Static task
static1
Behavioral task
behavioral1
Sample
af43fd3da393bcdc3206d7bb7e78aca64e1c3cfcdd3e7e9a4569f507bb008e72.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af43fd3da393bcdc3206d7bb7e78aca64e1c3cfcdd3e7e9a4569f507bb008e72.exe
Resource
win10v2004-20220812-en
General
-
Target
af43fd3da393bcdc3206d7bb7e78aca64e1c3cfcdd3e7e9a4569f507bb008e72
-
Size
400KB
-
MD5
2828d1057434c7490d778eb2e0e8b876
-
SHA1
044dc977f24b9fbbd477ebccf800ac2f60d1b2ff
-
SHA256
af43fd3da393bcdc3206d7bb7e78aca64e1c3cfcdd3e7e9a4569f507bb008e72
-
SHA512
f566e183109a69e9cbcd341b26e96b893719d31c593ea308bad705709f48fff7e0ce11e32cf7a37604148ef6c2dc159e534ade4cf09be716b340bf8c6d702ded
-
SSDEEP
6144:fnKis3+y7In25hlIerDv2LdVSX3ArTwH0XSTnE/7Wu:fnw3+ys23lIerD+LnSArTU0XSY
Malware Config
Signatures
Files
-
af43fd3da393bcdc3206d7bb7e78aca64e1c3cfcdd3e7e9a4569f507bb008e72.exe windows x86
e8e6ca2c9c9706a4b08f581ce2c96149
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
RaiseException
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapAlloc
GetProfileStringA
HeapFree
GetCommandLineA
GetStartupInfoA
RtlUnwind
SetErrorMode
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetShortPathNameA
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
DuplicateHandle
GetOEMCP
GetCPInfo
GetProcessVersion
GetCurrentDirectoryA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
FormatMessageA
LocalFree
SetLastError
GetThreadLocale
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
MulDiv
MultiByteToWideChar
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
lstrcpynA
GetFileAttributesA
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
lstrcmpA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
lstrlenA
CreateEventW
GetCurrentThreadId
OpenMutexW
CreateMutexW
ExitProcess
WinExec
GetCommandLineW
GetTickCount
GetSystemDirectoryW
MoveFileExW
GetTempPathW
CreateDirectoryW
CopyFileW
GetCurrentProcess
FindFirstFileW
FindNextFileW
CreateFileW
GetFileSize
ReadFile
CreateToolhelp32Snapshot
Process32FirstW
Sleep
Process32NextW
OpenProcess
CreateFileA
VirtualAlloc
ReadProcessMemory
TerminateProcess
VirtualFree
CloseHandle
GetModuleFileNameW
SetFileAttributesW
DeleteFileW
GetModuleFileNameA
HeapCreate
user32
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
InvalidateRect
PtInRect
FillRect
SetRect
GetDC
LoadCursorA
DestroyCursor
LoadIconA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
MapDialogRect
GetWindow
SetWindowContextHelpId
wsprintfA
SetFocus
ShowWindow
SetWindowPos
ReleaseCapture
KillTimer
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
InflateRect
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
MessageBoxA
SetCursor
MoveWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetSystemMetrics
GetDesktopWindow
ShowOwnedPopups
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
IsWindowVisible
OpenClipboard
EmptyClipboard
CloseClipboard
GetInputState
PostThreadMessageA
GetMessageA
PostMessageA
SendMessageA
wsprintfW
GetClientRect
EnableWindow
SetParent
SetCapture
LockWindowUpdate
GetDCEx
SetWindowLongA
UpdateWindow
FindWindowW
RegisterClipboardFormatA
SetTimer
GetTabbedTextExtentA
FindWindowA
CharUpperA
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
DestroyIcon
LoadStringA
GetSysColorBrush
DeleteMenu
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetClassNameA
GetMenuStringA
InsertMenuA
IsZoomed
CharNextA
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
ModifyMenuA
WindowFromPoint
GetDlgCtrlID
DestroyMenu
ReleaseDC
gdi32
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
GetCharWidthA
CreateFontIndirectA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
StretchDIBits
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
LPtoDP
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
GetMapMode
SetRectRgn
CombineRgn
CreateRectRgnIndirect
BitBlt
GetTextMetricsA
SelectObject
GetTextExtentPoint32A
GetBkColor
GetTextColor
DeleteDC
CreateDCA
SetAbortProc
StartDocA
StartPage
EndPage
EndDoc
AbortDoc
GetViewportOrgEx
CreatePen
DPtoLP
Rectangle
GetStockObject
PatBlt
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
GetTextExtentPointA
CreateBitmap
comdlg32
PrintDlgA
GetFileTitleA
GetSaveFileNameA
CommDlgExtendedError
GetOpenFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
AllocateAndInitializeSid
RegCreateKeyA
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey
CheckTokenMembership
FreeSid
RegDeleteValueW
RegOpenKeyExW
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegSetValueExW
shell32
DragFinish
ExtractIconA
SHGetSpecialFolderPathW
ShellExecuteW
SHGetFileInfoA
DragQueryFileA
comctl32
ord17
oledlg
ord8
ole32
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
olepro32
ord253
oleaut32
SysAllocStringLen
VariantChangeType
VariantClear
SysAllocString
VariantTimeToSystemTime
VariantCopy
SysStringLen
SysAllocStringByteLen
SysFreeString
psapi
GetModuleFileNameExW
EnumProcesses
Sections
.text Size: 296KB - Virtual size: 294KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ