Static task
static1
Behavioral task
behavioral1
Sample
1ed407069d998e8f8bf3d5daf4b53d928c1097b1b8357b0ccd7ae09bb1c7ff38.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1ed407069d998e8f8bf3d5daf4b53d928c1097b1b8357b0ccd7ae09bb1c7ff38.exe
Resource
win10v2004-20220812-en
General
-
Target
1ed407069d998e8f8bf3d5daf4b53d928c1097b1b8357b0ccd7ae09bb1c7ff38
-
Size
3.5MB
-
MD5
656ba9f281b2774e878d9db8803e0971
-
SHA1
b8fb1948ceb57273ebe3e020edcd126431ad150c
-
SHA256
1ed407069d998e8f8bf3d5daf4b53d928c1097b1b8357b0ccd7ae09bb1c7ff38
-
SHA512
d6b86b271158ebddce856087ca092fa60bad8734829c6703a1114817c822d44b7fc6c0549bd6397dd4690f5bfbf1718fd788c957daecf3551d76d45973adfdda
-
SSDEEP
98304:tTnaAaZc9mzfCaMCZbajPtNTZLcPBkqPy94iNCO9Ln:xna32QL5ZajPtcPBLq94iNCWLn
Malware Config
Signatures
Files
-
1ed407069d998e8f8bf3d5daf4b53d928c1097b1b8357b0ccd7ae09bb1c7ff38.exe windows x86
82e62baca68412cc72389cca6523520b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToSystemTime
lstrcmpA
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetFileTime
GetTempFileNameA
GetFullPathNameA
GetDiskFreeSpaceA
GetModuleFileNameW
GlobalFlags
GetModuleHandleW
InterlockedIncrement
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GetThreadLocale
GetOEMCP
MoveFileA
GetStringTypeExA
lstrcmpiA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetShortPathNameA
FileTimeToLocalFileTime
GetFileSizeEx
SetErrorMode
GetTickCount
RtlUnwind
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
RaiseException
Sleep
ExitProcess
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
VirtualQuery
HeapReAlloc
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStdHandle
InitializeCriticalSectionAndSpinCount
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetModuleFileNameA
GetCurrentProcessId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
GetModuleHandleA
GetVersionExA
GetCurrentThreadId
SetLastError
GlobalAlloc
FormatMessageA
LocalFree
MultiByteToWideChar
MulDiv
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
SetFileTime
GetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
lstrcpyA
lstrlenA
lstrcatA
SystemTimeToFileTime
ReadFile
SetFilePointer
WriteFile
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
CreateFileMappingA
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
CloseHandle
FindFirstFileA
FindClose
GetLastError
DeleteFileA
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
InterlockedDecrement
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
GetCPInfo
SizeofResource
user32
BeginPaint
EndPaint
InflateRect
IsZoomed
PostQuitMessage
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
GetMenuItemInfoA
GetSysColorBrush
LoadCursorA
IsRectEmpty
DeleteMenu
SetRect
SetTimer
KillTimer
WindowFromPoint
DestroyIcon
CharUpperA
CharNextA
CopyAcceleratorTableA
InvalidateRgn
SetCapture
GetNextDlgGroupItem
MessageBeep
UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
GetWindowThreadProcessId
SetCursor
ReleaseCapture
LoadAcceleratorsA
InvalidateRect
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
TranslateAcceleratorA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetMenu
GetWindowDC
PostMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
CopyRect
PtInRect
DefWindowProcA
CallWindowProcA
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetFocus
SetWindowPos
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetWindowTextLengthA
GetWindowTextA
GetWindow
SetFocus
SetWindowsHookExA
SendMessageA
EnableWindow
SetWindowLongA
GetWindowLongA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetMenuState
GetMenuStringA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetDesktopWindow
ReleaseDC
GetDC
ClientToScreen
GrayStringA
UpdateWindow
FindWindowA
GetSubMenu
LoadMenuA
GetClientRect
wsprintfA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
UnpackDDElParam
ReuseDDElParam
DestroyMenu
SetForegroundWindow
EndDialog
GetNextDlgTabItem
GetParent
IsWindowEnabled
GetDlgItem
IsWindow
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetActiveWindow
GetClassInfoA
shell32
DragQueryFileA
ExtractIconA
SHGetFileInfoA
ShellExecuteA
DragFinish
ole32
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
OleUninitialize
CoInitializeEx
CoUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromProgID
CoRevokeClassObject
CLSIDFromString
CoCreateInstance
CoTaskMemAlloc
CoInitialize
CoTaskMemFree
OleInitialize
CoFreeUnusedLibraries
oleaut32
SysAllocStringLen
SafeArrayDestroy
SysStringByteLen
SysAllocStringByteLen
VarUdateFromDate
VariantChangeType
VariantCopy
SysFreeString
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
VariantInit
VarDateFromStr
VarBstrFromDate
OleCreateFontIndirect
GetErrorInfo
SysStringLen
shlwapi
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW
oledlg
ord8
oleacc
LresultFromObject
CreateStdAccessibleObject
gdi32
CreateSolidBrush
CreateFontIndirectA
CreateRectRgnIndirect
GetMapMode
DPtoLP
GetTextMetricsA
GetTextExtentPoint32A
GetBkColor
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
SaveDC
SetBkMode
SetMapMode
ExcludeClipRect
IntersectClipRect
DeleteObject
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
GetTextColor
GetRgnBox
GetStockObject
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
RestoreDC
GetDeviceCaps
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
ScaleViewportExtEx
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueA
RegCloseKey
RegCreateKeyA
Sections
.text Size: 378KB - Virtual size: 378KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ