Static task
static1
Behavioral task
behavioral1
Sample
be6e2c118f128c51a40e0bfc6ede87a4e8af71738341a01c6deaa69388a73fcb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
be6e2c118f128c51a40e0bfc6ede87a4e8af71738341a01c6deaa69388a73fcb.exe
Resource
win10v2004-20220812-en
General
-
Target
be6e2c118f128c51a40e0bfc6ede87a4e8af71738341a01c6deaa69388a73fcb
-
Size
3.7MB
-
MD5
2b6607defc83636dc6df9a48f03d88bb
-
SHA1
6998031fc984c66195c948cc6ac0627c8dc54e58
-
SHA256
be6e2c118f128c51a40e0bfc6ede87a4e8af71738341a01c6deaa69388a73fcb
-
SHA512
53a6e88f0e5907d090eeff1dbb1f375245b0fc22a2127cf8a939112dc12ad09e9aaf5e238869f833c317e4e9ddfe4ed94f1fccd53a35f7c3e1a4d1237a5325d4
-
SSDEEP
98304:oG3sj2ZNFs8dKCHZbcrJKwMor1Q2hLoIcNA5Gq:33sj2PJtY1Kwdr1Q2hUNAAq
Malware Config
Signatures
Files
-
be6e2c118f128c51a40e0bfc6ede87a4e8af71738341a01c6deaa69388a73fcb.exe windows x86
32b759146666e62d7707871bf5264bcb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileTime
GetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
lstrcpyA
lstrlenA
SystemTimeToFileTime
ReadFile
SetFilePointer
GetCurrentProcessId
InterlockedDecrement
VirtualAlloc
VirtualProtect
VirtualFree
ExitProcess
GetTickCount
Sleep
lstrcatA
DeleteFileA
WriteFile
MulDiv
GlobalSize
GlobalLock
GlobalUnlock
SetLastError
MultiByteToWideChar
lstrlenW
LocalFree
FormatMessageA
GlobalAlloc
CopyFileA
GlobalFree
GetModuleFileNameW
FreeLibrary
GetVersionExA
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
FreeResource
GetModuleFileNameA
lstrcmpA
MoveFileA
GetStringTypeExA
GetThreadLocale
lstrcmpiA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetFileTime
GetTempFileNameA
GetDiskFreeSpaceA
GetModuleHandleW
InterlockedIncrement
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileSizeEx
SetErrorMode
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
VirtualQuery
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetConsoleCP
GetConsoleMode
HeapCreate
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetProcAddress
GetModuleHandleA
LoadLibraryA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetSystemInfo
FlushViewOfFile
FindFirstFileA
FindClose
GetTickCount64
GetFileSize
CreateFileA
CreateFileMappingA
GetLastError
MapViewOfFile
UnmapViewOfFile
CloseHandle
user32
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
GetActiveWindow
GetDesktopWindow
GetWindowThreadProcessId
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
BringWindowToTop
TranslateMDISysAccel
TranslateAcceleratorA
RedrawWindow
SetRectEmpty
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
DestroyMenu
ReuseDDElParam
UnpackDDElParam
CharUpperA
IsZoomed
IsRectEmpty
DeleteMenu
GetSystemMenu
SetParent
GetMessageA
WaitMessage
PostQuitMessage
ValidateRect
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
DrawIcon
SetWindowRgn
GetMenuItemInfoA
DestroyCursor
GetSysColorBrush
UnregisterClassA
GetDCEx
DestroyIcon
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
CreateMenu
PostThreadMessageA
GetTabbedTextExtentA
RegisterClipboardFormatA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
SetForegroundWindow
ShowScrollBar
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
GetDlgCtrlID
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
EndPaint
BeginPaint
GetWindowDC
UnhookWindowsHookEx
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
LoadBitmapA
EnableWindow
IsWindowEnabled
GetMenuCheckMarkDimensions
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendMessageA
GetKeyState
GetSysColor
SetRect
InflateRect
OffsetRect
IntersectRect
FillRect
InvertRect
DrawEdge
PostMessageA
wsprintfA
WindowFromPoint
ClientToScreen
PtInRect
LoadMenuA
GetSubMenu
UpdateWindow
EnumWindows
IsWindowVisible
LockWindowUpdate
SetMenuItemBitmaps
GetForegroundWindow
GetClientRect
ScreenToClient
GetDC
ReleaseDC
InvalidateRect
SetTimer
KillTimer
GetCapture
SetCapture
GetFocus
GetParent
DefWindowProcA
GetClassInfoA
SetCursor
LoadCursorA
IsWindow
IsClipboardFormatAvailable
ReleaseCapture
ClipCursor
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetCursorPos
SystemParametersInfoA
DispatchMessageA
TranslateMessage
GetSystemMetrics
GetScrollPos
gdi32
GetCharWidthA
StretchDIBits
CreateEllipticRgn
LPtoDP
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
Ellipse
GetViewportOrgEx
GetBkColor
GetTextColor
GetRgnBox
GetNearestColor
PatBlt
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetTextExtentPointA
GetWindowOrgEx
GetBkMode
GetMapMode
CombineRgn
SetRectRgn
CreateRectRgnIndirect
SetAbortProc
DPtoLP
CreatePolygonRgn
Escape
CreateDCA
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextColor
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
CreateSolidBrush
GetStockObject
PtInRegion
CopyMetaFileA
CreatePalette
DeleteObject
CreateCompatibleDC
SelectObject
StretchBlt
RealizePalette
SelectPalette
CreateDIBSection
CreatePen
CreateFontIndirectA
CreateFontA
GetObjectA
CreateCompatibleBitmap
GetDeviceCaps
Rectangle
BitBlt
GetTextExtentPoint32A
GetTextMetricsA
StartDocA
StartPage
EndPage
AbortDoc
EndDoc
GetCurrentObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
CreateBitmap
advapi32
RegSetValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
shell32
SHGetFileInfoA
DragQueryFileA
DragFinish
ShellExecuteA
ExtractIconA
ole32
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleGetClipboard
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoUninitialize
CoCreateInstance
CoInitializeEx
OleDestroyMenuDescriptor
oleaut32
VariantClear
SysFreeString
SysAllocString
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
shlwapi
PathRemoveFileSpecW
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
oledlg
ord8
oleacc
LresultFromObject
CreateStdAccessibleObject
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
GetJobA
comdlg32
GetFileTitleA
Sections
.text Size: 474KB - Virtual size: 474KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ