Static task
static1
Behavioral task
behavioral1
Sample
adf5d187bb22f459b8f11aa0f61133b532ae16b6625d55d072388bc21c34b933.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
adf5d187bb22f459b8f11aa0f61133b532ae16b6625d55d072388bc21c34b933.exe
Resource
win10v2004-20221111-en
General
-
Target
adf5d187bb22f459b8f11aa0f61133b532ae16b6625d55d072388bc21c34b933
-
Size
179KB
-
MD5
01eab053a29f9e2395a6b15ba63c6730
-
SHA1
dc2955c6a5c357e06bdf68530085346c43a867fd
-
SHA256
adf5d187bb22f459b8f11aa0f61133b532ae16b6625d55d072388bc21c34b933
-
SHA512
f9bc63c851d5b0a74a4dcac7f4bdef8e3a94c1016a0cb350427e4c4e0bb48d91804042bfb8d4ba4ab5293c84fc7845700ae451eda1a7c79dc89101fa99a55862
-
SSDEEP
3072:cIkpRBgC/Qlj4Jad+KaiqUuDJvYaerBgwK1tHcX7a:uR7Q15+KwUu1waJP8
Malware Config
Signatures
Files
-
adf5d187bb22f459b8f11aa0f61133b532ae16b6625d55d072388bc21c34b933.exe windows x86
e81674e13f8e517a11a4191ee71d2c98
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeFormatA
GetSystemDefaultLangID
GetDateFormatA
TlsGetValue
OutputDebugStringW
InterlockedCompareExchange
GetCPInfo
HeapSize
GetModuleFileNameW
GetFileAttributesW
WritePrivateProfileStringW
InterlockedIncrement
GetFileAttributesExW
OpenEventW
GetVersionExW
LeaveCriticalSection
IsDebuggerPresent
lstrcatW
WaitForSingleObject
GetUserDefaultLCID
HeapReAlloc
GetComputerNameW
GetWindowsDirectoryW
SetConsoleCtrlHandler
InitializeCriticalSection
FormatMessageW
GetSystemDirectoryW
LoadLibraryExW
DebugBreak
GetCurrentThread
MulDiv
GetModuleHandleA
GetCommandLineW
SystemTimeToTzSpecificLocalTime
CompareStringA
VirtualFree
DeleteCriticalSection
GetCurrentThreadId
GetModuleFileNameA
WaitForMultipleObjects
InterlockedExchange
TlsAlloc
InterlockedDecrement
ResetEvent
GetStringTypeA
RtlUnwind
GetStartupInfoW
GetStdHandle
lstrlenA
CompareStringW
GetOEMCP
GetPrivateProfileIntW
GlobalAlloc
SetUnhandledExceptionFilter
lstrcpynA
FreeLibrary
GetFileType
HeapDestroy
GetConsoleCP
SetStdHandle
GetPrivateProfileStringW
GetLastError
LocalAlloc
SetLastError
RaiseException
lstrcmpiW
GetFileSize
EnumSystemLocalesA
SizeofResource
LockResource
UnhandledExceptionFilter
CopyFileW
MultiByteToWideChar
GetCurrentProcess
HeapAlloc
GetDateFormatW
TlsSetValue
LCMapStringA
lstrcpyW
WritePrivateProfileSectionW
GetStringTypeW
GetSystemDefaultUILanguage
FindAtomA
GetVersion
WriteConsoleA
IsValidCodePage
GlobalSize
WriteConsoleW
LoadLibraryW
FileTimeToSystemTime
CloseHandle
WideCharToMultiByte
GetTempPathW
LocalFree
QueryPerformanceCounter
GetProcAddress
GlobalLock
GetModuleHandleW
Sleep
HeapCreate
ExpandEnvironmentStringsW
GetTempFileNameW
GetConsoleMode
lstrcpynW
FreeEnvironmentStringsW
ExpandEnvironmentStringsA
GetCurrentProcessId
LoadLibraryA
EnterCriticalSection
SetHandleCount
IsProcessorFeaturePresent
lstrlenW
FindNextChangeNotification
FlushInstructionCache
ExitProcess
IsValidLocale
HeapFree
GetEnvironmentStringsW
LoadResource
GlobalUnlock
ReadFile
CreateThread
lstrcmpW
FindResourceW
CreateFileA
FindFirstChangeNotificationW
InitializeCriticalSectionAndSpinCount
CreateFileW
VerLanguageNameW
LCMapStringW
WinExec
GetConsoleOutputCP
GetStartupInfoA
VirtualQuery
user32
SetForegroundWindow
SetDlgItemTextW
SystemParametersInfoW
SetRectEmpty
CreatePopupMenu
BeginDeferWindowPos
RemoveMenu
IsWindowEnabled
GetSystemMetrics
CreateCaret
LoadStringA
GetMonitorInfoW
UnregisterClassA
OffsetRect
RegisterClassExW
MonitorFromWindow
IntersectRect
GetDC
SetScrollPos
SetFocus
GetClassLongW
PostMessageW
DefMDIChildProcW
GetWindowTextLengthW
SetParent
IsClipboardFormatAvailable
GetWindowDC
GetFocus
DispatchMessageW
CharLowerW
GetClientRect
FindWindowW
FillRect
SetMenuItemInfoW
LoadCursorW
LoadStringW
ReleaseCapture
SetScrollInfo
DeferWindowPos
GetScrollInfo
SetMenuDefaultItem
GetCursorPos
ScreenToClient
IsMenu
DefWindowProcW
TranslateMessage
GetDesktopWindow
CopyRect
SetCursor
OpenClipboard
InflateRect
GetWindowThreadProcessId
GetMenuDefaultItem
KillTimer
GetDlgCtrlID
DrawFocusRect
GetMenuItemInfoW
GetDoubleClickTime
GetSysColorBrush
GetKeyState
SetTimer
TrackPopupMenuEx
CallNextHookEx
LoadIconW
GetClassNameW
SetWindowTextW
GetDlgItemInt
UnhookWindowsHookEx
ReleaseDC
PtInRect
SendMessageW
IsChild
InsertMenuW
ScrollWindowEx
GetClassInfoW
GetMenu
SetMenu
CreateWindowExW
PostQuitMessage
UpdateWindow
LoadMenuW
GetMenuItemID
UnregisterClassW
AppendMenuW
GetWindowRect
GetCapture
TranslateAcceleratorW
MessageBeep
GetWindowLongA
WindowFromPoint
GetSystemMenu
EndPaint
DestroyCaret
DrawFrameControl
BeginPaint
SetCaretPos
DrawMenuBar
GetMenuStringW
GetWindowTextW
GetWindowPlacement
EndDialog
DestroyMenu
DialogBoxParamW
ShowScrollBar
EnableWindow
SetWindowPos
DestroyWindow
GetWindowLongW
BringWindowToTop
EnableMenuItem
SetCapture
EqualRect
ModifyMenuW
RegisterWindowMessageW
PeekMessageW
DragDetect
wvsprintfW
CallWindowProcW
LoadAcceleratorsW
RegisterClassW
SetDlgItemInt
CloseClipboard
EmptyClipboard
ClientToScreen
GetDlgItemTextW
DefFrameProcW
MapWindowPoints
GetMessageW
LockWindowUpdate
TranslateMDISysAccel
LoadImageW
SetClipboardData
TrackPopupMenu
GetActiveWindow
GetMessagePos
GetWindow
GetSubMenu
GetParent
SetWindowsHookExW
MessageBoxW
DrawEdge
MoveWindow
RegisterClipboardFormatW
FrameRect
EndDeferWindowPos
IsWindowVisible
InvalidateRect
RedrawWindow
CharNextW
gdi32
GetDeviceCaps
GetViewportOrgEx
GetObjectW
DPtoLP
SetBkColor
SelectClipRgn
CreatePalette
LineTo
CreateCompatibleBitmap
CreateRectRgn
CreateCompatibleDC
BitBlt
IntersectClipRect
CreatePatternBrush
SetViewportOrgEx
CreatePen
CreateDIBSection
Polyline
TextOutW
SelectObject
SetTextColor
PatBlt
GetTextExtentPoint32W
SetBkMode
GetClipRgn
MoveToEx
Rectangle
CreateFontW
GetClipBox
LPtoDP
RestoreDC
CreateSolidBrush
CreateBitmap
ExtTextOutW
GetStockObject
SelectPalette
SetBrushOrgEx
CreateFontIndirectW
SaveDC
GetTextExtentPointW
RealizePalette
GetTextMetricsW
DeleteDC
DeleteObject
SetPolyFillMode
Polygon
SetWindowOrgEx
comdlg32
GetFileTitleW
oleaut32
VarDecCmp
SysFreeString
SystemTimeToVariantTime
VarUI4FromStr
VarR8FromStr
VarI4FromStr
VarDecFromStr
wsock32
ntohs
htons
WSAAsyncSelect
bind
socket
listen
connect
accept
ioctlsocket
shutdown
WSAGetLastError
getsockname
recv
inet_addr
WSASetLastError
getpeername
gethostbyname
send
closesocket
msvcrt
fclose
_i64toa
strchr
atol
wcslen
atoi
_setmbcp
__p__commode
_initterm
rand
_purecall
time
__getmainargs
_acmdln
exit
_strnicmp
__CxxFrameHandler
strncmp
_controlfp
_adjust_fdiv
fopen
fwrite
localtime
_ftol
__setusermatherr
sprintf
_exit
__dllonexit
_XcptFilter
__set_app_type
memmove
_stricmp
__p__fmode
_except_handler3
_onexit
msacm32
acmDriverID
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ