Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20221111-en
General
-
Target
tmp
-
Size
1.5MB
-
MD5
4f7e2f5b0f669599e43463b70fb514ad
-
SHA1
4c7c247699583ebb70897ca087de13f220d6cf12
-
SHA256
53713a382ac6b8e08023ea10863651eeae777180c52dcd058df59a3f81b76105
-
SHA512
da6aa405c49710f657b0107f49612b77ff64bc7b02fddd2a324b5f52ef4abdd7b9f6f980f5a6f093f022b0f78a2fa98f72d8633d0897312c4faee25fc799e72a
-
SSDEEP
24576:N0f7ScHIWhNv85vxKwugBlnKNFevb1I/Ge4+Z+4voXwOh:IO2IW2v5ugB4EblbHXwOh
Malware Config
Signatures
Files
-
tmp.exe windows x86
ea62cdb3135a5cea186672b2e64a2938
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
VirtualAlloc
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetTimeZoneInformation
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetProcessHeap
HeapQueryInformation
HeapFree
GetFileAttributesExW
CreateProcessW
GetExitCodeProcess
RaiseException
CloseHandle
EnumSystemLocalesW
GetTempFileNameW
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetCurrentThread
SetConsoleCtrlHandler
WriteConsoleW
OutputDebugStringW
GetFileType
ExitProcess
WriteFile
GetStdHandle
GetSystemInfo
HeapValidate
HeapAlloc
GetModuleHandleExW
GetModuleFileNameW
LoadLibraryExW
FreeLibrary
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
HeapSize
HeapReAlloc
HeapDestroy
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
CreateFileW
DeleteFileW
WaitForSingleObject
FileTimeToSystemTime
SystemTimeToFileTime
CompareFileTime
RegisterApplicationRestart
RegisterApplicationRecoveryCallback
ApplicationRecoveryFinished
Sleep
ApplicationRecoveryInProgress
QueryPerformanceCounter
IsProcessorFeaturePresent
GetCurrentProcess
SetUnhandledExceptionFilter
GetCPInfo
GetUserDefaultLCID
CompareStringW
GetStringTypeW
GetLocaleInfoW
LCMapStringW
MultiByteToWideChar
DecodePointer
EncodePointer
GetProcAddress
GetModuleHandleW
GetTickCount
TlsFree
SetEndOfFile
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
FormatMessageW
GetLastError
user32
AppendMenuW
RemoveMenu
GetSubMenu
GetWindowLongW
InsertMenuItemW
SetWindowLongW
IsWindowEnabled
PostMessageW
CharNextA
DrawMenuBar
EmptyClipboard
CloseClipboard
GetClipboardData
OpenClipboard
GetMenuState
IsClipboardFormatAvailable
DefWindowProcW
InvalidateRect
PostQuitMessage
GetFocus
DispatchMessageW
GetDlgItem
GetWindowRect
SetWindowPos
SendMessageW
SetMenuItemInfoW
GetClassLongW
SetClassLongW
SetClipboardData
UnregisterClassA
LoadCursorW
MessageBoxA
DialogBoxParamW
SystemParametersInfoW
MessageBeep
CreateWindowExW
CheckMenuRadioItem
FillRect
SetCursor
LoadImageW
GetWindowPlacement
ShowWindow
GetClientRect
GetParent
SetWindowTextW
LoadStringW
SetFocus
EnableWindow
GetWindowTextW
GetWindowTextLengthW
LoadAcceleratorsW
IsDialogMessageW
GetKeyState
GetSysColor
gdi32
GetRgnBox
GetDeviceCaps
CreateCompatibleDC
CreateFontIndirectW
GetTextExtentPointW
DeleteDC
DeleteObject
CreateDIBSection
EqualRgn
advapi32
RegOpenKeyExW
RegDeleteKeyW
RegEnumValueW
RegGetValueW
RegQueryInfoKeyW
RegEnumKeyExW
shell32
SHGetSpecialFolderPathW
ShellAboutW
ShellExecuteExW
SHGetFolderPathW
comctl32
ImageList_LoadImageW
gdiplus
GdipCreateFromHDC
GdipDrawImageRectI
GdipSetInterpolationMode
GdipSetPageUnit
GdipCreateBitmapFromScan0
GdipDisposeImage
GdipDeleteGraphics
GdipFillRectangleI
GdipCloneImage
GdipDeleteBrush
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipGetImageGraphicsContext
GdipSetSmoothingMode
GdipCloneBitmapAreaI
GdipCreateBitmapFromHBITMAP
GdipCreatePen1
GdipCloneBrush
GdipDrawArcI
GdipDrawLineI
GdipDeletePen
GdipCreateHBITMAPFromBitmap
GdipCreateSolidFill
rpcrt4
I_UuidCreate
UuidCreate
UuidToStringW
RpcStringFreeW
version
GetFileVersionInfoSizeExW
VerQueryValueW
GetFileVersionInfoExW
winmm
timeGetTime
Sections
.text Size: 939KB - Virtual size: 939KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 567KB - Virtual size: 566KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ