Static task
static1
Behavioral task
behavioral1
Sample
77cd9737dcc682f401af88e8731860ceaad705e4917bc963f2ca9efb81c6685b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
77cd9737dcc682f401af88e8731860ceaad705e4917bc963f2ca9efb81c6685b.exe
Resource
win10v2004-20220812-en
General
-
Target
77cd9737dcc682f401af88e8731860ceaad705e4917bc963f2ca9efb81c6685b
-
Size
1.3MB
-
MD5
2002da15fc0693bc3e2bd8c8ceef46dc
-
SHA1
34539bd49279f5a49049c03b432082d0c83029af
-
SHA256
77cd9737dcc682f401af88e8731860ceaad705e4917bc963f2ca9efb81c6685b
-
SHA512
98d3f957177f7b7bf8cd44252fd1ca7cc86fc372d60ceaeff1a9b972657d12bc96c98888b23d58687efc3847d0c078dab4a3ab69a350080b48be34bae6febd2c
-
SSDEEP
24576:sWdoMZwYrF0HPjDdLmAelsEOquRmDJswHMX:EMSYrF0HLD8PhYmlsz
Malware Config
Signatures
Files
-
77cd9737dcc682f401af88e8731860ceaad705e4917bc963f2ca9efb81c6685b.exe windows x86
4f4336c4571286a3860bd42dc7106ffa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSACleanup
gethostbyname
inet_ntoa
WSAStartup
kernel32
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
WritePrivateProfileStringA
GetTickCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
ExitProcess
GetExitCodeProcess
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitThread
GlobalReAlloc
HeapSize
SetStdHandle
GetFileType
GetACP
IsValidCodePage
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTimeZoneInformation
GetDriveTypeA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
TlsGetValue
InterlockedIncrement
GetModuleHandleW
GetFileTime
GetFileSizeEx
SetErrorMode
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryExA
InterlockedExchange
lstrcmpA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
GetVersionExA
FreeLibrary
InterlockedDecrement
GetModuleFileNameW
GetModuleHandleA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
GetProcAddress
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
UnlockFile
LockFile
FlushFileBuffers
LoadLibraryA
SetLastError
MultiByteToWideChar
lstrlenA
GetThreadLocale
GetLastError
SetEndOfFile
GetSystemTime
SystemTimeToFileTime
FileTimeToDosDateTime
MoveFileExA
WriteFile
ReadFile
GetFileSize
SetFilePointer
CreateFileA
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryA
CreateDirectoryA
Sleep
GetTempPathA
CopyFileA
DeleteFileA
GetDiskFreeSpaceExA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
SetFileAttributesA
GetCurrentDirectoryA
GetFileAttributesA
CreateProcessA
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32First
CloseHandle
TerminateProcess
OpenProcess
Process32Next
FindResourceA
WideCharToMultiByte
FindResourceExA
LoadResource
LockResource
SizeofResource
CreateThread
user32
GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
DestroyMenu
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
TranslateAcceleratorA
InvalidateRgn
CopyAcceleratorTableA
InflateRect
UnregisterClassA
GetSysColorBrush
GetDesktopWindow
SetWindowRgn
DrawIcon
IsRectEmpty
ShowOwnedPopups
SetCursor
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
PostQuitMessage
ShowWindow
MoveWindow
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
CreateWindowExA
GetClassInfoExA
GetClassInfoA
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
GetDlgCtrlID
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
IsIconic
GetWindowPlacement
GetWindow
IsWindow
GetClientRect
GetWindowThreadProcessId
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
TabbedTextOutA
FillRect
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
RegisterClipboardFormatA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetMenuItemInfoA
SetWindowContextHelpId
MapDialogRect
CharNextA
UnpackDDElParam
ReuseDDElParam
GetFocus
LoadMenuA
GetSubMenu
CharUpperA
GetSystemMetrics
GetDC
ReleaseDC
wsprintfA
GetWindowLongA
GetMenu
AdjustWindowRectEx
SetWindowPos
SystemParametersInfoA
MessageBoxA
InvalidateRect
BeginPaint
LoadBitmapA
GetSysColor
DrawTextA
EndPaint
SetCapture
KillTimer
SetTimer
ReleaseCapture
DefWindowProcA
RegisterClassA
LoadIconA
LoadCursorA
UpdateWindow
EnableWindow
GetWindowRect
SendMessageA
PostMessageA
SetRect
GetKeyState
SetWindowTextA
gdi32
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreateBitmap
SelectPalette
GetViewportExtEx
CreateSolidBrush
ScaleViewportExtEx
LPtoDP
Ellipse
CreateRectRgnIndirect
CreateFontIndirectA
GetMapMode
GetRgnBox
CreateCompatibleBitmap
GetBkColor
GetTextColor
GetTextExtentPoint32A
GetObjectA
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
CreateCompatibleDC
SelectObject
BitBlt
DeleteObject
CreateEllipticRgn
DeleteDC
GetClipBox
SetMapMode
SetBkColor
RestoreDC
SaveDC
GetBkMode
SetBkMode
SetTextColor
GetStockObject
CreateDIBitmap
RealizePalette
GetDeviceCaps
CreatePalette
GetWindowExtEx
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
advapi32
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
shell32
ShellExecuteA
DragFinish
DragQueryFileA
shlwapi
PathIsUNCA
PathFindFileNameA
PathFindExtensionA
PathStripToRootA
oledlg
ord8
ole32
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromProgID
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CoTaskMemAlloc
CoTaskMemFree
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
oleaut32
OleCreateFontIndirect
SafeArrayDestroy
VariantCopy
VariantTimeToSystemTime
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantChangeType
SysAllocString
VariantClear
VariantInit
SysAllocStringLen
SysAllocStringByteLen
SysFreeString
SysStringLen
SystemTimeToVariantTime
wininet
InternetQueryDataAvailable
FtpSetCurrentDirectoryA
FtpGetCurrentDirectoryA
InternetFindNextFileA
InternetGetLastResponseInfoA
InternetOpenA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
FtpOpenFileA
FtpFindFirstFileA
InternetConnectA
InternetCloseHandle
Sections
.text Size: 376KB - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 855KB - Virtual size: 855KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ