Static task
static1
Behavioral task
behavioral1
Sample
d0fce662bb113c81c34106633ddf315905c68571952420249237d3bae7d2b1e9.exe
Resource
win7-20220812-en
General
-
Target
d0fce662bb113c81c34106633ddf315905c68571952420249237d3bae7d2b1e9
-
Size
118KB
-
MD5
fb9a8704f4548d99e92fb8db33532238
-
SHA1
68f8a0b322d50fc364a06dd1fef07d712c8996ea
-
SHA256
d0fce662bb113c81c34106633ddf315905c68571952420249237d3bae7d2b1e9
-
SHA512
96bd5ad8b5c4a13ede4bd9466466ea156c04ef0efb114ec46ea5cdd832155e11ced90fc78b1f6ac20067ed2a90bac0370ed900bea932f00786ef5d90fadf781c
-
SSDEEP
1536:mNFWWMQFWMQvEEyFYvF6V1TjFM/hShyKuAqB/59XkOnxY2BQPM9JTzi+:EWWfFWf5FixxM/r1vHxxBQPAJTzi+
Malware Config
Signatures
Files
-
d0fce662bb113c81c34106633ddf315905c68571952420249237d3bae7d2b1e9.exe windows x86
212d7722b32480e3eb757be6968222f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ReleaseDC
GetDC
ReleaseDC
ReleaseDC
ReleaseDC
GetDC
ReleaseDC
GetDC
GetDC
ReleaseDC
GetDC
ReleaseDC
ReleaseDC
GetDC
GetDC
ReleaseDC
ReleaseDC
GetDC
GetDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
GetDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
GetDC
ReleaseDC
ReleaseDC
ReleaseDC
GetDC
GetDC
ReleaseDC
ReleaseDC
ReleaseDC
GetDC
GetDC
ReleaseDC
GetDC
ReleaseDC
GetDC
GetDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
GetDC
GetDC
GetDC
GetDC
GetDC
ReleaseDC
GetDC
GetDC
GetDC
GetDC
ReleaseDC
ReleaseDC
GetDC
GetDC
ReleaseDC
GetDC
GetDC
GetDC
ReleaseDC
GetDC
GetDC
GetDC
ReleaseDC
GetDC
ReleaseDC
GetDC
GetDC
GetDC
ReleaseDC
GetDC
GetDC
GetDC
GetDC
ReleaseDC
ReleaseDC
GetDC
GetDC
GetDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
GetDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
GetDC
LoadStringA
PackDDElParam
GetDC
ReleaseDC
GetDC
GetDC
ReleaseDC
GetDC
ReleaseDC
ReleaseDC
GetDC
GetDC
GetDC
GetDC
ReleaseDC
ReleaseDC
GetDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
GetDC
ReleaseDC
GetDC
ReleaseDC
GetDC
GetDC
GetDC
ReleaseDC
GetDC
ReleaseDC
ReleaseDC
GetDC
GetDC
ReleaseDC
ReleaseDC
GetDC
ReleaseDC
GetDC
ReleaseDC
GetDC
GetDC
GetDC
ReleaseDC
ReleaseDC
GetDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
GetDC
ReleaseDC
ReleaseDC
GetDC
GetDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
GetDC
GetDC
ReleaseDC
ReleaseDC
ReleaseDC
GetDC
GetDC
ReleaseDC
GetDC
ReleaseDC
GetDC
GetDC
GetDC
GetDC
ReleaseDC
ReleaseDC
GetDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
ReleaseDC
GetDC
GetDC
GetDC
ReleaseDC
ReleaseDC
GetDC
GetDC
GetDC
GetDC
GetDC
GetDC
GetDC
GetDC
GetDC
kernel32
Sleep
LoadLibraryExW
ReadProcessMemory
VirtualProtectEx
WriteProcessMemory
Sleep
WaitForSingleObject
GetSystemTimeAsFileTime
TerminateProcess
GetSystemTime
SleepEx
WaitForSingleObject
ReadProcessMemory
GetSystemTime
GetStartupInfoA
ReleaseMutex
ReadFile
WriteProcessMemory
GetStartupInfoW
CreateProcessW
Sleep
ReadProcessMemory
CreateFileA
ReleaseMutex
GetSystemTime
VirtualProtectEx
LoadLibraryExW
WaitForSingleObject
GetStartupInfoA
LoadLibraryA
WaitForSingleObject
LoadLibraryExA
ReleaseMutex
LoadLibraryExA
GetSystemTime
WaitForSingleObject
WaitForSingleObject
GetStartupInfoW
LoadLibraryExA
LoadLibraryExA
ReleaseMutex
TerminateProcess
ReadProcessMemory
SleepEx
GetSystemTimeAsFileTime
Sleep
ReadProcessMemory
CreateProcessW
LoadLibraryExW
LoadLibraryA
CreateProcessW
VirtualProtect
TerminateProcess
GetStartupInfoA
Sleep
LoadLibraryExA
Sleep
GetStartupInfoA
GetStartupInfoA
CreateProcessA
LoadLibraryA
LoadLibraryExW
CreateProcessW
ReadProcessMemory
LoadLibraryExA
CreateProcessA
SleepEx
ReadProcessMemory
LoadLibraryExW
GetSystemTimeAsFileTime
Sleep
ReadProcessMemory
LoadLibraryA
GetStartupInfoW
ReadFile
GetSystemTimeAsFileTime
TerminateProcess
ReadProcessMemory
VirtualProtectEx
GetStartupInfoW
CreateProcessA
SleepEx
GetStartupInfoW
GetStartupInfoA
LoadLibraryExW
VirtualProtectEx
ReadFile
LoadLibraryA
WriteProcessMemory
Sleep
WaitForSingleObject
GetSystemTimeAsFileTime
GetStartupInfoA
LoadLibraryA
GetSystemTimeAsFileTime
TerminateProcess
CreateProcessW
CreateProcessA
GetSystemTime
VirtualProtect
GetProcAddress
LoadLibraryA
VirtualProtect
VirtualAlloc
WriteProfileStringA
WriteProfileStringW
GetSystemTimeAsFileTime
GetStartupInfoA
CreateProcessW
SleepEx
ReleaseMutex
LoadLibraryExW
ReadFile
ReadFile
Sleep
VirtualProtectEx
VirtualProtect
CreateFileA
VirtualProtectEx
GetSystemTime
WaitForSingleObject
VirtualProtect
LoadLibraryA
LoadLibraryA
CreateProcessW
LoadLibraryA
VirtualProtect
ReleaseMutex
GetSystemTimeAsFileTime
GetStartupInfoW
VirtualProtect
ReadFile
CreateFileA
SleepEx
LoadLibraryExW
CreateProcessW
VirtualProtect
GetStartupInfoW
VirtualProtectEx
ReadFile
SleepEx
LoadLibraryExA
ReadProcessMemory
CreateProcessW
CreateProcessW
LoadLibraryA
CreateFileA
GetSystemTimeAsFileTime
GetStartupInfoA
ReadFile
VirtualProtect
CreateFileA
CreateProcessW
LoadLibraryA
ReadFile
CreateProcessA
ReleaseMutex
ReadFile
ReleaseMutex
ReadFile
SleepEx
CreateProcessA
SleepEx
LoadLibraryExW
GetSystemTimeAsFileTime
VirtualProtect
TerminateProcess
ReadFile
ReleaseMutex
GetStartupInfoW
CreateFileA
TerminateProcess
VirtualProtect
CreateProcessW
VirtualProtectEx
VirtualProtectEx
GetSystemTime
LoadLibraryExA
TerminateProcess
WaitForSingleObject
WaitForSingleObject
CreateProcessA
VirtualProtectEx
GetStartupInfoW
LoadLibraryExA
CreateProcessW
GetStartupInfoW
Sleep
TerminateProcess
LoadLibraryExA
CreateFileA
TerminateProcess
VirtualProtectEx
ReadProcessMemory
ReadProcessMemory
VirtualProtectEx
CreateProcessA
LoadLibraryExA
CreateFileA
ReadProcessMemory
WaitForSingleObject
ReleaseMutex
GetSystemTimeAsFileTime
TerminateProcess
Sleep
WriteProcessMemory
WriteProcessMemory
Sleep
GetStartupInfoW
GetStartupInfoW
WaitForSingleObject
GetSystemTimeAsFileTime
CreateFileA
GetSystemTimeAsFileTime
LoadLibraryExW
GetStartupInfoA
WaitForSingleObject
VirtualProtect
VirtualProtectEx
CreateFileA
GetStartupInfoW
LoadLibraryA
CreateProcessA
WriteProcessMemory
ReadProcessMemory
WriteProcessMemory
GetSystemTime
TerminateProcess
VirtualProtect
VirtualProtectEx
LoadLibraryExA
ReleaseMutex
VirtualProtectEx
Sleep
GetStartupInfoW
CreateProcessW
WriteProcessMemory
LoadLibraryA
VirtualProtectEx
TerminateProcess
SleepEx
VirtualProtectEx
SleepEx
ReleaseMutex
SleepEx
WaitForSingleObject
ReadProcessMemory
ReleaseMutex
LoadLibraryExA
CreateProcessA
LoadLibraryA
GetSystemTime
WriteProcessMemory
WriteProcessMemory
GetSystemTime
GetSystemTime
LoadLibraryA
CreateProcessW
ReadProcessMemory
GetSystemTime
LoadLibraryA
SleepEx
CreateProcessW
GetSystemTime
ReadFile
GetSystemTime
SleepEx
CreateProcessA
LoadLibraryExA
CreateFileA
LoadLibraryA
LoadLibraryA
CreateProcessW
GetSystemTimeAsFileTime
TerminateProcess
GetStartupInfoW
ReadProcessMemory
GetSystemTime
GetSystemTime
LoadLibraryExW
VirtualProtectEx
LoadLibraryA
Sleep
WriteProcessMemory
GetSystemTime
ReleaseMutex
LoadLibraryExA
GetStartupInfoW
LoadLibraryExW
GetStartupInfoW
GetSystemTime
VirtualProtect
CreateFileA
ReleaseMutex
CreateProcessW
WaitForSingleObject
SleepEx
GetStartupInfoA
CreateProcessW
GetSystemTimeAsFileTime
ReleaseMutex
WriteProcessMemory
LoadLibraryExW
WriteProcessMemory
VirtualProtectEx
GetStartupInfoW
CreateFileA
VirtualProtectEx
CreateFileA
GetStartupInfoA
VirtualProtectEx
ReadProcessMemory
CreateProcessW
SleepEx
WaitForSingleObject
VirtualProtect
GetSystemTimeAsFileTime
GetSystemTimeAsFileTime
CreateProcessW
CreateProcessA
CreateFileA
CreateProcessA
Sleep
GetSystemTimeAsFileTime
LoadLibraryExW
WaitForSingleObject
SleepEx
ReleaseMutex
VirtualProtectEx
VirtualProtectEx
ReadProcessMemory
WaitForSingleObject
SleepEx
WriteProcessMemory
GetSystemTimeAsFileTime
WaitForSingleObject
ReadProcessMemory
GetSystemTimeAsFileTime
GetStartupInfoW
CreateProcessW
GetSystemTime
CreateProcessA
WriteProcessMemory
Sleep
SleepEx
VirtualProtect
ReadProcessMemory
SleepEx
SleepEx
GetStartupInfoW
VirtualProtectEx
WaitForSingleObject
ReadFile
VirtualProtect
WaitForSingleObject
GetStartupInfoA
ReadProcessMemory
LoadLibraryExW
VirtualProtectEx
VirtualProtect
Sleep
CreateFileA
GetStartupInfoW
WriteProcessMemory
ReadFile
LoadLibraryExA
LoadLibraryExW
ReadProcessMemory
LoadLibraryExW
VirtualProtect
GetSystemTime
ReadFile
ReadProcessMemory
GetStartupInfoW
SleepEx
CreateFileA
VirtualProtectEx
TerminateProcess
LoadLibraryExW
CreateFileA
ReadProcessMemory
WriteProcessMemory
LoadLibraryExA
GetSystemTimeAsFileTime
LoadLibraryExA
Sleep
ReadFile
LoadLibraryExW
SleepEx
ReleaseMutex
SleepEx
LoadLibraryA
GetSystemTimeAsFileTime
VirtualProtectEx
ReleaseMutex
VirtualProtectEx
ReadFile
VirtualProtectEx
WaitForSingleObject
GetStartupInfoW
WaitForSingleObject
CreateProcessW
VirtualProtectEx
GetSystemTime
GetStartupInfoW
TerminateProcess
SleepEx
ReleaseMutex
LoadLibraryExW
WriteProcessMemory
ReadFile
VirtualProtectEx
TerminateProcess
LoadLibraryExA
WaitForSingleObject
TerminateProcess
TerminateProcess
LoadLibraryExW
VirtualProtect
LoadLibraryExW
ReadProcessMemory
GetStartupInfoA
ReadProcessMemory
GetSystemTimeAsFileTime
CreateProcessW
GetStartupInfoA
GetSystemTime
WriteProcessMemory
CreateProcessA
SleepEx
VirtualProtectEx
LoadLibraryExW
LoadLibraryExA
ReleaseMutex
WaitForSingleObject
VirtualProtectEx
GetSystemTime
GetSystemTime
WriteProcessMemory
LoadLibraryA
ReadFile
ReadProcessMemory
CreateProcessA
ReadProcessMemory
ReadProcessMemory
ReadProcessMemory
VirtualProtectEx
TerminateProcess
ReadFile
TerminateProcess
LoadLibraryA
Sleep
ReadProcessMemory
Sleep
CreateFileA
ReleaseMutex
GetStartupInfoA
WaitForSingleObject
TerminateProcess
ReleaseMutex
LoadLibraryExW
ReadFile
CreateProcessW
VirtualProtectEx
GetStartupInfoA
TerminateProcess
ReleaseMutex
ReadFile
GetStartupInfoA
LoadLibraryA
VirtualProtect
LoadLibraryExA
TerminateProcess
ReadProcessMemory
TerminateProcess
ReleaseMutex
ReleaseMutex
SleepEx
ReadProcessMemory
CreateProcessA
ReadFile
ReadFile
ReadProcessMemory
CreateProcessA
TerminateProcess
CreateFileA
GetSystemTime
ReleaseMutex
WaitForSingleObject
CreateProcessW
GetStartupInfoW
CreateProcessW
GetStartupInfoA
LoadLibraryA
LoadLibraryExW
GetSystemTimeAsFileTime
SleepEx
GetSystemTime
GetSystemTime
LoadLibraryExW
Sections
.text Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 16.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ