Static task
static1
Behavioral task
behavioral1
Sample
f7ef40a4c374683268d06e11a52666d2222b4eb5315faba2b18fb9619d177cf4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f7ef40a4c374683268d06e11a52666d2222b4eb5315faba2b18fb9619d177cf4.exe
Resource
win10v2004-20221111-en
General
-
Target
f7ef40a4c374683268d06e11a52666d2222b4eb5315faba2b18fb9619d177cf4
-
Size
219KB
-
MD5
ecbc0f4adbce874ada7e4b23dae34fff
-
SHA1
c4697dce2686b01850f36ff3dd9fe86ff7f12be4
-
SHA256
f7ef40a4c374683268d06e11a52666d2222b4eb5315faba2b18fb9619d177cf4
-
SHA512
4530396c2d756006391cfb13a55553b695178d2a5aac1acabf3db02159d9cdcfdbc194ba3c40fe1746bd8d452a29f8d002ceba9fffe164bb0cbed7de65e6c584
-
SSDEEP
3072:urevwkTMP7m830Osvp0bOIqvrwF+A31YfqG812X1GP5jR59W6t2ohtC13QSZFoPB:3vwkTMjmVQEAkqcGfX4CqzQj
Malware Config
Signatures
Files
-
f7ef40a4c374683268d06e11a52666d2222b4eb5315faba2b18fb9619d177cf4.exe windows x86
9223b8b5a481278a76bb61a879a9e079
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
EnterCriticalSection
CreateEventA
GetProcAddress
HeapDestroy
Sleep
TlsSetValue
HeapSize
TlsGetValue
IsValidCodePage
TlsFree
QueryPerformanceCounter
WideCharToMultiByte
InterlockedDecrement
lstrcpyW
CreateMutexW
ReadFile
LocalReAlloc
SystemTimeToFileTime
UnlockFile
LoadLibraryA
lstrcmpiW
RemoveDirectoryW
CreateEventW
LocalLock
CloseHandle
InterlockedExchange
MapViewOfFile
GetACP
LocalAlloc
FreeEnvironmentStringsW
MoveFileA
FindResourceW
GetDateFormatW
TlsAlloc
FormatMessageA
LocalSize
VirtualProtect
LocalFree
GetSystemTimeAsFileTime
SetLastError
VirtualAlloc
GetTimeFormatW
GetLocaleInfoA
LockFile
GetModuleHandleA
CreateFileMappingW
LockResource
GetLastError
GlobalUnlock
GlobalLock
CreateMutexA
GetCurrentThreadId
GetFileAttributesW
GetStartupInfoA
LocalUnlock
WaitForSingleObject
FindClose
lstrcpynW
DeleteFileW
GetFileType
GetFullPathNameW
LoadLibraryExW
FreeLibrary
InterlockedIncrement
SizeofResource
GetFileInformationByHandle
DisableThreadLibraryCalls
FormatMessageW
GetEnvironmentVariableA
LeaveCriticalSection
GetCommandLineW
GetUserDefaultUILanguage
FoldStringW
TerminateProcess
CompareStringW
WriteFile
HeapReAlloc
InterlockedCompareExchange
LoadResource
GetUserDefaultLCID
lstrlenW
lstrcatW
GetCurrentThread
UnhandledExceptionFilter
GetProcessHeap
lstrcmpW
GetEnvironmentStrings
GetModuleHandleW
GetVersionExA
ExitProcess
OpenMutexA
OpenProcess
GetFileSize
FindFirstFileW
MultiByteToWideChar
GetConsoleMode
GetVersion
GetSystemInfo
SetStdHandle
SetEndOfFile
FindNextFileW
InitializeCriticalSection
GetLocaleInfoW
HeapCreate
GetThreadLocale
GetModuleFileNameA
lstrcmpiA
CreateFileA
GetStringTypeA
UnmapViewOfFile
GetCommandLineA
FindResourceA
DeleteFileA
MulDiv
WritePrivateProfileStringA
LCMapStringA
GetTickCount
GetCurrentProcessId
GetLocalTime
GlobalFree
LCMapStringW
SetUnhandledExceptionFilter
SetFilePointer
GetCurrentProcess
HeapAlloc
CreateThread
RaiseException
user32
MapWindowPoints
EnableWindow
GetSystemMenu
SetWinEventHook
SendDlgItemMessageW
PeekMessageW
SetWindowLongW
WinHelpW
IsChild
ScreenToClient
CheckMenuItem
OpenClipboard
GetSubMenu
ChildWindowFromPoint
GetClientRect
CreateWindowExW
DestroyMenu
CloseClipboard
GetDesktopWindow
KillTimer
IsIconic
PostMessageW
CharNextW
SetTimer
CreateDialogParamW
SetWindowTextW
ReleaseDC
SetFocus
PostQuitMessage
PostMessageA
GetMenu
LoadImageW
MessageBoxW
GetDlgItemTextW
ShowWindow
GetWindowTextW
CharUpperW
EnableMenuItem
LoadIconA
CharLowerW
DialogBoxParamW
LoadIconW
RegisterWindowMessageW
LoadBitmapA
DrawTextExW
MessageBeep
SendMessageW
GetFocus
GetForegroundWindow
TranslateMessage
GetCursorPos
EndDialog
GetDC
UpdateWindow
GetDlgItem
GetWindowPlacement
RegisterClassExW
GetMenuState
GetSysColor
IsClipboardFormatAvailable
InvalidateRect
GetScrollInfo
IsDialogMessageW
SetScrollPos
GetDlgCtrlID
SetWindowPlacement
DeleteMenu
DefWindowProcW
GetKeyboardLayout
LoadStringW
UnhookWinEvent
GetSystemMetrics
GetWindowLongW
wsprintfW
GetParent
DispatchMessageW
UnionRect
TranslateAcceleratorW
LoadCursorW
SetDlgItemTextW
GetClassNameA
GetMessageW
SetActiveWindow
SetCursor
LoadAcceleratorsW
MoveWindow
CreateWindowExA
DestroyWindow
msvcrt
_wtol
__p__fmode
wcsncmp
fclose
__set_app_type
wcsncpy
_initterm
_adjust_fdiv
_XcptFilter
realloc
_purecall
exit
_cexit
_exit
_stricmp
_controlfp
_c_exit
_snwprintf
__getmainargs
wcschr
localtime
_acmdln
_amsg_exit
__p__commode
memcpy
__setusermatherr
fprintf
time
iswctype
_lock
comdlg32
FindTextW
GetFileTitleW
GetSaveFileNameW
GetOpenFileNameW
PageSetupDlgW
CommDlgExtendedError
ChooseFontW
ReplaceTextW
PrintDlgExW
gdi32
DeleteDC
SetViewportExtEx
AbortDoc
EnumFontsW
GetTextMetricsW
GetDeviceCaps
CreateDCW
SetBkMode
LPtoDP
SetWindowExtEx
StartPage
SetMapMode
GetObjectW
DeleteObject
EndPage
StartDocW
EndDoc
GetTextFaceW
SetAbortProc
GetTextExtentPoint32W
GetStockObject
SelectObject
CreateFontIndirectW
TextOutW
shell32
DragAcceptFiles
ShellAboutW
DragFinish
DragQueryFileW
advapi32
RegQueryValueExA
RegSetValueExW
RegCreateKeyW
RegOpenKeyExA
RegCloseKey
IsTextUnicode
RegQueryValueExW
comctl32
CreateStatusWindowW
winspool.drv
ClosePrinter
GetPrinterDriverW
OpenPrinterW
Sections
.text Size: 1024B - Virtual size: 957B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ