB - Virtual size: 689KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ