Static task
static1
Behavioral task
behavioral1
Sample
ecb657a788a955ddd3388d89fc27ebe0aa987d9c3bf3e48cab340da30ca26c7b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ecb657a788a955ddd3388d89fc27ebe0aa987d9c3bf3e48cab340da30ca26c7b.exe
Resource
win10v2004-20221111-en
General
-
Target
ecb657a788a955ddd3388d89fc27ebe0aa987d9c3bf3e48cab340da30ca26c7b
-
Size
2.0MB
-
MD5
0cf483f6a8c00591994bdad355913c7a
-
SHA1
98a49859880586c4067769c48ac52f952e584185
-
SHA256
ecb657a788a955ddd3388d89fc27ebe0aa987d9c3bf3e48cab340da30ca26c7b
-
SHA512
7478f8bb6cc0886e25b549489d8e75deb471604fdd3e19c50d4abd2ae87e8cff03703cfada28813907f1acbf7d8561f256b4860b2d5ea174940284166ce412a2
-
SSDEEP
24576:sMqsNlOzAICbVjbebzz3SWoiGuY74mpZWuKeQSUYWZxG92TrLt1JsIsyxVF6V8/b:jiABiOuu4MjKZJxG92T/7zo8
Malware Config
Signatures
Files
-
ecb657a788a955ddd3388d89fc27ebe0aa987d9c3bf3e48cab340da30ca26c7b.exe windows x86
46e32855dc0cf1c4d4a935d47574cad7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
kernel32
CreateSemaphoreW
ReleaseSemaphore
GetStringTypeExW
WideCharToMultiByte
IsBadReadPtr
GetLocalTime
SystemTimeToFileTime
FileTimeToSystemTime
GetFileTime
GetSystemTime
GetFileSize
ReadFile
SetFilePointer
WriteFile
FlushFileBuffers
VirtualAlloc
VirtualFree
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapSize
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
HeapCreate
HeapDestroy
GetModuleFileNameA
CreateFileMappingW
GetTickCount
QueryPerformanceCounter
VirtualQuery
VirtualProtect
GetCPInfo
GetStartupInfoW
CreateThread
ExitThread
TerminateProcess
GetModuleHandleA
HeapReAlloc
RtlUnwind
ExitProcess
InterlockedCompareExchange
LoadLibraryA
LCMapStringW
LCMapStringA
GetUserDefaultLCID
GetVersionExA
MapViewOfFile
UnmapViewOfFile
CreateFileW
GetSystemInfo
MoveFileW
FindNextFileW
CopyFileW
IsBadWritePtr
Sleep
CreateEventW
GlobalSize
GetTempFileNameW
DeleteFileW
SetErrorMode
GetFileAttributesW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
GetStringTypeA
GetStringTypeW
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadCodePtr
GetOEMCP
SetStdHandle
CompareStringA
SetEvent
ResetEvent
ResumeThread
GetExitCodeThread
CompareStringW
lstrcpynA
GlobalHandle
GlobalFree
LoadLibraryW
SetEnvironmentVariableA
CreateFileA
GetLocaleInfoW
GetProcAddress
GetCurrentProcessId
LockResource
lstrcatW
GetTempPathW
GetCurrentDirectoryW
lstrlenA
FindFirstFileW
GetFullPathNameW
SetLastError
FindClose
lstrcpynW
lstrcmpiW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetModuleHandleW
GetModuleFileNameW
lstrcmpW
MulDiv
lstrcpyW
GlobalAlloc
GlobalLock
GlobalUnlock
InterlockedIncrement
ReleaseMutex
GetCurrentThreadId
GetLastError
GetEnvironmentStringsW
CreateMutexW
WaitForSingleObject
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
SetEndOfFile
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
user32
IsDlgButtonChecked
CreateDialogParamW
DialogBoxIndirectParamW
KillTimer
SetTimer
GetAsyncKeyState
PtInRect
TrackPopupMenuEx
ModifyMenuW
DrawFrameControl
InflateRect
GetMenuItemID
CallNextHookEx
SetWindowsHookExW
GetKeyState
CharLowerW
UnhookWindowsHookEx
SetRectEmpty
GetSystemMetrics
GetWindowDC
GetSysColorBrush
FrameRect
GetMessagePos
WindowFromPoint
ScreenToClient
MessageBeep
GetWindowThreadProcessId
IsWindowVisible
GetForegroundWindow
SystemParametersInfoW
GetActiveWindow
SetRect
DrawTextW
OffsetRect
GetDlgCtrlID
GetNextDlgTabItem
PostQuitMessage
DialogBoxParamW
SendDlgItemMessageW
EndDialog
GetMenuItemInfoW
GetSubMenu
TrackPopupMenu
CheckMenuRadioItem
EnableMenuItem
AppendMenuW
DeleteMenu
MonitorFromPoint
GetMonitorInfoW
SetMenuItemInfoW
GetMenuItemCount
LoadBitmapW
DestroyMenu
IsRectEmpty
CopyRect
LoadStringA
RemoveMenu
CreatePopupMenu
IsIconic
IntersectRect
SetMenuDefaultItem
GetCursorPos
SetDlgItemTextW
GetCapture
DrawFocusRect
AdjustWindowRectEx
EnableWindow
SetCursor
GetWindowRect
GetMenuStringW
TranslateAcceleratorW
InsertMenuW
IsMenu
UpdateWindow
MapWindowPoints
GetWindowPlacement
IsZoomed
SetMenu
GetMenu
PostMessageW
wsprintfW
FindWindowW
SetForegroundWindow
LoadMenuW
MessageBoxA
ScrollDC
GetClipboardData
OpenClipboard
CloseClipboard
IsClipboardFormatAvailable
MoveWindow
FindWindowExW
CharUpperW
ClientToScreen
DestroyCursor
DrawIconEx
EqualRect
UnionRect
IsDialogMessageW
MapDialogRect
SetWindowContextHelpId
SetDlgItemInt
LoadIconW
DestroyIcon
CheckDlgButton
LoadAcceleratorsW
CreateAcceleratorTableW
CharNextW
GetParent
GetClassNameW
SetWindowPos
RedrawWindow
GetDlgItem
SendMessageW
SetFocus
GetFocus
IsChild
DestroyAcceleratorTable
BeginPaint
EndPaint
CallWindowProcW
GetDesktopWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
GetClientRect
FillRect
SetCapture
ReleaseCapture
GetSysColor
CreateWindowExW
LoadImageW
DestroyWindow
RegisterWindowMessageW
GetClassInfoExW
LoadCursorW
RegisterClassExW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
MessageBoxW
DefWindowProcW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
LoadStringW
IsWindow
GetWindow
IsWindowEnabled
ShowWindow
GetWindowLongW
SetWindowLongW
wvsprintfW
UnregisterClassW
DrawEdge
gdi32
SetPixel
GetPixel
ExcludeClipRect
Rectangle
MoveToEx
TextOutW
CreatePen
LineTo
SaveDC
RestoreDC
Polyline
GetTextExtentPoint32W
PatBlt
RectVisible
StretchBlt
SetStretchBltMode
SetMapMode
Ellipse
SetDIBColorTable
GdiFlush
PlgBlt
IntersectClipRect
SelectClipRgn
SetViewportOrgEx
EnumFontFamiliesW
CreateBitmap
CreatePatternBrush
SetBrushOrgEx
CreateFontIndirectW
SetBkColor
ExtTextOutW
SetTextColor
SetBkMode
GetCurrentObject
CreateDIBSection
CreateFontW
CreateSolidBrush
GetStockObject
GetObjectW
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject
SetTextCharacterExtra
DeleteObject
comdlg32
GetSaveFileNameW
ChooseColorW
GetOpenFileNameW
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegDeleteKeyW
shell32
SHGetPathFromIDListW
SHGetSpecialFolderLocation
DragQueryFileW
SHGetFileInfoW
DragFinish
DragAcceptFiles
ShellExecuteW
SHGetFolderPathW
SHBrowseForFolderW
SHBindToParent
SHGetDesktopFolder
SHCreateDirectoryExW
ole32
CLSIDFromProgID
CoGetClassObject
OleLockRunning
CoTaskMemAlloc
CLSIDFromString
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
ReleaseStgMedium
DoDragDrop
RevokeDragDrop
RegisterDragDrop
StringFromGUID2
oleaut32
OleCreateFontIndirect
SysAllocStringLen
SysAllocString
SysStringLen
SysStringByteLen
VariantClear
VariantInit
LoadRegTypeLi
LoadTypeLi
OleLoadPicture
DispCallFunc
VarUI4FromStr
SysFreeString
shlwapi
PathIsDirectoryW
PathCanonicalizeW
PathAppendW
PathFileExistsW
StrRetToBufW
PathFindNextComponentW
PathIsRootW
PathIsRelativeW
comctl32
ImageList_Destroy
ImageList_GetImageCount
CreateStatusWindowW
InitCommonControlsEx
ord8
ImageList_Create
ImageList_DrawIndirect
ImageList_AddMasked
ImageList_Draw
_TrackMouseEvent
ImageList_SetBkColor
ImageList_GetIconSize
ImageList_Add
ImageList_LoadImageW
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 200KB - Virtual size: 198KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 492KB - Virtual size: 489KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ