Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
General
-
Target
tmp
-
Size
5.6MB
-
MD5
60a209b03274411e9c356219143fe1d0
-
SHA1
07e90f6b9127d23a2ec73a631b25f3bd915a7da0
-
SHA256
307a2c71bf97cb6c60a5a636bdd99513c9ecce4b80c632453c8cb2811ee4ee52
-
SHA512
e719d4c7694dbdff5b6b95c7a7aa2d52ea8cce1826e7483da3d8753f637fa71b87e305d5785f7cd9a403f9855a3ed592c41253ad235632a3576aee708058be91
-
SSDEEP
98304:GGUZly/1P+7wHSC9Tat74+7a0WqQfe+ws:GYfSd7UZw
Malware Config
Signatures
Files
-
tmp.exe windows x86
0d6dfa996302765f2eb1c4bdfada3eb6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
SetEvent
WaitForSingleObject
CreateEventW
GetFullPathNameW
GetVolumeInformationW
LockFile
SetEndOfFile
UnlockFile
DuplicateHandle
GetHandleInformation
lstrcmpiW
GlobalFlags
GetCurrentDirectoryW
GetLocaleInfoW
GetUserDefaultUILanguage
GetFileAttributesExW
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
GetTempFileNameW
GetUserDefaultLCID
lstrcpyW
GetTempPathW
ResetEvent
GetTickCount
SearchPathW
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
VirtualQuery
OutputDebugStringW
GetStringTypeW
SwitchToThread
LCMapStringW
GetCPInfo
RtlUnwind
GetModuleFileNameA
GetModuleHandleExW
GlobalFindAtomW
GetSystemInfo
GetStdHandle
GetFileType
WriteConsoleW
MoveFileExW
GetFileInformationByHandle
PeekNamedPipe
GetCommandLineA
GetCommandLineW
CreateThread
ExitThread
FreeLibraryAndExitThread
HeapQueryInformation
VirtualAlloc
QueryPerformanceFrequency
SetStdHandle
ExitProcess
GetACP
GetDateFormatW
GetTimeFormatW
IsValidLocale
EnumSystemLocalesW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
ResumeThread
SetThreadPriority
lstrcmpA
CompareStringW
LoadLibraryA
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetAtomNameW
GlobalGetAtomNameW
GetModuleHandleA
OutputDebugStringA
WideCharToMultiByte
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
GetProfileIntW
GlobalAddAtomW
FreeResource
HeapValidate
EncodePointer
OpenEventW
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
FormatMessageW
LocalFree
GetCurrentThread
VerifyVersionInfoW
LoadLibraryW
FreeLibrary
GetNativeSystemInfo
GetVersionExW
GetComputerNameExW
OpenProcess
GetCurrentThreadId
GetCurrentProcess
GetLogicalDriveStringsW
GetDriveTypeW
ExpandEnvironmentStringsW
GetEnvironmentVariableW
VerSetConditionMask
GetTimeZoneInformation
SystemTimeToFileTime
FileTimeToSystemTime
GetLocalTime
GetSystemTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
GetUserDefaultLangID
MoveFileW
CopyFileW
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
GetModuleHandleW
FindResourceExW
GetWindowsDirectoryW
GetSystemDirectoryW
SetFilePointer
RemoveDirectoryW
ReadFile
GetFileSize
GetFileAttributesW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
DeleteFileW
CreateDirectoryW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
RaiseException
DecodePointer
GetCurrentProcessId
MultiByteToWideChar
SetLastError
GetLastError
CloseHandle
WriteFile
FlushFileBuffers
CreateFileW
Sleep
GetModuleFileNameW
InitializeCriticalSection
SetConsoleCtrlHandler
user32
GetClassNameW
SetWindowsHookExW
CallNextHookEx
SetScrollInfo
GetScrollInfo
WinHelpW
MonitorFromWindow
GetMonitorInfoW
CreateDialogIndirectParamW
EndDialog
GetCursorPos
SetRect
OffsetRect
SetRectEmpty
GetMessageW
ReleaseCapture
SetCursor
InflateRect
GetAsyncKeyState
LoadAcceleratorsW
TranslateAcceleratorW
DestroyMenu
IntersectRect
DestroyIcon
LoadImageW
UnpackDDElParam
ReuseDDElParam
GetKeyNameTextW
MapVirtualKeyW
SystemParametersInfoW
TranslateMessage
CharUpperW
RealChildWindowFromPoint
CopyImage
SendDlgItemMessageA
GetClipboardFormatNameA
GetClipboardFormatNameW
IsRectEmpty
UnionRect
TrackMouseEvent
DrawIconEx
GetIconInfo
MessageBeep
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongW
CloseClipboard
SetClipboardData
EmptyClipboard
SetCursorPos
CopyIcon
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
GetDoubleClickTime
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
DestroyCursor
IsDialogMessageW
SetWindowLongW
SetWindowTextW
SetFocus
GetDlgCtrlID
CheckDlgButton
GetDlgItem
SetWindowPos
MoveWindow
ShowWindow
NotifyWinEvent
LoadIconW
GetWindow
GetTopWindow
SetParent
GetDesktopWindow
WindowFromPoint
MapWindowPoints
ScreenToClient
ClientToScreen
GetWindowRect
DeferWindowPos
EnableScrollBar
GetClassLongW
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
LockWindowUpdate
RedrawWindow
ValidateRect
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRect
EndPaint
BeginPaint
GetWindowDC
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
GetSystemMenu
DrawMenuBar
KillTimer
SetTimer
SetCapture
GetCapture
GetFocus
GetActiveWindow
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
IsZoomed
BringWindowToTop
IsIconic
IsWindowVisible
ShowOwnedPopups
IsChild
PostThreadMessageW
GetWindowTextLengthW
GetWindowTextW
LoadCursorW
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
LoadBitmapW
InvertRect
FrameRect
FillRect
DrawFocusRect
GetSysColorBrush
DrawStateW
GrayStringW
DrawTextExW
DrawTextW
DrawIcon
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
SetMenuItemBitmaps
DeleteMenu
ModifyMenuW
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
LoadMenuW
DrawFrameControl
DrawEdge
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongW
MessageBoxW
IsWindowEnabled
EnableWindow
MapDialogRect
TabbedTextOutW
IsWindow
PostMessageW
SendMessageW
UnhookWindowsHookEx
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
IsMenu
PeekMessageW
PostQuitMessage
ExitWindowsEx
LoadStringW
BeginDeferWindowPos
SetWindowPlacement
PtInRect
GetWindowPlacement
EqualRect
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ScrollWindow
TrackPopupMenu
SetMenu
GetMenu
GetKeyState
ShowScrollBar
EndDeferWindowPos
DestroyWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
DispatchMessageW
RegisterWindowMessageW
GetMenuCheckMarkDimensions
GetClientRect
CopyRect
HideCaret
advapi32
CryptReleaseContext
SetSecurityDescriptorDacl
MakeSelfRelativeSD
InitializeSecurityDescriptor
InitializeAcl
GetLengthSid
AddAccessAllowedAce
QueryServiceStatus
DeleteService
ControlService
IsValidSid
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
OpenThreadToken
SetThreadToken
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
InitiateSystemShutdownExW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptAcquireContextW
StartServiceW
QueryServiceStatusEx
OpenServiceW
OpenSCManagerW
CloseServiceHandle
shell32
DragFinish
SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHBrowseForFolderW
SHAppBarMessage
SHCreateDirectoryExW
SHGetFolderPathW
DragQueryFileW
ole32
CreateStreamOnHGlobal
DoDragDrop
OleGetClipboard
RegisterDragDrop
RevokeDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoInitialize
CoLockObjectExternal
OleRun
CoInitializeEx
CoUninitialize
CoSetProxyBlanket
StringFromGUID2
CoCreateGuid
CoCreateInstance
oleaut32
LoadTypeLi
VarUdateFromDate
VarDateFromStr
VariantTimeToSystemTime
VarBstrCat
SysStringLen
VariantClear
VariantInit
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SysAllocString
VariantCopy
VariantChangeType
VarBstrFromDate
GetErrorInfo
SystemTimeToVariantTime
msimg32
TransparentBlt
AlphaBlend
shlwapi
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
PathRemoveBackslashW
PathIsRootW
PathCombineW
PathFileExistsW
PathIsRelativeA
StrFormatKBSizeW
uxtheme
DrawThemeBackground
GetThemePartSize
CloseThemeData
OpenThemeData
IsThemeBackgroundPartiallyTransparent
IsAppThemed
GetThemeSysColor
GetWindowTheme
GetCurrentThemeName
GetThemeColor
DrawThemeText
DrawThemeParentBackground
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
wintrust
WinVerifyTrust
oleacc
AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject
gdiplus
GdipDrawImageRectI
GdipDrawImageI
GdiplusShutdown
GdipAlloc
GdipFree
GdipSetInterpolationMode
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCreateFromHDC
GdiplusStartup
GdipCreateBitmapFromHBITMAP
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundW
gdi32
SelectObject
SetPaletteEntries
SetPixel
SetPixelV
StretchBlt
SetRectRgn
GetTextMetricsW
CreateDCW
GetDeviceCaps
RoundRect
RealizePalette
Rectangle
RectVisible
PtVisible
PtInRegion
PatBlt
OffsetRgn
GetWindowOrgEx
GetWindowExtEx
GetViewportOrgEx
GetViewportExtEx
GetTextExtentPoint32W
GetTextColor
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectType
GetNearestPaletteIndex
ExtTextOutW
BitBlt
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateEllipticRgn
CreateFontIndirectW
CreateHatchBrush
CreatePalette
CreatePen
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
Ellipse
Escape
ExtFloodFill
FillRgn
FrameRgn
GetBkColor
CopyMetaFileW
SetDIBColorTable
CreateDIBSection
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
GetSystemPaletteEntries
EnumFontFamiliesExW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
GetBoundsRect
MoveToEx
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
ExtSelectClipRgn
SelectClipRgn
GetObjectW
TextOutW
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
GetTextFaceW
DeleteDC
DeleteObject
ExcludeClipRect
GetClipBox
IntersectClipRect
LineTo
RestoreDC
SaveDC
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
Sections
.text Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 867KB - Virtual size: 867KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 247KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ