Static task
static1
Behavioral task
behavioral1
Sample
388776a798d7d520b23dad1bc58263f9a26b3f9a8bbd3856b0a08e58d9851724.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
388776a798d7d520b23dad1bc58263f9a26b3f9a8bbd3856b0a08e58d9851724.exe
Resource
win10v2004-20221111-en
General
-
Target
388776a798d7d520b23dad1bc58263f9a26b3f9a8bbd3856b0a08e58d9851724
-
Size
748KB
-
MD5
87a7d39e067a9fbc09c4e408ba3d0240
-
SHA1
cba3e80ed30ccbebf4a6998b8a5d5e3293203ebf
-
SHA256
388776a798d7d520b23dad1bc58263f9a26b3f9a8bbd3856b0a08e58d9851724
-
SHA512
d90b3b050cfc9d567dc41807eadad504adb2e9216e01ed20ff5e18c04c91f69d050f437f4088908662dfa1c36b6e88786736fe6c83166fb3f6000a2fafcf03b8
-
SSDEEP
12288:mNd2t9Z2owEpDNW66Asv9ad7ZKzoxWgfhVa5Lsn4kxJr98:U2/YxE1smi9alxWgba5Ls4oRu
Malware Config
Signatures
Files
-
388776a798d7d520b23dad1bc58263f9a26b3f9a8bbd3856b0a08e58d9851724.exe windows x86
53091372ea2618ccc168e8e358119850
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
LoadTypeLi
ole32
IsAccelerator
StringFromGUID2
OleCreateFromFile
CoRevokeClassObject
OleCreateLinkToFile
OleCreate
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
OleGetIconOfClass
CreateILockBytesOnHGlobal
CreateFileMoniker
OleCreateFromData
OleDestroyMenuDescriptor
CreateDataAdviseHolder
OleSetMenuDescriptor
CoRegisterMessageFilter
OleRun
OleCreateLinkFromData
GetRunningObjectTable
ReleaseStgMedium
WriteClassStg
CreateGenericComposite
OleGetClipboard
OleTranslateAccelerator
GetHGlobalFromILockBytes
OleSave
OleLoad
CoCreateInstance
StringFromCLSID
OleCreateMenuDescriptor
CoLockObjectExternal
user32
GetWindow
SetWindowsHookExW
CopyRect
SetRectEmpty
CallNextHookEx
BeginPaint
EnableWindow
GetClassLongW
BringWindowToTop
LoadStringW
GetClipboardData
GetFocus
UnhookWindowsHookEx
IsWindow
GetWindowDC
GetDlgItemInt
SendMessageW
SendDlgItemMessageA
CallWindowProcW
IsIconic
DefWindowProcW
DrawEdge
GetMenuDefaultItem
MessageBoxW
EndDialog
DestroyMenu
RegisterClassExW
TrackPopupMenuEx
ShowWindow
SetWindowPlacement
SetWindowPos
FrameRect
GetClassInfoW
GetSubMenu
TranslateMessage
GetWindowRect
SendDlgItemMessageW
ScreenToClient
LoadImageW
GetAsyncKeyState
InsertMenuW
AttachThreadInput
IsClipboardFormatAvailable
GetWindowTextLengthW
DestroyWindow
DrawFrameControl
WindowFromPoint
CheckMenuItem
IsDialogMessageW
GetCapture
DestroyIcon
OpenClipboard
GetSysColor
EmptyClipboard
IsZoomed
SetCapture
GetClientRect
MessageBeep
SetWindowLongW
GetActiveWindow
EndPaint
LoadCursorW
LoadIconW
GetMessageW
CreateWindowExW
SetMenu
GetClassInfoExW
ClientToScreen
KillTimer
WaitForInputIdle
DeferWindowPos
TranslateMDISysAccel
DeleteMenu
SetFocus
GetSysColorBrush
RegisterClassW
CreatePopupMenu
FillRect
GetDlgCtrlID
GetDlgItem
RedrawWindow
GetCursorPos
InflateRect
RegisterWindowMessageW
SetTimer
CloseClipboard
advapi32
RegCloseKey
DeleteService
RegCreateKeyExA
EqualSid
RegDeleteKeyA
StartServiceCtrlDispatcherA
FreeSid
RegOpenKeyExA
CloseServiceHandle
RegisterEventSourceA
RegOpenKeyA
GetUserNameA
AllocateAndInitializeSid
OpenThreadToken
RegQueryValueExA
RegSetValueExA
ReportEventA
OpenProcessToken
SetSecurityDescriptorDacl
RegDeleteValueA
InitializeSecurityDescriptor
SetServiceStatus
DeregisterEventSource
GetTokenInformation
RegisterServiceCtrlHandlerA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
kernel32
DeleteFileW
GetSystemTimeAsFileTime
VirtualFree
SetLastError
TlsSetValue
GetVolumeInformationW
GlobalSize
UnmapViewOfFile
SetEnvironmentVariableW
MoveFileW
EnterCriticalSection
InitializeCriticalSection
SizeofResource
LoadLibraryExW
GetOEMCP
lstrcpynW
ExpandEnvironmentStringsA
VirtualQuery
VirtualAlloc
GlobalDeleteAtom
GetModuleHandleA
Sleep
LocalFileTimeToFileTime
WritePrivateProfileStringW
CloseHandle
SetThreadPriority
GetDateFormatA
GlobalAddAtomW
IsBadReadPtr
UnlockFile
GetStringTypeW
LoadLibraryA
SetStdHandle
FreeResource
GetVersionExA
GetProcessHeap
GlobalAlloc
GetCurrentProcessId
CreateFileW
LoadResource
GetModuleFileNameW
GetVersionExW
ResumeThread
WaitForSingleObject
ReadFile
GetCommandLineW
lstrcmpiW
InterlockedDecrement
TerminateThread
GetModuleHandleW
lstrcatW
LockResource
GetUserDefaultLangID
GetSystemInfo
lstrcpyA
GetFullPathNameW
GetFileTime
GetLocaleInfoW
LCMapStringW
GlobalFlags
FreeEnvironmentStringsA
GetStartupInfoW
HeapCreate
SetEnvironmentVariableA
MulDiv
ResetEvent
DuplicateHandle
CreateThread
ReleaseMutex
GetCurrentThread
TlsAlloc
QueryPerformanceCounter
FileTimeToLocalFileTime
SystemTimeToFileTime
GlobalHandle
GetPrivateProfileIntW
CopyFileW
LeaveCriticalSection
GetLocalTime
GetCPInfo
GetEnvironmentStrings
HeapDestroy
VirtualProtect
HeapReAlloc
GetFileAttributesW
GetStringTypeA
HeapFree
GetCommandLineA
SetUnhandledExceptionFilter
SetHandleCount
GetModuleFileNameA
GetTimeFormatA
ConvertDefaultLocale
LCMapStringA
WideCharToMultiByte
GetACP
SetEndOfFile
RemoveDirectoryW
GetTickCount
GetLocaleInfoA
GetCurrentProcess
FreeLibrary
DeleteCriticalSection
CreateDirectoryW
lstrcmpW
TerminateProcess
InterlockedCompareExchange
GetPrivateProfileStringW
TlsFree
SetFilePointer
GetFileSize
GetFileType
WriteConsoleA
GetThreadLocale
SetErrorMode
GetStdHandle
FormatMessageW
ExitProcess
WriteFile
GlobalUnlock
GetTempPathW
GetStartupInfoA
CompareStringW
SetEvent
LoadLibraryW
IsBadWritePtr
InterlockedIncrement
LocalFree
GlobalFree
LockFile
FlushFileBuffers
GetEnvironmentStringsW
MultiByteToWideChar
GetUserDefaultLCID
FindNextFileW
CreateMutexW
InterlockedExchange
IsBadCodePtr
CreateEventW
GetLastError
GetCurrentThreadId
GetProcAddress
FindClose
CompareStringA
RaiseException
GetTimeZoneInformation
TlsGetValue
lstrlenA
FreeEnvironmentStringsW
SetFileTime
HeapAlloc
RtlUnwind
HeapSize
UnhandledExceptionFilter
FindResourceW
lstrlenW
GlobalReAlloc
shell32
ShellExecuteA
SHGetDesktopFolder
SHGetFileInfoA
shlwapi
StrCmpW
PathIsDirectoryW
PathFindFileNameW
StrCpyW
PathIsUNCW
StrFormatByteSizeW
PathFileExistsW
PathFindExtensionW
PathRemoveExtensionW
PathStripToRootW
Sections
.text Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 468KB - Virtual size: 466KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ