Static task
static1
Behavioral task
behavioral1
Sample
804a221d77c47bfc2097b755a6d1e366ac3536624693d34b6cb6238c4400dc34.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
804a221d77c47bfc2097b755a6d1e366ac3536624693d34b6cb6238c4400dc34.exe
Resource
win10v2004-20220812-en
General
-
Target
804a221d77c47bfc2097b755a6d1e366ac3536624693d34b6cb6238c4400dc34
-
Size
1010KB
-
MD5
38463f5ec2f246b425d4a087bcd9f0a3
-
SHA1
089573e9005b45c176514bb4d1e6e108980940c3
-
SHA256
804a221d77c47bfc2097b755a6d1e366ac3536624693d34b6cb6238c4400dc34
-
SHA512
942cb780171610f0ef938ff207c6e3990d0a2e2864836a0415886ab35524147628520f91329717f92d6dddd4c7b166a2bcd26765101b50afa57b0a3514b881fb
-
SSDEEP
24576:rKcGAhpBkvMUABbDONDS/SnmS78N2ewWt:GcGEDUABO/7y2ewWt
Malware Config
Signatures
Files
-
804a221d77c47bfc2097b755a6d1e366ac3536624693d34b6cb6238c4400dc34.exe windows x86
3314ecf4447bd92ea3de6f0c6e31a9cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileInformationByHandle
GetDriveTypeA
WriteFile
SetFileTime
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
lstrcpyA
lstrlenA
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
SetFilePointer
lstrcatA
DeleteFileA
LoadResource
LockResource
SizeofResource
FindResourceA
WideCharToMultiByte
GetModuleHandleA
LoadLibraryA
GetProcAddress
SetLastError
MulDiv
GlobalSize
GlobalLock
GlobalUnlock
FindFirstFileA
FindClose
GetSystemInfo
GetTickCount64
UnmapViewOfFile
CloseHandle
CreateFileA
FreeResource
GlobalFree
GetVersionExA
lstrcmpW
MultiByteToWideChar
CompareStringA
FreeLibrary
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
GetModuleFileNameA
GetCurrentProcessId
lstrlenW
LocalFree
FormatMessageA
GlobalAlloc
CopyFileA
lstrcmpA
GetModuleFileNameW
InterlockedDecrement
MoveFileA
GetStringTypeExA
GetThreadLocale
lstrcmpiA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
WaitForSingleObject
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetFileTime
GetTempFileNameA
GetDiskFreeSpaceA
GlobalFlags
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GetCPInfo
GetOEMCP
FileTimeToSystemTime
GetModuleHandleW
FileTimeToLocalFileTime
GetFileSizeEx
SetErrorMode
GetTickCount
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
Sleep
ExitProcess
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
HeapReAlloc
VirtualProtect
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
ExitThread
CreateThread
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
SleepEx
VerifyVersionInfoA
VerSetConditionMask
GetSystemDirectoryA
PeekNamedPipe
WaitForMultipleObjects
ExpandEnvironmentStringsA
GetFileSize
GetLastError
user32
RegisterWindowMessageA
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
TabbedTextOutA
DrawTextExA
GrayStringA
GetWindowDC
BeginPaint
EndPaint
GetWindowThreadProcessId
RemoveMenu
InsertMenuA
AppendMenuA
GetMenuStringA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
BringWindowToTop
TranslateMDISysAccel
TranslateAcceleratorA
RedrawWindow
SetRectEmpty
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
DestroyMenu
ReuseDDElParam
UnpackDDElParam
GetClassNameA
GetMessageA
WaitMessage
IsZoomed
IsRectEmpty
DeleteMenu
GetSystemMenu
SetParent
PostQuitMessage
ValidateRect
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
DrawIcon
SetWindowRgn
DestroyCursor
GetMenuItemInfoA
GetSysColorBrush
UnregisterClassA
GetDCEx
DestroyIcon
CharNextA
CopyAcceleratorTableA
LoadIconA
GetNextDlgGroupItem
MessageBeep
CreateMenu
PostThreadMessageA
GetTabbedTextExtentA
RegisterClipboardFormatA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetPropA
GetPropA
RemovePropA
SetFocus
SendMessageA
EnableWindow
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetWindowLongA
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
GetDlgCtrlID
CallWindowProcA
GetMenu
SetWindowLongA
GetMenuItemID
SetWindowPos
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
GetDesktopWindow
GetActiveWindow
GetParent
SetActiveWindow
CreateDialogIndirectParamA
SystemParametersInfoA
GetSysColor
SendDlgItemMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
InvalidateRgn
GetClassLongA
CharUpperA
DestroyWindow
wsprintfA
PtInRect
ClientToScreen
WindowFromPoint
LoadMenuA
GetSubMenu
LoadBitmapA
LockWindowUpdate
IsWindowVisible
GetSystemMetrics
TranslateMessage
DispatchMessageA
DrawEdge
InflateRect
DrawTextA
OffsetRect
SetRect
GetCapture
ReleaseCapture
PostMessageA
SetCapture
DefWindowProcA
GetClassInfoA
IsWindow
IntersectRect
FillRect
InvertRect
ClipCursor
SetTimer
LoadCursorA
SetCursor
IsClipboardFormatAvailable
GetDC
ReleaseDC
GetFocus
InvalidateRect
GetCursorPos
ScreenToClient
GetClientRect
KillTimer
GetKeyState
gdi32
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SelectClipRgn
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetWindowOrgEx
SetBkMode
RestoreDC
SaveDC
CreateBitmap
GetWindowOrgEx
GetTextExtentPointA
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
GetRgnBox
GetTextColor
GetBkColor
GetViewportOrgEx
Ellipse
LPtoDP
CreateEllipticRgn
StretchDIBits
GetCharWidthA
PatBlt
RealizePalette
SelectPalette
StretchBlt
SelectObject
CreateCompatibleDC
CreateDIBSection
CreatePalette
DeleteObject
CreateFontIndirectA
CreatePen
GetTextExtentPoint32A
GetTextMetricsA
GetObjectA
AbortDoc
EndDoc
EndPage
StartPage
GetDeviceCaps
StartDocA
CreateFontA
GetCurrentObject
Rectangle
PtInRegion
CreatePolygonRgn
BitBlt
SetBkColor
SetTextColor
GetClipBox
GetMapMode
CombineRgn
SetRectRgn
CreateRectRgnIndirect
SetAbortProc
DPtoLP
CreateCompatibleBitmap
CreateDCA
CopyMetaFileA
CreateSolidBrush
GetStockObject
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptDestroyKey
CryptEncrypt
CryptImportKey
shell32
DragFinish
DragQueryFileA
SHGetFileInfoA
ShellExecuteA
ExtractIconA
shlwapi
PathRemoveFileSpecW
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFindExtensionA
oledlg
ord8
psapi
EnumProcesses
wininet
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
wldap32
ord22
ord46
ord211
ord143
ord60
ord50
ord26
ord30
ord200
ord32
ord35
ord79
ord301
ord27
ord41
ord33
ws2_32
htonl
ioctlsocket
listen
accept
recvfrom
sendto
getaddrinfo
freeaddrinfo
connect
socket
closesocket
getpeername
getsockopt
htons
bind
ntohs
getsockname
setsockopt
WSAIoctl
send
recv
select
WSAGetLastError
__WSAFDIsSet
WSASetLastError
WSAStartup
WSACleanup
ntohl
gethostname
crypt32
CertFreeCertificateContext
oleacc
LresultFromObject
CreateStdAccessibleObject
winspool.drv
ClosePrinter
DocumentPropertiesA
GetJobA
OpenPrinterA
comdlg32
GetFileTitleA
ole32
ReleaseStgMedium
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoInitializeEx
CoCreateInstance
CoTaskMemFree
CoUninitialize
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleGetClipboard
OleDuplicateData
CoTaskMemAlloc
oleaut32
SysAllocString
OleCreateFontIndirect
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
Sections
.text Size: 753KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ