Static task
static1
Behavioral task
behavioral1
Sample
81ed04d5f58217a54231d384afbb6c9f9d2ca8e0df344ecedc8bbd7ded6527f8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
81ed04d5f58217a54231d384afbb6c9f9d2ca8e0df344ecedc8bbd7ded6527f8.exe
Resource
win10v2004-20221111-en
General
-
Target
81ed04d5f58217a54231d384afbb6c9f9d2ca8e0df344ecedc8bbd7ded6527f8
-
Size
740KB
-
MD5
077784fb71a9d72cca0f945f52182e10
-
SHA1
c40aa6fb01342f515f471cbf781e13239f27e464
-
SHA256
81ed04d5f58217a54231d384afbb6c9f9d2ca8e0df344ecedc8bbd7ded6527f8
-
SHA512
6210a4c86931dde83e6c21ac442dcd748d844f06dc60d2edcd5bf9906de6bc57c8355df862016f804273abc1c38b798463a9cc026a63e88f1c8878a7320d7b7a
-
SSDEEP
12288:sxjTR27lA08QMJn1eH+xJ1QJcXO/mMHN92zLyBz2MxkDjpCz/chkgpj9wDl:sRUAj1M+2lBoyx9oCzUhlAl
Malware Config
Signatures
Files
-
81ed04d5f58217a54231d384afbb6c9f9d2ca8e0df344ecedc8bbd7ded6527f8.exe windows x86
9a738e858b36d3af7f4060bd5d949b24
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CreateStreamOnHGlobal
ReleaseStgMedium
OleGetClipboard
OleCreate
CoGetMalloc
OleQueryLinkFromData
CoGetClassObject
CoTaskMemAlloc
OleCreateLinkFromData
StgOpenStorage
OleCreateFromFile
StgCreateDocfile
OleSetMenuDescriptor
OleRegGetMiscStatus
OleQueryCreateFromData
OleSave
CoDisconnectObject
CreateOleAdviseHolder
OleCreateLinkToFile
CLSIDFromProgID
OleRegEnumVerbs
OleGetIconOfClass
CoRegisterClassObject
CoTaskMemFree
CreateDataAdviseHolder
OleInitialize
GetRunningObjectTable
OleUninitialize
OleRegGetUserType
CoLockObjectExternal
OleFlushClipboard
CoRevokeClassObject
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
kernel32
GetModuleFileNameA
TlsAlloc
GetLastError
GetEnvironmentStringsW
ResetEvent
LoadLibraryA
FindResourceA
RaiseException
FreeEnvironmentStringsA
ExitProcess
GetStringTypeExA
WaitForSingleObject
DuplicateHandle
GetCurrentDirectoryA
LoadLibraryW
GetFileAttributesW
IsBadCodePtr
GetStringTypeW
InterlockedExchange
GetEnvironmentStrings
InitializeCriticalSection
GetFileType
SetErrorMode
GetOEMCP
GetACP
SetLastError
HeapCreate
VirtualFree
RemoveDirectoryA
HeapDestroy
MultiByteToWideChar
SetEnvironmentVariableA
GetLocaleInfoA
EnterCriticalSection
CloseHandle
GetSystemTimeAsFileTime
GetProcessHeap
HeapFree
GetCommandLineA
LCMapStringA
LoadResource
GetUserDefaultLangID
FileTimeToLocalFileTime
VirtualAlloc
WriteFile
DeleteFileA
CreateProcessA
CopyFileA
IsValidLocale
GetCurrentProcess
HeapAlloc
TerminateProcess
InterlockedIncrement
TlsGetValue
CreateFileA
SetFileAttributesA
GlobalFree
SetHandleCount
ReadFile
IsDBCSLeadByte
LeaveCriticalSection
GetThreadLocale
GetCurrentProcessId
SystemTimeToFileTime
GetEnvironmentVariableA
GlobalSize
GetStartupInfoA
FreeLibrary
GetCurrentThreadId
TerminateThread
SetStdHandle
GetLocalTime
GetCPInfo
HeapSize
LCMapStringW
GetFileAttributesA
FindNextFileA
SuspendThread
lstrlenA
lstrcpynA
CreateFileMappingA
UnhandledExceptionFilter
lstrcmpiA
LockResource
CreateMutexA
FlushFileBuffers
GetSystemInfo
lstrlenW
CreateDirectoryA
GlobalReAlloc
DeleteCriticalSection
GetTickCount
GetFullPathNameA
SetCurrentDirectoryA
GetModuleHandleA
GetSystemTime
RtlUnwind
HeapReAlloc
lstrcatA
SetFileTime
GetStringTypeA
GlobalLock
UnmapViewOfFile
InterlockedDecrement
TlsSetValue
GetTimeZoneInformation
SetUnhandledExceptionFilter
CompareStringW
GetProcAddress
FreeEnvironmentStringsW
SetEvent
CreateThread
LocalFree
GetSystemDirectoryA
ReleaseMutex
FlushInstructionCache
lstrcmpA
CompareStringA
GetVersion
GetDateFormatA
QueryPerformanceCounter
GetStdHandle
SetFilePointer
FormatMessageA
CompareFileTime
VirtualQuery
WideCharToMultiByte
shell32
ShellExecuteA
DragQueryFileA
SHAppBarMessage
SHGetFileInfoA
DragFinish
ExtractIconA
ExtractIconExA
SHGetDesktopFolder
oleaut32
LoadTypeLi
gdi32
RestoreDC
GetStockObject
GetTextFaceA
GetDIBits
EndPath
LineTo
GetTextColor
GetWindowOrgEx
StartPage
GetDeviceCaps
SetWindowExtEx
RealizePalette
CreateDIBitmap
SetViewportExtEx
SetRectRgn
GetClipRgn
StrokePath
StretchBlt
PlayEnhMetaFile
Ellipse
SetPolyFillMode
BeginPath
GetDCOrgEx
CombineRgn
DeleteObject
PtVisible
UnrealizeObject
GetCurrentObject
CreatePen
CreatePalette
SetPaletteEntries
CreateICA
MaskBlt
CreateBitmap
CreateRoundRectRgn
CreateFontIndirectA
Rectangle
SaveDC
TextOutA
ExtSelectClipRgn
CreateDCA
GetBitmapBits
IntersectClipRect
DPtoLP
EndDoc
Polygon
Polyline
GetPaletteEntries
GetRgnBox
CreateHatchBrush
ExtFloodFill
GetPixel
CreatePatternBrush
Arc
SetTextColor
GetCharWidthA
Pie
DeleteDC
SetBkMode
SelectObject
CreatePolygonRgn
SetROP2
SetTextAlign
CreateFontA
RectVisible
EndPage
GetNearestColor
SelectPalette
GetWindowExtEx
SetStretchBltMode
GetPolyFillMode
GetBkMode
GetStretchBltMode
SetBkColor
CreateCompatibleDC
SetPixel
GetNearestPaletteIndex
FillPath
BitBlt
CreateRectRgn
GetObjectA
StretchDIBits
user32
RegisterClassA
GetParent
SetCapture
PostQuitMessage
LoadIconA
DestroyWindow
IsWindow
DefWindowProcA
GetLastActivePopup
SetRect
IntersectRect
EnableMenuItem
LoadStringA
GetMessageA
GetSysColor
CreateWindowExA
LoadBitmapA
DestroyMenu
CloseClipboard
DeferWindowPos
MapWindowPoints
GetWindowThreadProcessId
GetClassNameA
MessageBoxA
GetDesktopWindow
RegisterClassExA
ShowWindow
DispatchMessageA
MapDialogRect
DestroyIcon
LoadCursorA
IsIconic
Sections
.text Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 472KB - Virtual size: 470KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ