Static task
static1
Behavioral task
behavioral1
Sample
af34c55b727e42b7f82f71d2d6a3db305f02cefa883220b4f402a366d1d0fcfb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af34c55b727e42b7f82f71d2d6a3db305f02cefa883220b4f402a366d1d0fcfb.exe
Resource
win10v2004-20220901-en
General
-
Target
af34c55b727e42b7f82f71d2d6a3db305f02cefa883220b4f402a366d1d0fcfb
-
Size
12.0MB
-
MD5
6ba9779ada2ac6afc09e84abac48104b
-
SHA1
86211ef768e4eeb2f588bb1fa994e07bce28ee8a
-
SHA256
af34c55b727e42b7f82f71d2d6a3db305f02cefa883220b4f402a366d1d0fcfb
-
SHA512
723ef02047bb18b03a915394efa9fc8697afb039114362061ca5bf189891e1f0fcacdc1bf44b7094ce30f8afe107446816f7ebaaeebc8f1d88831ad5994c48da
-
SSDEEP
98304:/FuHgsLyl4YR8yWKngj6S2Ya3Sc5HAydG0gBeTFHMPnvIP+/IX:9uA6Y82gjyb3nHFGrBeeIiI
Malware Config
Signatures
Files
-
af34c55b727e42b7f82f71d2d6a3db305f02cefa883220b4f402a366d1d0fcfb.exe windows x64
dc01ccb81865de6799409d4391effcce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
QueryPerformanceCounter
FlushFileBuffers
SetErrorMode
GetFileSizeEx
OpenEventA
ResetEvent
GetCommandLineW
ReleaseMutex
SetUnhandledExceptionFilter
GetCurrentThread
FindNextFileW
GetCurrentProcess
CreateSemaphoreW
CreateThread
ReleaseSemaphore
GetCurrentDirectoryW
SetCurrentDirectoryW
FreeResource
VerifyVersionInfoW
VerSetConditionMask
CreateDirectoryW
TerminateThread
lstrcmpiW
LoadLibraryExW
DecodePointer
CreateProcessW
lstrcmpW
SetThreadExecutionState
MoveFileW
GetDateFormatW
GetTimeFormatW
ExpandEnvironmentStringsW
SleepEx
QueryPerformanceFrequency
GetSystemDirectoryW
GetModuleHandleA
ExpandEnvironmentStringsA
CreateFileMappingW
HeapQueryInformation
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
FindFirstFileExW
SetStdHandle
EnumSystemLocalesW
IsValidLocale
GetConsoleCP
ReadConsoleW
GetConsoleMode
GetACP
ExitProcess
SetFilePointerEx
FormatMessageA
GetFileType
GetDriveTypeW
VirtualQuery
VirtualProtect
SetConsoleCtrlHandler
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
RtlPcToFileHeader
RtlUnwindEx
GetProcessAffinityMask
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
GetStdHandle
MoveFileExA
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrencyFormatW
FoldStringW
EnumSystemLocalesA
GetLocaleInfoA
IsDBCSLeadByteEx
IsValidCodePage
GetProcessTimes
GetStringTypeExA
GetUserDefaultLCID
LCMapStringA
GetStringTypeExW
SleepConditionVariableSRW
WakeAllConditionVariable
ResumeThread
WaitForMultipleObjectsEx
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
InitializeCriticalSectionAndSpinCount
GetStringTypeW
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
IsDebuggerPresent
CreateSemaphoreA
DuplicateHandle
GetTimeZoneInformation
GetSystemTime
WideCharToMultiByte
FreeLibrary
SystemTimeToFileTime
GetCurrentProcessId
LockFileEx
CreateFileMappingA
UnlockFile
HeapCompact
LoadLibraryW
GetSystemInfo
DeleteFileA
LoadLibraryA
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
HeapValidate
UnmapViewOfFile
UnlockFileEx
SetEndOfFile
GetFullPathNameA
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
GetFullPathNameW
HeapCreate
TryEnterCriticalSection
AreFileApisANSI
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetSystemTimeAsFileTime
GetFileSize
SetFilePointer
ReadFile
AcquireSRWLockShared
ReleaseSRWLockShared
WaitForSingleObjectEx
CreateEventA
WaitForMultipleObjects
Sleep
InitializeSRWLock
MulDiv
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
lstrlenW
MapViewOfFile
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
InitializeCriticalSectionEx
GetCurrentThreadId
FindResourceExW
MultiByteToWideChar
CopyFileW
SetEvent
CreateEventW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileTime
SetLastError
RemoveDirectoryW
MoveFileExW
SetFileAttributesW
SetWaitableTimer
CreateWaitableTimerW
LocalAlloc
FormatMessageW
LocalFree
RaiseException
WaitForSingleObject
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
GetTickCount
GetModuleFileNameW
CreateMutexW
FindClose
FindFirstFileW
GetFileAttributesW
DeleteFileW
GetTempPathW
WriteFile
GetModuleHandleW
GetProcAddress
CreateFileW
GetLastError
CloseHandle
PeekNamedPipe
RtlUnwind
user32
DrawTextW
GetCursorPos
PtInRect
SubtractRect
SetCapture
ReleaseCapture
GetCapture
DestroyCursor
SendDlgItemMessageW
SetFocus
MonitorFromPoint
FillRect
InflateRect
GetClassLongPtrW
GetWindowDC
SetWindowRgn
CreatePopupMenu
ModifyMenuW
UpdateWindow
AppendMenuW
TrackPopupMenuEx
LoadBitmapW
GetWindowRgn
DrawEdge
WindowFromPoint
GetMessagePos
GetSysColorBrush
FrameRect
SetActiveWindow
TranslateAcceleratorW
DestroyAcceleratorTable
InsertMenuW
GetIconInfo
InvertRect
RemoveMenu
LoadStringW
LoadStringA
CopyAcceleratorTableW
SystemParametersInfoW
GetDlgItem
GetFocus
NotifyWinEvent
SendMessageW
DrawIconEx
LoadIconW
GetTopWindow
GetDlgItemInt
SetScrollPos
CheckDlgButton
OpenClipboard
CloseClipboard
EmptyClipboard
DrawFrameControl
IsMenu
MessageBeep
CharLowerW
GetKeyState
TrackPopupMenu
IsWindowEnabled
ChildWindowFromPoint
ScreenToClient
DialogBoxParamW
RegisterWindowMessageW
GetMenuState
EnableWindow
GetMenuItemID
GetMenuStringW
EnableMenuItem
GetSubMenu
SetClipboardData
GetClipboardData
DeleteMenu
GetParent
UnregisterClassW
CreateDialogParamW
SetWindowLongPtrW
DestroyIcon
SetWindowPos
SetWindowLongW
GetWindowLongW
CopyIcon
SetWindowTextW
SetDlgItemTextW
PostMessageW
ShowWindow
MapWindowPoints
GetClientRect
GetWindowRect
GetMonitorInfoW
MonitorFromWindow
GetWindow
DialogBoxIndirectParamW
IsDialogMessageW
DestroyWindow
GetSysColor
CharNextW
IsWindow
CreateWindowExW
EndDialog
IsWindowVisible
RedrawWindow
InvalidateRect
SetClassLongW
GetClassLongW
GetWindowTextW
GetWindowTextLengthW
GetDC
ReleaseDC
OffsetRect
MonitorFromRect
CopyRect
DefWindowProcW
RegisterClassExW
SetRectEmpty
GetClassInfoExW
LoadCursorW
GetWindowLongPtrW
CallWindowProcW
GetDlgCtrlID
KillTimer
SetForegroundWindow
IsIconic
FindWindowW
GetWindowThreadProcessId
AllowSetForegroundWindow
MessageBoxW
SetTimer
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetDialogBaseUnits
InsertMenuItemW
CheckMenuItem
GetScrollPos
MoveWindow
MapDialogRect
AdjustWindowRectEx
GetCursor
FlashWindowEx
LoadAcceleratorsW
GetMenuItemCount
SetMenuDefaultItem
GetMenuItemInfoW
SetMenuItemInfoW
CheckMenuRadioItem
CreateDialogIndirectParamW
DispatchMessageA
DispatchMessageW
TranslateMessage
GetMessageA
GetMessageW
IsWindowUnicode
PeekMessageW
MsgWaitForMultipleObjectsEx
EqualRect
EnumDisplayMonitors
GetClassNameW
LoadImageW
GetSystemMetrics
GetMenu
SetMenu
PostQuitMessage
DestroyMenu
IsZoomed
LoadMenuW
ClientToScreen
GetAncestor
SetLayeredWindowAttributes
SetCursor
UpdateLayeredWindow
BeginPaint
EndPaint
IsRectEmpty
GetActiveWindow
IntersectRect
SetProcessDefaultLayout
gdi32
GetTextMetricsW
PatBlt
CreatePatternBrush
SetBrushOrgEx
CreateBitmap
CreateRectRgn
GetCurrentObject
Rectangle
RestoreDC
CreateSolidBrush
SaveDC
BitBlt
SetViewportOrgEx
CreateRectRgnIndirect
CombineRgn
GetDeviceCaps
SetBkMode
MoveToEx
LineTo
CreatePen
SetTextColor
ExtTextOutW
DeleteObject
CreateFontIndirectW
GetObjectW
GetStockObject
CreateDCW
CreateCompatibleDC
SelectObject
DeleteDC
CreateDIBSection
GetTextExtentPoint32W
GetTextColor
GetBkMode
GetBkColor
MaskBlt
SetLayout
GetViewportOrgEx
CreateRoundRectRgn
OffsetRgn
SelectClipRgn
ExtSelectClipRgn
SetPolyFillMode
Polygon
GetObjectA
SetStretchBltMode
ExcludeClipRect
StretchBlt
SetBkColor
CreateCompatibleBitmap
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
CryptAcquireContextA
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
CryptAcquireContextW
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptDestroyHash
CryptHashData
shell32
ShellExecuteW
SHGetSpecialFolderPathW
ord28
ord155
SHBindToParent
DragQueryFileW
DragQueryPoint
DragFinish
ord190
SHOpenFolderAndSelectItems
SHBrowseForFolderW
SHGetPathFromIDListW
SHFileOperationW
DragAcceptFiles
ShellExecuteExW
ShellExecuteA
ole32
RegisterDragDrop
RevokeDragDrop
ReleaseStgMedium
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoCreateInstance
PropVariantClear
CoTaskMemFree
CreateStreamOnHGlobal
OleRun
CoUninitialize
CoInitializeEx
CoTaskMemRealloc
oleaut32
VariantChangeType
VarUI4FromStr
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VariantClear
VariantInit
SafeArrayAccessData
SafeArrayCreate
SafeArrayDestroy
GetErrorInfo
shlwapi
StrRetToStrW
SHStrDupW
StrCmpLogicalW
comctl32
_TrackMouseEvent
ImageList_Destroy
InitCommonControlsEx
ImageList_GetIcon
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Create
ImageList_DrawIndirect
ImageList_Draw
ImageList_LoadImageW
ImageList_ReplaceIcon
msimg32
AlphaBlend
GradientFill
gdiplus
GdipGetImageWidth
GdipFillPath
GdipWarpPath
GdipDrawImageRect
GdipGetFontStyle
GdipGetFontSize
GdipAddPathString
GdipGetFamily
GdipDeleteFontFamily
GdipDeletePath
GdipCreatePath
GdipSetTextRenderingHint
GdipCreateFontFromLogfontW
GdipDrawString
GdipSetStringFormatAlign
GdipFillRectangle
GdipMeasureString
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipDrawImageRectRectI
GdipCreateBitmapFromFile
GdiplusShutdown
GdiplusStartup
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromScan0
GdipFree
GdipAlloc
GdipGetImageHeight
GdipSetStringFormatLineAlign
dbghelp
MiniDumpWriteDump
secur32
AcquireCredentialsHandleA
FreeCredentialsHandle
DecryptMessage
DeleteSecurityContext
ApplyControlToken
QueryContextAttributesA
FreeContextBuffer
EncryptMessage
InitializeSecurityContextA
crypt32
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringW
CertAddCertificateContextToStore
CryptStringToBinaryW
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CryptProtectData
CryptUnprotectData
ws2_32
recvfrom
sendto
accept
listen
ioctlsocket
shutdown
WSAGetLastError
freeaddrinfo
getaddrinfo
select
__WSAFDIsSet
WSACleanup
WSAStartup
WSAIoctl
WSASetLastError
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
closesocket
bind
send
recv
socket
Sections
.text Size: 8.5MB - Virtual size: 8.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 340KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 294KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rodata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 388KB - Virtual size: 387KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ