Static task
static1
Behavioral task
behavioral1
Sample
989f3ad5ff02e5b7f7f3245e0c8472fdb0a543bca68133d37fb830a0f5ba2134.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
989f3ad5ff02e5b7f7f3245e0c8472fdb0a543bca68133d37fb830a0f5ba2134.exe
Resource
win10v2004-20221111-en
General
-
Target
989f3ad5ff02e5b7f7f3245e0c8472fdb0a543bca68133d37fb830a0f5ba2134
-
Size
248KB
-
MD5
c4281d5dda0b5b0e91dbef4a8e30bdf6
-
SHA1
f13b46580dbf2a5393d38648c08e1ab0b5733761
-
SHA256
989f3ad5ff02e5b7f7f3245e0c8472fdb0a543bca68133d37fb830a0f5ba2134
-
SHA512
c2559f27b20b7c8ec23f9853ea19dfcfd4c59694782724db37cfac584b78a63b6ae81bf6e00007005967d6b9b71cedac93bd2d01a04afbcd16e379855b510660
-
SSDEEP
3072:qwCPUsEgzf94XDqxUmHiokwck4vYOkaPMVB6NSDryQrHdetSFLql:qwCPU9xzqxfCoklk4vlPWASDryq9lFOl
Malware Config
Signatures
Files
-
989f3ad5ff02e5b7f7f3245e0c8472fdb0a543bca68133d37fb830a0f5ba2134.exe windows x86
1dc5e340c609d440a7ac195e61a38908
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsUNCA
PathStripToRootA
PathFindFileNameA
PathFindExtensionA
SHGetValueA
PathFileExistsA
iphlpapi
GetAdaptersInfo
kernel32
GetFullPathNameA
GlobalGetAtomNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleFileNameW
InterlockedDecrement
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
WritePrivateProfileStringA
GlobalFlags
lstrcmpW
GlobalFindAtomA
SetErrorMode
GetFileTime
GetCPInfo
GetOEMCP
HeapFree
HeapAlloc
DuplicateHandle
VirtualAlloc
HeapReAlloc
ExitProcess
GetFileType
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
SetStdHandle
SetHandleCount
GetConsoleCP
GetConsoleMode
GetACP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcessId
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GlobalDeleteAtom
GetModuleHandleA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
OutputDebugStringA
CreateMutexA
Sleep
SetLastError
GetVolumeInformationA
GetComputerNameA
GetFileAttributesA
FindClose
DeleteFileA
FindFirstFileA
lstrcmpA
GetVersionExA
GetShortPathNameA
GetModuleFileNameA
GetCurrentProcess
SetPriorityClass
DeviceIoControl
CreateFileA
OpenProcess
TerminateProcess
WaitForSingleObject
FreeLibrary
CloseHandle
GetProcAddress
LoadLibraryA
SystemTimeToFileTime
GetSystemTimeAsFileTime
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersion
CompareStringA
lstrcmpiA
GetLastError
InterlockedExchange
MultiByteToWideChar
CompareStringW
WideCharToMultiByte
lstrlenA
user32
DestroyMenu
UnregisterClassA
ShowWindow
LoadIconA
WinHelpA
GetClassLongA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
GetCapture
ClientToScreen
LoadCursorA
GetDC
CharUpperA
EnumWindows
GetWindowThreadProcessId
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetSystemMetrics
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
FindWindowExA
PostMessageA
RegisterWindowMessageA
MessageBoxA
FindWindowA
GetWindow
GetWindowTextA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
PostQuitMessage
CheckMenuItem
EnableMenuItem
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
SendMessageA
ModifyMenuA
gdi32
GetClipBox
DeleteDC
GetStockObject
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
DeleteObject
CreateBitmap
GetDeviceCaps
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 156KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ