Static task
static1
Behavioral task
behavioral1
Sample
c320debf1b4e2aa784f767be9a285bcb1e4680b432fb3022360bf9b0d691551e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c320debf1b4e2aa784f767be9a285bcb1e4680b432fb3022360bf9b0d691551e.exe
Resource
win10v2004-20221111-en
General
-
Target
c320debf1b4e2aa784f767be9a285bcb1e4680b432fb3022360bf9b0d691551e
-
Size
488KB
-
MD5
84663066a7c27d0a3a067e620bba89dc
-
SHA1
d9e7ac54ae6106bbf5c72671c641463cccbe690f
-
SHA256
c320debf1b4e2aa784f767be9a285bcb1e4680b432fb3022360bf9b0d691551e
-
SHA512
1d2c53ea8278fdebfcc9939c88809d8f063df3c5cf742d9d37b78e910e32216f59beed56ea5999d66f90340d44fe098382e82522993f103c9d9ac4c6f8ec7b07
-
SSDEEP
12288:x38G8yFXCCQPyrtKT3I5IQPu5EM+YTDtyQty+t8335Wv:xiyFXfQPyrgT3I5r4+mygy+t83p
Malware Config
Signatures
Files
-
c320debf1b4e2aa784f767be9a285bcb1e4680b432fb3022360bf9b0d691551e.exe windows x86
1bb50d86219a0f464a089d810d04a709
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateCompatibleDC
SetWindowOrgEx
GetTextFaceW
EnableEUDC
PolyBezier
PtInRegion
GetOutlineTextMetricsA
GetTextMetricsA
GetMetaFileA
user32
UpdateWindow
EnumPropsExA
GetKeyboardLayoutNameW
BeginPaint
AnyPopup
GetClipboardViewer
DrawMenuBar
InsertMenuW
UnpackDDElParam
GetSysColorBrush
RegisterClipboardFormatW
RemovePropW
GetWindowTextW
GetSubMenu
MessageBoxExW
SendInput
FillRect
LoadAcceleratorsW
ToAsciiEx
DestroyIcon
GetKeyNameTextA
DdeDisconnect
OpenWindowStationW
DestroyWindow
EditWndProc
SwapMouseButton
GetKeyNameTextW
ToUnicode
CascadeWindows
EndDialog
SetClassWord
DialogBoxIndirectParamW
MessageBoxA
RegisterClassExA
SetClipboardViewer
SetCaretBlinkTime
CloseWindow
InSendMessageEx
MenuItemFromPoint
SendNotifyMessageW
DefWindowProcA
GetScrollPos
SubtractRect
CharToOemBuffW
GetMenuItemRect
DlgDirListComboBoxA
UnregisterHotKey
CreateWindowExW
CloseWindowStation
RegisterClassA
GetTopWindow
AnimateWindow
AppendMenuA
wsprintfW
wvsprintfW
ChangeMenuA
DdeReconnect
LoadMenuIndirectW
RegisterClassW
FindWindowA
GetMenuStringA
DrawFocusRect
ExcludeUpdateRgn
GetWindowDC
OpenDesktopA
OpenWindowStationA
DdeFreeDataHandle
CloseDesktop
DefDlgProcA
ShowWindow
GetThreadDesktop
SetDebugErrorLevel
SetWinEventHook
PostMessageW
advapi32
CryptSignHashW
kernel32
lstrcmp
CompareStringA
SetConsoleActiveScreenBuffer
OpenFileMappingA
GlobalFree
FlushFileBuffers
TlsAlloc
LeaveCriticalSection
GetACP
IsDebuggerPresent
VirtualFree
WritePrivateProfileStructA
LoadLibraryExW
FreeEnvironmentStringsA
IsBadReadPtr
VirtualAlloc
GetModuleFileNameW
DeleteCriticalSection
ReadConsoleOutputCharacterW
WaitNamedPipeA
SetLocaleInfoA
SetSystemTime
TerminateProcess
GetCompressedFileSizeA
IsValidCodePage
InitializeCriticalSectionAndSpinCount
LocalCompact
GetProfileSectionA
SetFileAttributesA
FillConsoleOutputCharacterW
CreateNamedPipeW
GetComputerNameW
lstrcatA
lstrcpynA
GetLastError
lstrcmpW
GetLocaleInfoA
lstrcatW
GetPrivateProfileStructW
EnterCriticalSection
GetCurrentProcess
GetCommandLineW
GetProcAddress
SetEndOfFile
InterlockedExchange
GetModuleFileNameA
GlobalUnlock
WriteConsoleOutputAttribute
GetTickCount
ReadFileEx
GetProcessHeap
GetCPInfo
GetFileType
GlobalLock
HeapDestroy
GetOEMCP
ReleaseMutex
EnumResourceTypesW
GetStdHandle
SetFileTime
TransmitCommChar
GetSystemTimeAsFileTime
GetStartupInfoA
SetFilePointer
SetHandleCount
LoadLibraryA
GetEnvironmentStrings
GetCurrentThread
IsValidLocale
HeapSize
GetTimeZoneInformation
SetEnvironmentVariableA
GetDateFormatA
GetSystemInfo
IsBadWritePtr
GetStringTypeW
SetStdHandle
GlobalFindAtomA
CompareStringW
FreeEnvironmentStringsW
DeleteAtom
GetEnvironmentStringsA
HeapReAlloc
WideCharToMultiByte
EnumSystemLocalesA
ReleaseSemaphore
GetUserDefaultLCID
CreateMutexA
TlsGetValue
OpenMutexA
GetDiskFreeSpaceW
MultiByteToWideChar
TlsFree
GetLogicalDriveStringsW
GetFileSize
HeapFree
SetComputerNameA
GetEnvironmentStringsW
GetTimeFormatA
ExitProcess
GlobalReAlloc
AllocConsole
CloseHandle
LocalFree
GetPrivateProfileStringA
GetVersionExA
CreateFileMappingW
HeapCreate
TlsSetValue
GetModuleHandleA
GetCommandLineA
EnumDateFormatsA
GetStartupInfoW
FillConsoleOutputCharacterA
ReadFile
InitializeCriticalSection
FindResourceExW
VirtualQuery
LCMapStringA
LockFileEx
HeapAlloc
WriteFile
QueryPerformanceCounter
UnhandledExceptionFilter
RtlUnwind
CreateProcessA
GetStringTypeA
GetCurrentProcessId
VirtualProtect
SetLastError
GetLocaleInfoW
GetDiskFreeSpaceA
LCMapStringW
ReadConsoleInputA
GetCurrentThreadId
comdlg32
GetFileTitleA
GetFileTitleW
PrintDlgW
FindTextA
comctl32
GetEffectiveClientRect
ImageList_Read
InitMUILanguage
CreatePropertySheetPage
ImageList_DrawIndirect
ImageList_DragMove
ImageList_Create
ImageList_GetIconSize
ImageList_BeginDrag
CreateStatusWindow
ImageList_SetIconSize
CreateToolbar
ImageList_Merge
ImageList_DrawEx
ImageList_Duplicate
ImageList_AddIcon
ImageList_Draw
DrawInsert
ImageList_AddMasked
CreateToolbarEx
InitCommonControlsEx
ImageList_Add
DrawStatusTextW
CreatePropertySheetPageW
shell32
SHFormatDrive
ShellAboutA
SHFileOperationW
InternalExtractIconListA
Sections
.text Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ