Static task
static1
Behavioral task
behavioral1
Sample
7310035557047f2ad1179667aafabe823051a773a22f619e63995cb88ae2714b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7310035557047f2ad1179667aafabe823051a773a22f619e63995cb88ae2714b.exe
Resource
win10v2004-20220901-en
General
-
Target
7310035557047f2ad1179667aafabe823051a773a22f619e63995cb88ae2714b
-
Size
518KB
-
MD5
aa9bfd0f74ec6d41282d66b9f4394596
-
SHA1
70cf8ff1c693f7fc250049b1c3b0724413c98cf5
-
SHA256
7310035557047f2ad1179667aafabe823051a773a22f619e63995cb88ae2714b
-
SHA512
3b78e0072768709c5e41cf2ee5a1e96ac83f2319f6f65238b904eb4b91000035c7d65b3b08c9ee61b5324d2d105e57a8c5a79450af57ccf9a171c40e9284eb5f
-
SSDEEP
12288:+/KRRIY7mOKF9j4TcgnzG754wH1Qhcgoz5vQ1zoSNW:+/KRRjK/j4TFy774r6
Malware Config
Signatures
Files
-
7310035557047f2ad1179667aafabe823051a773a22f619e63995cb88ae2714b.exe windows x86
0b202dbbc6a6de4d869daf7b9cbc009a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathFileExistsW
kernel32
GetTempPathW
DosDateTimeToFileTime
LocalFileTimeToFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
WriteFile
MultiByteToWideChar
WideCharToMultiByte
MoveFileExW
FreeLibrary
GetProcAddress
LoadLibraryW
SetFileTime
DecodePointer
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GlobalAlloc
GlobalFree
LocalAlloc
LocalFree
OpenProcess
GetExitCodeProcess
WaitForSingleObject
Sleep
CreateProcessW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GlobalLock
GlobalUnlock
LockResource
LoadResource
FindResourceW
RtlUnwind
EncodePointer
SetLastError
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetFileType
ExitProcess
GetModuleHandleExW
GetStdHandle
GetACP
FindFirstFileExW
SetStdHandle
WriteConsoleW
SetEndOfFile
GetStringTypeW
CompareStringW
LCMapStringW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
OutputDebugStringW
GetTimeZoneInformation
FlushFileBuffers
CopyFileW
GetPrivateProfileStringW
FindNextFileW
FindFirstFileW
DeleteFileW
CreateFileW
RemoveDirectoryW
CreateDirectoryW
WritePrivateProfileStringW
CloseHandle
FindClose
ReadFile
GetFileSize
GetModuleHandleW
GetModuleFileNameW
SizeofResource
user32
SystemParametersInfoW
GetMonitorInfoW
EnumDisplayMonitors
DefWindowProcW
RegisterClassExW
CreateWindowExW
DestroyWindow
MoveWindow
LoadCursorW
FindWindowW
GetDesktopWindow
SetWindowLongW
GetWindowLongW
GetWindowRect
SetWindowTextW
MessageBoxW
SetDlgItemTextW
SetDlgItemInt
GetDlgItem
EndDialog
DialogBoxParamW
SetWindowPos
ShowWindow
gdi32
SelectObject
GetTextExtentPoint32W
DeleteObject
DeleteDC
CreateSolidBrush
CreateICW
CreateFontW
CreateCompatibleDC
CreateDIBSection
duilib32
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
?ShowModal@CWindowWnd@DuiLib@@QAEIXZ
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
??0CDuiString@DuiLib@@QAE@XZ
??0CDuiString@DuiLib@@QAE@PB_WH@Z
??1CDuiString@DuiLib@@QAE@XZ
??BCDuiString@DuiLib@@QBEPB_WXZ
??4CDuiString@DuiLib@@QAEABV01@PB_W@Z
??8CDuiString@DuiLib@@QBE_NPB_W@Z
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
?Close@CWindowWnd@DuiLib@@QAEXI@Z
??0WindowImplBase@DuiLib@@QAE@XZ
??1WindowImplBase@DuiLib@@UAE@XZ
?GetCheck@CCheckBoxUI@DuiLib@@QBE_NXZ
?CreateControl@WindowImplBase@DuiLib@@UAEPAVCControlUI@2@PB_W@Z
?GetClassStyle@WindowImplBase@DuiLib@@UBEIXZ
?GetStyle@WindowImplBase@DuiLib@@UAEJXZ
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
?HandleCustomMessage@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?HandleMessage@WindowImplBase@DuiLib@@UAEJIIJ@Z
?MessageHandler@WindowImplBase@DuiLib@@UAEJIIJAA_N@Z
?Notify@WindowImplBase@DuiLib@@UAEXAAUtagTNotifyUI@2@@Z
?OnChar@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnClose@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnCreate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnDestroy@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnFinalMessage@WindowImplBase@DuiLib@@UAEXPAUHWND__@@@Z
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKillFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonUp@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseHover@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseMove@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseWheel@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcHitTest@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcPaint@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSetFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSysCommand@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?ResponseDefaultKeyEvent@WindowImplBase@DuiLib@@MAEJI@Z
?messageMap@CNotifyPump@DuiLib@@1UDUI_MSGMAP@2@B
advapi32
RegOpenKeyW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RevertToSelf
ImpersonateLoggedOnUser
OpenProcessToken
GetTokenInformation
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
LookupAccountSidW
DuplicateTokenEx
shell32
SHGetFolderPathW
SHGetSpecialFolderPathW
ole32
CreateStreamOnHGlobal
gdiplus
GdipDisposeImage
GdipDrawImageRectRectI
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromStreamICM
GdipAlloc
GdipFree
GdipCloneImage
GdipCreateBitmapFromStream
GdipGetImageWidth
GdipGetImageHeight
Sections
.text Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ