Static task
static1
Behavioral task
behavioral1
Sample
0edc5f58a24343948659dd5be4bb4843ca8c8aec366a04bb41b03a1b0f08ed0b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0edc5f58a24343948659dd5be4bb4843ca8c8aec366a04bb41b03a1b0f08ed0b.exe
Resource
win10v2004-20221111-en
General
-
Target
0edc5f58a24343948659dd5be4bb4843ca8c8aec366a04bb41b03a1b0f08ed0b
-
Size
3.2MB
-
MD5
c7e107c7706893e5f43e26d5c01d838e
-
SHA1
da619c911475713d92ee9de914017efcdd5cf5ac
-
SHA256
0edc5f58a24343948659dd5be4bb4843ca8c8aec366a04bb41b03a1b0f08ed0b
-
SHA512
2f63a7293bb5e230379e2932733e9e85b4e0b31360db4b9488a817cea9385a24f92becd90b73ddd79395ef1f7f3c1ede58164981d6e177419d0bb615cb019e2b
-
SSDEEP
49152:PmWZJjJb2/tG35Go2U5Hu8hTnNZkZ1gJv5awH7:Pz1Ckl26u8JNZUgJv5awH
Malware Config
Signatures
Files
-
0edc5f58a24343948659dd5be4bb4843ca8c8aec366a04bb41b03a1b0f08ed0b.exe windows x86
3d8641b72e2acb562f379dab5faa0fc8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableA
CompareStringW
IsBadCodePtr
IsBadReadPtr
GetDriveTypeA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadWritePtr
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetFileType
SetStdHandle
HeapSize
HeapReAlloc
ExitThread
TerminateProcess
GetACP
GetSystemTime
GetTimeZoneInformation
HeapFree
HeapAlloc
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetTempPathA
GetPrivateProfileSectionNamesA
CompareStringA
GetExitCodeThread
ResetEvent
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
GetProfileStringA
GetProfileIntA
GetCurrentDirectoryA
SetErrorMode
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
GetDiskFreeSpaceA
GetFileTime
CloseHandle
SetFileTime
GetTempFileNameA
SetThreadPriority
GetCurrentThread
lstrcmpA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
SetLastError
FormatMessageA
MulDiv
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LockResource
GetVersion
GetVersionExA
FreeLibrary
GetModuleHandleA
LocalSize
GlobalSize
GetSystemDirectoryA
GlobalFree
CreateProcessA
lstrcatA
CopyFileA
GetWindowsDirectoryA
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
OutputDebugStringA
FindResourceA
LoadResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
WinExec
DeleteCriticalSection
CancelIo
InterlockedExchange
InterlockedIncrement
InterlockedDecrement
GetQueuedCompletionStatus
CreateIoCompletionPort
GetSystemInfo
EnterCriticalSection
PostQueuedCompletionStatus
LeaveCriticalSection
InitializeCriticalSection
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleFileNameA
SetUnhandledExceptionFilter
LoadLibraryA
GetProcAddress
lstrcpyA
MoveFileA
RemoveDirectoryA
ReadFile
DeleteFileA
GetFileSize
FindFirstFileA
FindNextFileA
FindClose
lstrcpynA
LocalAlloc
LocalFree
GetLogicalDriveStringsA
lstrlenA
GetVolumeInformationA
GetDiskFreeSpaceExA
GetFileAttributesA
GetLocalTime
CreateFileA
GetLastError
CreateDirectoryA
SetFilePointer
WriteFile
GetTickCount
VirtualAlloc
VirtualFree
Sleep
ResumeThread
SetEvent
WaitForSingleObject
TerminateThread
CreateEventA
CreateThread
user32
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
GetTopWindow
IsChild
GetCapture
WinHelpA
RegisterClassA
GetMenu
GetWindowTextLengthA
GetWindowTextA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
FindWindowA
EnableWindow
RegisterWindowMessageA
wsprintfA
DispatchMessageA
TranslateMessage
GetMessageA
LoadIconA
SendMessageA
EqualRect
AdjustWindowRectEx
SetFocus
PeekMessageA
SetRect
DestroyMenu
DestroyCursor
DestroyIcon
GetWindowLongA
GetNextDlgTabItem
MapWindowPoints
SetCursor
InvalidateRect
GetActiveWindow
WindowFromPoint
ClientToScreen
TrackPopupMenuEx
GetSubMenu
GetWindowRect
DrawFocusRect
InflateRect
CopyRect
GetClientRect
OffsetRect
DrawStateA
FillRect
GetSysColor
ReleaseDC
CreateIconIndirect
PostMessageA
MessageBoxA
SendDlgItemMessageA
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
SetMenuItemBitmaps
ModifyMenuA
GetMenuCheckMarkDimensions
wvsprintfA
IsRectEmpty
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
LoadStringA
CharUpperA
IsZoomed
ShowOwnedPopups
ValidateRect
SetWindowContextHelpId
MapDialogRect
LoadAcceleratorsA
TranslateAcceleratorA
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
GetClassNameA
GetDC
GetIconInfo
LoadImageA
LoadMenuA
LoadCursorA
DefWindowProcA
UnregisterClassA
DrawMenuBar
TranslateMDISysAccel
DefFrameProcA
ExcludeUpdateRgn
DefDlgProcA
GetClipboardFormatNameA
GetTabbedTextExtentA
HideCaret
ShowCaret
IsMenu
GetMenuDefaultItem
GetMenuItemInfoA
SendMessageTimeoutA
GetDoubleClickTime
GetWindowRgn
IsWindowUnicode
GetWindowLongW
SetWindowLongW
UnionRect
SetCursorPos
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
InsertMenuA
GetMenuStringA
CopyAcceleratorTableA
GetNextDlgGroupItem
GetDCEx
LockWindowUpdate
GetForegroundWindow
RegisterClipboardFormatA
SetParent
InvertRect
PostThreadMessageA
GetParent
GetMenuStringW
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
IsClipboardFormatAvailable
GetKeyboardLayoutList
GetKeyboardState
ToAsciiEx
GetKeyboardLayout
MapVirtualKeyExA
GetKeyNameTextA
IsCharLowerA
WaitMessage
MapVirtualKeyA
CreatePopupMenu
GetClassInfoA
GetCursor
DrawFrameControl
SetRectEmpty
SetTimer
SetCapture
ReleaseCapture
GetKeyState
KillTimer
PtInRect
CopyIcon
GetWindow
ScreenToClient
UpdateWindow
IsWindowVisible
SetWindowPos
GetDlgCtrlID
GetFocus
GetCursorPos
EnableMenuItem
GetMenuItemCount
DeleteMenu
CharNextA
RedrawWindow
DrawEdge
GetSystemMetrics
MessageBeep
CheckMenuItem
GetSystemMenu
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
LoadBitmapA
GetDesktopWindow
SetForegroundWindow
SetWindowLongA
SetClassLongA
CheckMenuRadioItem
AppendMenuA
IntersectRect
DrawIconEx
SystemParametersInfoA
IsIconic
GetWindowPlacement
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
ChangeDisplaySettingsA
PostQuitMessage
SetMenu
SetMenuDefaultItem
TrackPopupMenu
GetMenuItemID
IsWindow
SetWindowRgn
GetSysColorBrush
GetClipboardData
DrawTextA
GetMenuState
ShowScrollBar
gdi32
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
PolyBezierTo
GetClipRgn
ExtSelectClipRgn
GetViewportExtEx
DeleteObject
CreatePatternBrush
PtVisible
RectVisible
Escape
ExtTextOutA
PatBlt
SetRectRgn
CreateRectRgnIndirect
GetTextMetricsA
GetCharWidthA
CreateFontA
CopyMetaFileA
GetTextColor
GetBkColor
CreateSolidBrush
CombineRgn
CreateRectRgn
SetBitmapBits
TextOutA
SetBkMode
GetDIBits
RealizePalette
SelectPalette
GetDeviceCaps
CreateDCA
RoundRect
CreatePen
GetStockObject
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
DeleteDC
SetTextColor
SetBkColor
SelectObject
CreateBitmap
SetPixel
GetPixel
GetObjectA
CreatePolygonRgn
FillRgn
PlgBlt
Rectangle
CreateFontIndirectA
PtInRegion
StretchBlt
SetPixelV
GetTextExtentPoint32A
CreateDIBSection
GetWindowExtEx
GetClipBox
LPtoDP
CreateDIBitmap
GetTextExtentPointA
ExtFloodFill
ExtTextOutW
GetTextExtentPoint32W
BeginPath
CloseFigure
EndPath
StrokeAndFillPath
FillPath
StrokePath
Ellipse
GetViewportOrgEx
Polyline
GetRgnBox
ExtCreateRegion
GetBitmapBits
EnumFontFamiliesExA
GetTextAlign
GetCurrentObject
GetWindowOrgEx
Polygon
StretchDIBits
DPtoLP
SaveDC
RestoreDC
SetStretchBltMode
SetMapMode
GetMapMode
SetViewportOrgEx
comdlg32
GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegQueryValueA
RegEnumKeyA
RegCreateKeyA
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegCloseKey
shell32
ord71
ExtractIconA
Shell_NotifyIconA
SHGetFileInfoA
ShellExecuteExA
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA
DragQueryFileA
DragFinish
comctl32
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Add
ImageList_GetImageInfo
ImageList_Draw
ImageList_Remove
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_GetIcon
oledlg
ord1
ord8
ole32
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
ReleaseStgMedium
OleFlushClipboard
CoTaskMemFree
OleIsCurrentClipboard
OleDuplicateData
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoCreateGuid
CoUninitialize
CoInitialize
CoRevokeClassObject
CoTaskMemAlloc
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
olepro32
ord253
oleaut32
VariantChangeTypeEx
OleLoadPicturePath
LoadTypeLi
SysStringLen
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
VarBstrFromDate
VarDateFromStr
SysStringByteLen
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
VariantClear
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
shlwapi
PathRemoveFileSpecA
SHAutoComplete
ws2_32
WSAGetLastError
shutdown
getsockname
ntohs
ioctlsocket
connect
select
gethostname
gethostbyname
WSACloseEvent
WSASend
WSARecv
socket
accept
inet_ntoa
setsockopt
WSAIoctl
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSASocketA
WSACreateEvent
WSAEventSelect
htons
bind
listen
WSACleanup
WSAStartup
closesocket
getpeername
pdh
PdhCloseQuery
PdhAddCounterA
PdhOpenQueryA
PdhGetFormattedCounterValue
PdhCollectQueryData
avifil32
AVIFileExit
AVIStreamSetFormat
AVIFileCreateStreamA
AVIFileOpenA
AVIStreamWrite
AVIFileRelease
AVIStreamRelease
AVIFileInit
msvfw32
ICCompressorFree
ICSeqCompressFrameStart
ICSendMessage
ICOpen
ICSeqCompressFrameEnd
ICDecompress
ICClose
skinh
SkinH_SetAero
SkinH_AttachRes
SkinH_Detach
wininet
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetQueryDataAvailable
InternetGetLastResponseInfoA
InternetCloseHandle
winmm
waveOutUnprepareHeader
waveOutReset
waveInClose
waveInUnprepareHeader
waveInReset
waveInStop
waveOutWrite
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInOpen
waveInGetNumDevs
waveOutPrepareHeader
waveOutOpen
waveOutGetNumDevs
PlaySoundA
sndPlaySoundA
waveOutClose
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rodata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 292KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 586KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 988KB - Virtual size: 987KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ