Static task
static1
Behavioral task
behavioral1
Sample
8d6a4bf9cb7b6a11a55ab871570bc512f05eb3411118ca9f560880419cc58e9f.exe
Resource
win7-20221111-en
General
-
Target
8d6a4bf9cb7b6a11a55ab871570bc512f05eb3411118ca9f560880419cc58e9f
-
Size
3.1MB
-
MD5
a9801dad4bf5837e582278413e7703a8
-
SHA1
fe3145d312054adba509199174da1239f7c592d4
-
SHA256
8d6a4bf9cb7b6a11a55ab871570bc512f05eb3411118ca9f560880419cc58e9f
-
SHA512
e4192e03505d0733ff1aa729d498c1fa494c07ced2c0b0e8242f28098f4a02ebe619419164c07ce49d109ecb9e875f79dd661178c6d72f8729c574992f0040b6
-
SSDEEP
98304:rHyCMKTpuUptPdP2Xn5pJ5ch/ZFfE3dQ:iKTphptPdP2Xn5pJ5ch/ZFfE32
Malware Config
Signatures
Files
-
8d6a4bf9cb7b6a11a55ab871570bc512f05eb3411118ca9f560880419cc58e9f.exe windows x86
01569ecb6a9ea4939437c67e2d238204
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
IcmpCreateFile
GetAdaptersInfo
IcmpSendEcho
kernel32
DuplicateHandle
GetFullPathNameA
FileTimeToLocalFileTime
GetFileTime
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
HeapAlloc
HeapFree
HeapReAlloc
RtlUnwind
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcessHeap
GetStartupInfoA
GetFileInformationByHandle
PeekNamedPipe
UnlockFile
ExitProcess
SetStdHandle
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetHandleCount
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
SetEnvironmentVariableA
LockFile
GetThreadLocale
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameW
GlobalAlloc
FormatMessageA
GlobalLock
GlobalUnlock
GlobalFree
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LocalFree
LocalAlloc
RaiseException
WritePrivateProfileStringA
GetSystemTime
UnmapViewOfFile
CreateFileMappingA
MapViewOfFileEx
GetSystemDirectoryA
GetCurrentDirectoryA
OutputDebugStringA
ExitThread
InterlockedCompareExchange
FindResourceExW
FindResourceW
VirtualProtect
WriteProcessMemory
GetCurrentThreadId
GetLocaleInfoA
CompareFileTime
InterlockedDecrement
SetLastError
InterlockedIncrement
FileTimeToSystemTime
MulDiv
lstrcmpA
GetDateFormatA
GetTimeFormatA
SetEndOfFile
ReadFile
GetPrivateProfileIntA
GetWindowsDirectoryA
lstrcatA
GetFileAttributesA
lstrcmpW
FreeLibrary
LoadLibraryA
GetProcAddress
GlobalSize
SetFileAttributesA
GetFileAttributesExA
ResumeThread
SetFilePointer
FlushFileBuffers
GetExitCodeThread
TerminateThread
GetVolumeInformationA
GetFileAttributesW
CreateFileW
GetTempPathW
LockFileEx
DeleteFileW
GetFullPathNameW
AreFileApisANSI
CreateEventA
GetTempPathA
WaitForSingleObject
SetEvent
ResetEvent
GetCommandLineA
CreateDirectoryA
CopyFileA
RemoveDirectoryA
CreateProcessA
lstrcpynA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcessId
GetCurrentProcess
OpenProcess
TerminateProcess
WriteFile
GetVersionExA
CreateFileA
GetFileSize
DeleteFileA
lstrcpyA
CreateThread
SystemTimeToFileTime
GetLocalTime
FindResourceExA
SuspendThread
FreeResource
GetTickCount
FindFirstFileA
FindNextFileA
FindClose
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
Sleep
CreateMutexA
ReleaseMutex
CloseHandle
GetModuleFileNameA
GetModuleHandleA
GetComputerNameA
GetStringTypeExA
GetEnvironmentVariableA
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
lstrlenW
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
LoadLibraryW
GetFileType
user32
CreateDialogIndirectParamA
GetNextDlgTabItem
SendDlgItemMessageA
WinHelpA
IsChild
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetLastActivePopup
SetActiveWindow
GetTopWindow
GetMessageTime
GetMessagePos
GetMenu
GetClassInfoExA
AdjustWindowRectEx
EqualRect
GetScrollInfo
IntersectRect
DestroyWindow
RegisterClassExA
CreateWindowExA
EndDialog
GetForegroundWindow
EnumWindows
GetWindowPlacement
GetDlgItem
BeginPaint
EndPaint
GetAsyncKeyState
DrawFocusRect
GetCapture
GetComboBoxInfo
DestroyCursor
GetWindowTextA
GetActiveWindow
CallWindowProcA
GetSysColorBrush
GetClassInfoA
DestroyMenu
GetMenuItemID
SetMenuDefaultItem
EnableMenuItem
WindowFromPoint
GetFocus
LoadImageW
LoadImageA
LoadCursorW
LoadIconW
LoadBitmapW
LoadStringW
MapWindowPoints
LoadMenuA
GetSubMenu
IsRectEmpty
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
ReleaseCapture
GetDlgCtrlID
SetCapture
SetCursor
TrackPopupMenuEx
TrackPopupMenu
SetRectEmpty
GetMenuItemRect
UnionRect
FrameRect
SetMenuItemInfoA
SetMenuItemBitmaps
GetMenuItemInfoA
GetMenuDefaultItem
OffsetRect
GetMenuItemCount
GetMenuState
IsMenu
InsertMenuItemA
CopyRect
CopyImage
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
InflateRect
GetSysColor
EnableScrollBar
SetScrollPos
ClientToScreen
SetRect
ValidateRect
DrawTextA
ShowWindow
GetWindow
GetClassNameA
GetWindowDC
SetWindowLongA
InvalidateRect
ScreenToClient
SetWindowRgn
PtInRect
GetSystemMenu
DrawStateA
GetWindowLongA
DestroyIcon
LoadBitmapA
FindWindowExA
FillRect
SendMessageTimeoutA
CountClipboardFormats
EnumClipboardFormats
GetClipboardData
GetClipboardFormatNameA
GetDesktopWindow
OpenClipboard
EmptyClipboard
CloseClipboard
GetMenuStringA
CheckMenuItem
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
UnregisterClassA
IsWindowUnicode
GetMessageW
GetMessageA
DispatchMessageW
LoadCursorA
PostThreadMessageA
FindWindowA
CharNextA
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatA
GetWindowThreadProcessId
MapVirtualKeyA
GetKeyNameTextA
GrayStringA
DrawTextExA
TabbedTextOutA
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
IsWindowEnabled
GetMenuCheckMarkDimensions
SetFocus
ModifyMenuA
UpdateWindow
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageA
PeekMessageA
SystemParametersInfoA
SetWindowPos
GetWindowRect
ReleaseDC
GetDC
GetKeyState
RedrawWindow
wsprintfA
RegisterWindowMessageA
RegisterClassA
GetCursorPos
SetParent
KillTimer
SetTimer
PostMessageA
AppendMenuA
CreatePopupMenu
PostQuitMessage
DefWindowProcA
IsWindow
GetParent
IsWindowVisible
LoadStringA
MessageBoxA
SetForegroundWindow
CharUpperA
GetSystemMetrics
EnableWindow
LoadIconA
GetClientRect
IsIconic
SendMessageA
DrawIcon
IsZoomed
gdi32
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetRgnBox
SelectClipRgn
ExcludeClipRect
CreateRectRgnIndirect
RestoreDC
SaveDC
GetClipBox
GetStockObject
GetTextExtentPoint32A
GetTextMetricsA
GetDeviceCaps
GetTextColor
SetPixel
GetBitmapBits
SetBitmapBits
GetPixel
CreateBrushIndirect
MoveToEx
LineTo
SetStretchBltMode
DPtoLP
CreateBitmap
GetMapMode
SetMapMode
CreateDIBitmap
CreateSolidBrush
GetBkColor
GetBkMode
SetBkColor
SetBkMode
SetTextColor
TextOutA
GetDIBits
DeleteDC
CreateEllipticRgn
Rectangle
CreateCompatibleBitmap
CreateFontIndirectA
ExtCreatePen
CreatePen
CreateRectRgn
CombineRgn
DeleteObject
StretchBlt
BitBlt
CreateCompatibleDC
GetObjectA
SelectObject
CreateFontA
PatBlt
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegQueryValueA
RegOpenKeyA
GetUserNameA
RegQueryInfoKeyA
RegEnumKeyExA
RegEnumValueA
RegEnumKeyA
RegDeleteKeyA
shell32
SHGetSpecialFolderPathA
Shell_NotifyIconA
SHAppBarMessage
SHFileOperationA
SHGetFolderPathA
SHEmptyRecycleBinA
ord155
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteA
comctl32
ImageList_GetIconSize
ImageList_Draw
ImageList_DrawEx
ImageList_GetImageInfo
_TrackMouseEvent
ord17
ImageList_GetImageCount
shlwapi
PathStripPathA
PathAddBackslashA
PathRemoveFileSpecA
PathAppendA
StrStrIA
SHDeleteKeyA
PathRenameExtensionA
PathFileExistsA
PathFindExtensionA
PathRemoveExtensionA
PathCombineA
SHDeleteValueA
PathIsDirectoryA
StrRetToStrA
StrToIntA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
oledlg
ord8
ole32
CoInitializeEx
CoTaskMemFree
CoTaskMemAlloc
OleRun
StringFromGUID2
CoInitialize
CoCreateInstance
CoUninitialize
StgCreateDocfileOnILockBytes
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
oleaut32
OleCreateFontIndirect
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetVartype
VariantCopy
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString
VariantInit
VariantClear
VariantChangeType
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringByteLen
urlmon
ObtainUserAgentString
dbghelp
ImageDirectoryEntryToData
wininet
HttpQueryInfoA
InternetGetLastResponseInfoA
InternetGetCookieA
InternetReadFile
FindFirstUrlCacheEntryExA
InternetOpenUrlA
DeleteUrlCacheEntry
FindCloseUrlCache
InternetSetCookieA
InternetCrackUrlA
InternetQueryOptionA
InternetCloseHandle
InternetSetOptionA
FindNextUrlCacheEntryA
InternetOpenA
FindNextUrlCacheEntryExA
InternetConnectA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
InternetGetConnectedState
InternetCanonicalizeUrlA
rpcrt4
UuidCreate
psapi
EnumProcessModules
GetModuleBaseNameA
EnumProcesses
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
ws2_32
gethostbyname
WSACleanup
WSAStartup
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 268KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 541B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ