Static task
static1
Behavioral task
behavioral1
Sample
cd2ac9a81d428cb770f993ddd5d373d472ec996132e91d1368f33e4809923728.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cd2ac9a81d428cb770f993ddd5d373d472ec996132e91d1368f33e4809923728.exe
Resource
win10v2004-20221111-en
General
-
Target
cd2ac9a81d428cb770f993ddd5d373d472ec996132e91d1368f33e4809923728
-
Size
860KB
-
MD5
1400278db66d7317fcea127c32b12444
-
SHA1
f0b87bfa0aedba9925e7bab3c446d93aad51cd61
-
SHA256
cd2ac9a81d428cb770f993ddd5d373d472ec996132e91d1368f33e4809923728
-
SHA512
f9f86043af937fedd57b2494f157e25a3eeac4d9aa847f71c6978037d31903d0b94ac523e5c4526a24ca87428d43fd03afcc472888ea1bb6a6a793dd024c49ee
-
SSDEEP
12288:S07Zv9J2MWM6HCLEmV/HgUd4JWpSTsX86bTlYdjry:R6MWeEmV/ASOWpbTTlOG
Malware Config
Signatures
Files
-
cd2ac9a81d428cb770f993ddd5d373d472ec996132e91d1368f33e4809923728.exe windows x86
828c53bc7b27954454a63ae3ddec737d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetIpNetTable
DeleteIpNetEntry
configuremodule
ConfigMoudle_UnInit
ConfigMoudle_Init
ConfigMoudle_languageInit
ConfigMoudle_Refush
ConfigMoudle_MoveWindow
ConfigMoudle_SetCallback
playsdkmodule
ord82
ord67
ord37
ord33
ord17
ord18
ord19
ord4
ord41
ord40
ord16
ord50
ord26
ord39
ord3
kernel32
SuspendThread
CreateEventA
GetModuleFileNameW
InterlockedDecrement
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GlobalFlags
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
GetCPInfo
GetOEMCP
GetAtomNameA
SystemTimeToFileTime
SetErrorMode
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileAttributesA
GetFileTime
GetCurrentDirectoryA
RtlUnwind
RaiseException
TerminateProcess
SetEvent
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapAlloc
HeapFree
HeapReAlloc
GetSystemTimeAsFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitProcess
ExitThread
HeapSize
GetACP
IsValidCodePage
FatalAppExitA
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
SetHandleCount
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
LCMapStringA
LCMapStringW
SetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
DebugBreak
SetConsoleCtrlHandler
GetDriveTypeA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetExitCodeProcess
CreateProcessA
GetLocaleInfoW
SetCurrentDirectoryA
SetEnvironmentVariableA
WaitForSingleObject
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
CreateFileA
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
MoveFileA
CopyFileA
GlobalSize
GlobalAlloc
FormatMessageA
LocalFree
MulDiv
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
LoadLibraryA
SetLastError
lstrcmpW
GetModuleHandleA
GetProcAddress
GetVersionExA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
OutputDebugStringA
CreateDirectoryA
DeleteFileA
CloseHandle
DeleteCriticalSection
WritePrivateProfileStringA
CreateThread
GetPrivateProfileIntA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
GetLastError
lstrlenA
lstrcmpiA
lstrcmpiW
GetStringTypeExA
GetStringTypeExW
lstrlenW
CompareStringA
CompareStringW
GetEnvironmentVariableA
MultiByteToWideChar
InterlockedExchange
GetVersion
GetEnvironmentVariableW
GetCurrentProcessId
GetTickCount
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
GetLocalTime
GetPrivateProfileStringA
Sleep
UnhandledExceptionFilter
InterlockedCompareExchange
user32
DeleteMenu
DestroyMenu
GetMenuItemInfoA
InflateRect
LoadCursorA
GetSysColorBrush
GetDialogBaseUnits
MapVirtualKeyA
GetKeyNameTextA
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
GetWindowThreadProcessId
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ScrollWindowEx
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
WindowFromPoint
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
LoadAcceleratorsA
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetMenu
PostMessageA
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
CopyRect
GetScrollInfo
SetScrollInfo
PtInRect
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
LockWindowUpdate
GetDCEx
PostThreadMessageA
UnionRect
SetParent
GetSystemMenu
RegisterClipboardFormatA
UnpackDDElParam
ReuseDDElParam
GetCapture
LoadMenuA
CallWindowProcA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
LoadIconA
SetCapture
IsWindowVisible
GetWindowRect
IsIconic
DrawIcon
SetRect
PostQuitMessage
ReleaseCapture
LoadCursorFromFileA
SetCursor
GetSystemMetrics
CharUpperA
CharUpperW
CharLowerA
CharLowerW
FillRect
GetWindow
SendMessageA
EnableWindow
KillTimer
SetTimer
InvalidateRect
GetClientRect
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorA
UnregisterClassA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableA
CharNextA
DestroyIcon
MapWindowPoints
WaitMessage
GetTopWindow
gdi32
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
ExcludeClipRect
IntersectClipRect
ExtCreatePen
CreateHatchBrush
GetDeviceCaps
CopyMetaFileA
CreateDCA
CreateRectRgnIndirect
PatBlt
GetObjectA
GetTextMetricsA
CreateFontIndirectA
SetRectRgn
SetStretchBltMode
GetMapMode
DPtoLP
GetBkColor
GetTextColor
GetRgnBox
CreateCompatibleBitmap
GetCharWidthA
CreateFontA
StretchDIBits
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
GetStockObject
SetBkColor
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CombineRgn
CreateBitmap
GetClipBox
GetDCOrgEx
GetTextExtentPoint32A
CreateSolidBrush
CreateCompatibleDC
CreatePatternBrush
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
DeleteObject
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
CreatePen
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegSetValueA
RegCloseKey
RegCreateKeyA
shell32
SHGetFileInfoA
ExtractIconA
DragFinish
DragQueryFileA
ShellExecuteA
shlwapi
PathIsUNCA
PathFindExtensionA
PathRemoveExtensionA
PathStripToRootA
PathFindFileNameA
oledlg
ord8
ole32
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
CoTaskMemAlloc
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
OleDuplicateData
CLSIDFromProgID
CLSIDFromString
CoDisconnectObject
CoCreateInstance
StringFromGUID2
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleRun
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal
ReadFmtUserTypeStg
oleaut32
SysAllocString
OleCreateFontIndirect
VarBstrFromDate
VarCyFromStr
VarDecFromStr
VarBstrFromDec
LoadTypeLi
VarDateFromStr
SysReAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
VarBstrFromCy
SafeArrayLock
netsdkmodule
ord9
ord8
ord12
ord34
ord37
ord32
ord2
ord1
ord7
ord39
ord40
ord38
ord6
ord18
ord15
ord14
ord17
ord5
ord36
ord11
ord45
ord59
ord13
ord3
ord10
ord35
ws2_32
WSASocketA
setsockopt
closesocket
sendto
htons
WSAStartup
gethostbyname
inet_ntoa
WSAGetLastError
inet_addr
WSACleanup
recvfrom
getprotobyname
Sections
.text Size: 660KB - Virtual size: 658KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 148KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 32.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ