Static task
static1
Behavioral task
behavioral1
Sample
df7b2f3d9713e147c9857c3498568bc3994a0baaba42bcc4e73682585ca2fbbe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
df7b2f3d9713e147c9857c3498568bc3994a0baaba42bcc4e73682585ca2fbbe.exe
Resource
win10v2004-20220812-en
General
-
Target
df7b2f3d9713e147c9857c3498568bc3994a0baaba42bcc4e73682585ca2fbbe
-
Size
272KB
-
MD5
eb5035e7d7a59baad2212a62607374e3
-
SHA1
cf483aae94f059ffd929d03ab80db394be048604
-
SHA256
df7b2f3d9713e147c9857c3498568bc3994a0baaba42bcc4e73682585ca2fbbe
-
SHA512
d03a255319a17ebdf93d3ac00217af8819580f141eafcdafb26a54ad3f64f4e36756dac8360e5452dcbe751fe795cc9e8f4d2b82e7d6fbe79e9d9489599eeb20
-
SSDEEP
6144:807KGdHQXwLluSWet//+vit7ZzWc3pJo5B5hiw:807zHbyeRoq1CYLe77
Malware Config
Signatures
Files
-
df7b2f3d9713e147c9857c3498568bc3994a0baaba42bcc4e73682585ca2fbbe.exe windows x86
e0e120119eaa29b29305b7bead31f183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHFileOperationA
SHGetSpecialFolderPathA
wininet
HttpOpenRequestA
HttpSendRequestA
InternetOpenA
InternetConnectA
InternetCloseHandle
shlwapi
PathAppendA
PathFileExistsA
SHGetValueA
PathFindFileNameA
PathRemoveExtensionA
PathFindExtensionA
PathIsDirectoryA
SHDeleteKeyA
SHDeleteValueA
iphlpapi
GetAdaptersInfo
kernel32
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetThreadLocale
GetFullPathNameA
GetCurrentThreadId
CreateSemaphoreA
ReleaseSemaphore
GlobalGetAtomNameA
GetModuleHandleA
InterlockedDecrement
GetCurrentProcessId
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
FindFirstFileA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalFlags
GetLocaleInfoA
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
RaiseException
HeapReAlloc
VirtualAlloc
RtlUnwind
GetSystemTimeAsFileTime
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFileInformationByHandle
PeekNamedPipe
GetFileType
GetProcessHeap
GetStartupInfoA
SetStdHandle
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
GetConsoleCP
GetConsoleMode
GetACP
LCMapStringA
LCMapStringW
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
RemoveDirectoryA
Sleep
CreateMutexA
lstrcmpA
lstrcpyA
GetVolumeInformationA
GetComputerNameA
GetCommandLineA
MoveFileExA
DeleteFileA
GetVersionExA
GetCurrentProcess
CreateFileA
DeviceIoControl
FindResourceA
LoadResource
LockResource
SizeofResource
WaitForSingleObject
TerminateProcess
HeapAlloc
HeapFree
SetLastError
OpenProcess
CloseHandle
FreeLibrary
LoadLibraryA
GetProcAddress
OutputDebugStringA
FormatMessageA
LocalFree
GetSystemTime
GetTimeZoneInformation
GetTempPathA
GetModuleFileNameA
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
user32
DrawTextExA
GrayStringA
ClientToScreen
UnregisterClassA
DestroyMenu
PostQuitMessage
DrawTextA
TabbedTextOutA
SetWindowTextA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
PtInRect
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
LoadCursorA
GetDC
ReleaseDC
GetSysColor
PostMessageA
FindWindowExA
GetSysColorBrush
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
DispatchMessageA
SendMessageA
GetKeyState
GetWindowThreadProcessId
EnumWindows
SendMessageTimeoutA
RegisterWindowMessageA
GetWindowTextA
GetWindow
GetDesktopWindow
FindWindowA
MessageBoxA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSystemMetrics
ValidateRect
PeekMessageA
GetDlgCtrlID
gdi32
SetMapMode
DeleteObject
DeleteDC
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetStockObject
GetDeviceCaps
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegSetValueExA
RegDeleteKeyA
RegEnumKeyExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ole32
CoGetMalloc
StringFromIID
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 196KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ