Static task
static1
Behavioral task
behavioral1
Sample
85d8822ea120dc87321400d03b527ce14fc308abec3da2d9e6ddff77a810319d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
85d8822ea120dc87321400d03b527ce14fc308abec3da2d9e6ddff77a810319d.exe
Resource
win10v2004-20221111-en
General
-
Target
85d8822ea120dc87321400d03b527ce14fc308abec3da2d9e6ddff77a810319d
-
Size
606KB
-
MD5
3a3dc9cd291a79cbd5874cc787725acf
-
SHA1
5332173fd113dff0a4a7bc90b89ae790a103e512
-
SHA256
85d8822ea120dc87321400d03b527ce14fc308abec3da2d9e6ddff77a810319d
-
SHA512
65fbf39f7b6a974ef8a2bb562d25caba46db9d0027ef6d58ec3a0e7343ae6573c578bc2334bc6434c588d4bee983acc4db8c8ad27c03397246519f060c7efbc4
-
SSDEEP
12288:XnJd3fXNDdbqFGnT+F6eC1KiFbEPz+qQRVKb4J6sWg+nlUI:Xn3vNDdeFGnk6AMKb4JvWdV
Malware Config
Signatures
Files
-
85d8822ea120dc87321400d03b527ce14fc308abec3da2d9e6ddff77a810319d.exe windows x86
5c7a0c0f920aaa2877d90690e0b65cb6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
FormatMessageA
GetModuleFileNameW
InterlockedDecrement
GetVersionExA
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
GlobalFlags
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GetThreadLocale
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
CreateFileA
GetModuleHandleW
FileTimeToSystemTime
GetCPInfo
GetOEMCP
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesA
GetFileSizeEx
GetFileTime
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapAlloc
GetCommandLineA
GetStartupInfoA
RtlUnwind
Sleep
ExitProcess
RaiseException
HeapReAlloc
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
MulDiv
GetCurrentProcessId
SetLastError
GlobalAddAtomA
CloseHandle
GlobalUnlock
WritePrivateProfileStringA
FreeResource
GlobalFree
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
LoadLibraryA
CompareStringA
GlobalLock
lstrcmpA
GlobalAlloc
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTickCount
LockResource
SizeofResource
LoadResource
FindResourceA
GetLastError
WideCharToMultiByte
InterlockedExchange
MultiByteToWideChar
lstrlenA
GetStdHandle
GetCurrentConsoleFontEx
GetSystemTime
GetLocalTime
LeaveCriticalSection
EnterCriticalSection
GetSystemDefaultLangID
GetAtomNameA
lstrcmpiA
user32
GetWindowDC
BeginPaint
EndPaint
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
SetCapture
LoadCursorA
ReleaseCapture
CharNextA
CopyAcceleratorTableA
IsRectEmpty
SetRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
GetSysColorBrush
CharUpperA
UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
ClientToScreen
EqualRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
OffsetRect
IntersectRect
GetWindowPlacement
GetWindowRect
GetSysColor
SystemParametersInfoA
DestroyMenu
CopyRect
UnhookWindowsHookEx
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetDesktopWindow
GetActiveWindow
SetActiveWindow
LoadIconA
GetSystemMenu
AppendMenuA
SendMessageA
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindow
SetWindowContextHelpId
GetParent
MapDialogRect
SetWindowPos
PostQuitMessage
PostMessageA
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
InvalidateRect
GetDC
ReleaseDC
EnableWindow
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
AdjustWindowRectEx
GetClassLongA
gdi32
GetDeviceCaps
ExtTextOutA
GetClipBox
SetTextColor
SetBkColor
SaveDC
RestoreDC
DeleteObject
GetObjectA
DeleteDC
CreateCompatibleDC
CreateDIBSection
StretchBlt
GetDIBColorTable
SelectObject
SetDIBColorTable
SetStretchBltMode
SetMapMode
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
GetStockObject
ExtSelectClipRgn
ScaleWindowExtEx
CreateBitmap
SetWindowExtEx
msimg32
TransparentBlt
AlphaBlend
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameA
PathRemoveFileSpecW
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
gdiplus
GdiplusShutdown
GdipFree
GdipAlloc
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
oleacc
CreateStdAccessibleObject
LresultFromObject
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ole32
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
CoInitializeEx
CoGetClassObject
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoCreateInstance
oleaut32
VariantClear
VariantChangeType
VariantInit
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
SysAllocStringByteLen
VariantCopy
SysStringLen
SysAllocStringLen
SysFreeString
Sections
.text Size: 327KB - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ