Static task
static1
Behavioral task
behavioral1
Sample
2d0c6c7efd40376f2e4ee275552fb4cf1aa17b0d36251f7ccb915972c4dead18.exe
Resource
win7-20220812-en
General
-
Target
2d0c6c7efd40376f2e4ee275552fb4cf1aa17b0d36251f7ccb915972c4dead18
-
Size
2.2MB
-
MD5
2d9a22d2193f31dac18be7929bee4cac
-
SHA1
f717f477f4c6fb113c040ddf6e9a2c59a6dbf7db
-
SHA256
2d0c6c7efd40376f2e4ee275552fb4cf1aa17b0d36251f7ccb915972c4dead18
-
SHA512
7a051a72efab6a744982eac602252f4aa1d727bfdcfc62c1bf7320f2dd55096029f62095900ccc8d2ef330dc047e1a7b9a6224aefbb77bfe1772f055befd5c11
-
SSDEEP
24576:jWGN5yiEIxFkngFqedvmKlJ9LQLZjCDuzcVgpPnbsV2GlSpbRrSnYPVtrko:jHIsxFkngFqe9mKlJpQVjO4xb7D8kdB
Malware Config
Signatures
Files
-
2d0c6c7efd40376f2e4ee275552fb4cf1aa17b0d36251f7ccb915972c4dead18.exe windows x86
5f7301b30770affb0457f49e62ea0188
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileTime
GetFileAttributesA
CreateDirectoryA
FreeLibrary
GlobalAlloc
lstrcmpA
GlobalLock
InterlockedExchange
CompareStringA
GetLocaleInfoA
GetModuleFileNameA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
GlobalAddAtomA
GetCurrentProcessId
MultiByteToWideChar
FreeResource
GlobalFree
GlobalUnlock
MulDiv
LocalFree
FormatMessageA
LocalFileTimeToFileTime
GetModuleFileNameW
InterlockedDecrement
GetVersionExA
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
WritePrivateProfileStringA
GlobalFlags
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
FlushFileBuffers
SetEndOfFile
GetCurrentProcess
GetModuleHandleW
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
ExitProcess
HeapReAlloc
VirtualAlloc
HeapSize
SetHandleCount
GetStdHandle
GetFileType
HeapCreate
VirtualFree
GetACP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
lstrlenA
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
SetFilePointer
Sleep
FlushViewOfFile
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetSystemInfo
GetModuleHandleA
LoadLibraryA
GetProcAddress
SetLastError
TerminateThread
WaitForSingleObject
GetTickCount
CreateThread
LoadResource
LockResource
SizeofResource
FindResourceA
WideCharToMultiByte
lstrcatA
FindFirstFileA
GetLastError
lstrcpyA
SetFileAttributesA
RemoveDirectoryA
FindNextFileA
FindClose
DeleteFileA
CreateFileA
WriteFile
CloseHandle
user32
RegisterWindowMessageA
IsDialogMessageA
SetWindowTextA
ShowWindow
DestroyMenu
LoadCursorA
GetSysColorBrush
UnregisterClassA
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetMenu
SetForegroundWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetPropA
UnhookWindowsHookEx
LoadIconA
GetMenuItemCount
EndPaint
BeginPaint
ReleaseDC
GetDC
SetWindowPos
WindowFromPoint
ScreenToClient
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
LoadBitmapA
SendMessageA
AppendMenuA
GetSystemMenu
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
PostQuitMessage
RemovePropA
SetFocus
SetCapture
UpdateWindow
InvalidateRect
ReleaseCapture
SendDlgItemMessageA
WinHelpA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetSubMenu
ClientToScreen
LoadMenuA
PostMessageA
FlashWindow
EnableWindow
DrawIcon
OffsetRect
FillRect
GetSysColor
CopyRect
PtInRect
GetClientRect
GetCapture
GetActiveWindow
SetWindowLongA
GetWindowLongA
GetParent
SetRect
TabbedTextOutA
GetClassLongA
GetClassNameA
GetMenuItemID
SetPropA
GetWindow
wsprintfA
GrayStringA
DrawTextExA
DrawTextA
DestroyWindow
gdi32
ScaleWindowExtEx
SetWindowExtEx
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetTextColor
SetMapMode
GetClipBox
LineTo
MoveToEx
DeleteObject
GetObjectA
SelectObject
BitBlt
CreateCompatibleDC
CreateSolidBrush
CreateCompatibleBitmap
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreatePen
GetStockObject
GetDeviceCaps
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
DeleteDC
CreateBitmap
shell32
ShellExecuteA
shlwapi
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
wininet
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
oleacc
LresultFromObject
CreateStdAccessibleObject
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ole32
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitializeEx
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 277KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ