?g_nVerbose@@3HA
Static task
static1
Behavioral task
behavioral1
Sample
abfe5f4b11dd9f74074bb79aeea50900f6eac08524d7f398115c4cd3d0d624a3.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
abfe5f4b11dd9f74074bb79aeea50900f6eac08524d7f398115c4cd3d0d624a3.exe
Resource
win10v2004-20230220-en
General
-
Target
abfe5f4b11dd9f74074bb79aeea50900f6eac08524d7f398115c4cd3d0d624a3
-
Size
1.4MB
-
MD5
c445c3bef9c251eefdb35b5b9af24ea4
-
SHA1
e5b63ae80a69cc3586aa3588020617224f4c67f7
-
SHA256
abfe5f4b11dd9f74074bb79aeea50900f6eac08524d7f398115c4cd3d0d624a3
-
SHA512
4ca9b92f9104ba3e41c016453564f953f98acf1e9377b198d59f4861895a7dffc0f21561e0e88370494217dd6dab9c7949bb43d9a707c2391019ee61da2e3071
-
SSDEEP
24576:FrwEud1WeZMTVI4vjZi3kPgYegfLPkhJsQ/EJKZa5sYT:p+d17+pI4vRIYesL831sJaa5sy
Malware Config
Signatures
Files
-
abfe5f4b11dd9f74074bb79aeea50900f6eac08524d7f398115c4cd3d0d624a3.exe windows x86
9bb21c1160d3d64bc7e43274b83fd6e8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsUNCA
PathFindExtensionA
PathAppendA
PathStripToRootA
PathFindFileNameA
PathRemoveBackslashA
PathCombineA
PathAddBackslashA
PathRemoveFileSpecA
PathIsDirectoryA
PathFileExistsA
setupapi
SetupInstallFileA
kernel32
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesExA
GetFileSizeEx
GetFileTime
GlobalFlags
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
GetCPInfo
GetOEMCP
GetModuleHandleW
GetCurrentDirectoryA
SetErrorMode
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
VirtualAlloc
HeapReAlloc
ExitProcess
SetStdHandle
GetFileType
HeapSize
GetACP
IsValidCodePage
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
HeapCreate
HeapDestroy
VirtualFree
SetHandleCount
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
InitializeCriticalSectionAndSpinCount
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
CompareStringW
SetEnvironmentVariableA
GetProcessHeap
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
SetFilePointer
WriteFile
ReadFile
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
InterlockedDecrement
GetModuleFileNameW
GlobalAlloc
GetCurrentProcessId
MulDiv
lstrlenA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
LoadLibraryA
SetLastError
FreeLibrary
lstrcmpW
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
FindResourceExA
LocalFree
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcpynA
GetLocalTime
FlushFileBuffers
OutputDebugStringA
CreateFileA
GetFileAttributesA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempFileNameA
MultiByteToWideChar
FormatMessageA
RemoveDirectoryA
CopyFileA
GetSystemDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetVersionExA
GetShortPathNameA
GetCurrentProcess
GetModuleHandleA
GetProcAddress
Sleep
WritePrivateProfileStringA
GetLongPathNameA
CloseHandle
CreateMutexA
DeleteFileA
GetPrivateProfileIntA
CreateDirectoryA
GetPrivateProfileStringA
GetTempPathA
GetDriveTypeA
GetLogicalDrives
SetFileAttributesA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetLastError
GetFileSize
GetModuleFileNameA
CreateFileW
user32
UnregisterClassA
LoadCursorA
GetSysColorBrush
DestroyMenu
SetCursor
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
CharUpperA
PostQuitMessage
GetWindowThreadProcessId
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
GetFocus
SetFocus
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
EnableWindow
LoadBitmapA
GetWindowRect
RemovePropA
PeekMessageA
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
UpdateWindow
PostMessageA
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
SendMessageA
AdjustWindowRect
LoadIconA
GetSystemMenu
AppendMenuA
SetTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
RedrawWindow
KillTimer
MessageBoxA
EndDialog
GetNextDlgTabItem
GetParent
IsWindowEnabled
GetDlgItem
GetWindowLongA
ScreenToClient
CopyRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
PtInRect
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
gdi32
GetDeviceCaps
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetObjectA
GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
DeleteObject
SetMapMode
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegFlushKey
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
shell32
SHGetSpecialFolderPathA
ShellExecuteExA
SHFileOperationA
oleaut32
VariantClear
VariantChangeType
VariantInit
Exports
Exports
Sections
.text Size: 255KB - Virtual size: 254KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ