Static task
static1
Behavioral task
behavioral1
Sample
0e7180b6a646725766e51e8872714434ea508947c4758c290b8dfd4c7dd4728c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0e7180b6a646725766e51e8872714434ea508947c4758c290b8dfd4c7dd4728c.exe
Resource
win10v2004-20230220-en
General
-
Target
0e7180b6a646725766e51e8872714434ea508947c4758c290b8dfd4c7dd4728c
-
Size
2.5MB
-
MD5
2c9823b113e3a053904fb5e8bfb290e1
-
SHA1
de941ed505d22c9d94fb8ae0ee735ebd00d243a6
-
SHA256
0e7180b6a646725766e51e8872714434ea508947c4758c290b8dfd4c7dd4728c
-
SHA512
f7109f20bfcaea24a80b1fce7855e2e2af438e1e176713eb11d410d505e221e36caabc0b7bc4c554c71559d419b2076b98a6e23a86ca60eaf85cb76400dbaf21
-
SSDEEP
49152:nSYbAef5obRgfbz+60YP0ZJDfIRRfVFFF:nSYpK3KP0Z4dF
Malware Config
Signatures
Files
-
0e7180b6a646725766e51e8872714434ea508947c4758c290b8dfd4c7dd4728c.exe windows x86
1cca2c359c33cbb4159496066fd8c72c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeZoneInformation
SetEnvironmentVariableA
OpenEventA
FileTimeToLocalFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetStringTypeW
IsProcessorFeaturePresent
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
HeapFree
HeapQueryInformation
HeapSize
HeapReAlloc
HeapAlloc
HeapCreate
GetStartupInfoW
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetStdHandle
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
GetSystemTimeAsFileTime
GetModuleFileNameA
ExitThread
CreateThread
RaiseException
ExitProcess
RtlUnwind
IsBadReadPtr
HeapValidate
HeapSetInformation
DecodePointer
EncodePointer
InitializeCriticalSectionAndSpinCount
GetNumberFormatW
GetWindowsDirectoryW
Sleep
SearchPathW
GetTickCount
FindResourceExW
FileTimeToSystemTime
GetTempPathW
GetFileAttributesExW
GetFileSizeEx
GetTempFileNameW
GetFileTime
GetFileAttributesW
lstrcmpiW
GetFullPathNameW
GetVolumeInformationW
FindClose
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetCurrentProcess
DuplicateHandle
GetHandleInformation
GetProfileIntW
VirtualProtect
lstrlenA
GlobalFindAtomW
GetAtomNameW
GlobalGetAtomNameW
CopyFileW
GlobalSize
FormatMessageW
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
LocalFree
FreeResource
lstrcpyW
GetVersionExW
DeleteFileW
ResumeThread
SetThreadPriority
CompareStringW
GlobalFlags
GlobalUnlock
GlobalFree
MulDiv
InterlockedIncrement
GetCurrentDirectoryW
GetCurrentProcessId
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
SetEvent
WaitForSingleObject
CloseHandle
lstrlenW
SetErrorMode
MultiByteToWideChar
ActivateActCtx
GetLastError
DeactivateActCtx
SetLastError
LoadResource
LockResource
SizeofResource
FindResourceW
InterlockedExchange
WideCharToMultiByte
GlobalLock
lstrcmpW
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GetCurrentThreadId
GetLocaleInfoW
LoadLibraryW
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetModuleFileNameW
GetConsoleMode
GetConsoleCP
FindFirstFileW
LCMapStringW
GetModuleHandleW
GetCommandLineW
GetProcAddress
TerminateProcess
LoadLibraryA
msimg32
TransparentBlt
AlphaBlend
comctl32
ImageList_GetIconSize
shlwapi
PathIsUNCW
PathRemoveFileSpecW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
gdiplus
GdiplusShutdown
GdipDeleteGraphics
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDisposeImage
GdipFree
GdipCloneImage
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdipGetImageGraphicsContext
GdipDrawImageI
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateFromHDC
oleacc
LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundW
user32
DefMDIChildProcW
GetIconInfo
IsClipboardFormatAvailable
GetDoubleClickTime
IsCharLowerW
MapVirtualKeyExW
WaitMessage
DestroyCursor
SetRect
InflateRect
IntersectRect
UnionRect
SubtractRect
DestroyAcceleratorTable
DrawIconEx
MessageBeep
LoadImageW
ReuseDDElParam
TranslateAcceleratorW
DestroyIcon
CharUpperW
ReleaseCapture
SetRectEmpty
GetAsyncKeyState
EndDialog
CreateDialogIndirectParamW
MapVirtualKeyW
GetKeyNameTextW
ShowWindow
MoveWindow
IsDialogMessageW
CheckDlgButton
UnpackDDElParam
GetClipboardFormatNameW
GetClipboardFormatNameA
RegisterWindowMessageW
CreateWindowExW
RegisterClassW
SendDlgItemMessageW
SendDlgItemMessageA
MonitorFromWindow
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
WinHelpW
TrackPopupMenu
SetWindowPlacement
GetWindowPlacement
GetDlgItem
GetWindowTextLengthW
DestroyWindow
GetClassLongW
SetPropW
GetPropW
CallWindowProcW
RemovePropW
SetMenu
GetMenu
GetMessageTime
GetMessagePos
SetWindowLongW
SetWindowPos
DestroyMenu
LoadAcceleratorsW
GetClassInfoW
DefWindowProcW
SetLayeredWindowAttributes
GetSysColor
GetMonitorInfoW
EnumDisplayMonitors
SystemParametersInfoW
GetSystemMetrics
LoadIconW
LoadCursorW
PostThreadMessageW
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
NotifyWinEvent
GetForegroundWindow
SetForegroundWindow
HideCaret
OpenClipboard
WindowFromPoint
SetParent
TranslateMDISysAccel
GetTopWindow
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
SetCapture
GetCapture
SetActiveWindow
GetActiveWindow
KillTimer
SetTimer
EnableScrollBar
RedrawWindow
LockWindowUpdate
ShowOwnedPopups
IsWindowVisible
InvalidateRect
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
ScreenToClient
MapWindowPoints
GetClientRect
BringWindowToTop
GetWindowRgn
SetWindowRgn
IsZoomed
IsIconic
GetSystemMenu
DrawMenuBar
GetDesktopWindow
GetWindowTextW
SetWindowTextW
RealChildWindowFromPoint
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
MessageBoxW
GetWindowLongW
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetWindowThreadProcessId
PostMessageW
SendMessageW
IsWindow
MapDialogRect
UnhookWindowsHookEx
LoadMenuW
RemoveMenu
ModifyMenuW
InsertMenuItemW
InsertMenuW
GetSubMenu
GetMenuItemInfoW
GetMenuStringW
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
AppendMenuW
DeleteMenu
IsMenu
CreatePopupMenu
CreateMenu
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateW
DrawIcon
DefFrameProcW
CharUpperBuffW
IsRectEmpty
CopyIcon
OffsetRect
InvertRect
FrameRect
FillRect
GetSysColorBrush
SetCursor
GetMenuCheckMarkDimensions
LoadBitmapW
SetMenuItemBitmaps
GetFocus
GetKeyState
CallNextHookEx
PeekMessageW
GetCursorPos
SetWindowsHookExW
ValidateRect
GetMessageW
TranslateMessage
DispatchMessageW
UpdateLayeredWindow
PtInRect
MonitorFromPoint
RegisterClipboardFormatW
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
SetClassLongW
SetCursorPos
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CopyAcceleratorTableW
IsChild
CreateAcceleratorTableW
PostQuitMessage
GetClassInfoExW
gdi32
CreateCompatibleBitmap
CreatePalette
GetPaletteEntries
SetPaletteEntries
GetNearestPaletteIndex
CreateRectRgn
CreateRectRgnIndirect
CreateEllipticRgn
CreatePolygonRgn
CreateRoundRectRgn
SetRectRgn
CombineRgn
OffsetRgn
GetRgnBox
PtInRegion
CreateDCW
CreateCompatibleDC
GetDeviceCaps
GetTextColor
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
FillRgn
FrameRgn
PtVisible
RectVisible
Polyline
Ellipse
Polygon
Rectangle
PatBlt
BitBlt
StretchBlt
GetPixel
SetPixel
ExtFloodFill
TextOutW
ExtTextOutW
GetTextExtentPoint32W
GetTextFaceW
GetTextMetricsW
Escape
GetBoundsRect
CreateFontIndirectW
SetPixelV
DeleteObject
EnumFontFamiliesW
GetTextCharsetInfo
CreateDIBitmap
DeleteDC
SaveDC
RestoreDC
SelectPalette
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetLayout
SetLayout
ExtSelectClipRgn
CopyMetaFileW
CreateDIBSection
EnumFontFamiliesExW
SetDIBColorTable
GetSystemPaletteEntries
SelectObject
CreatePatternBrush
CreateHatchBrush
CreateSolidBrush
CreatePen
GetObjectType
GetStockObject
GetObjectW
GetBkColor
RealizePalette
CreateBitmap
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
comdlg32
GetFileTitleW
advapi32
RevertToSelf
SetThreadToken
RegEnumKeyExW
RegEnumValueW
RegEnumKeyW
RegQueryValueW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenThreadToken
shell32
SHAppBarMessage
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteW
DragQueryFileW
DragFinish
SHGetFileInfoW
ole32
IsAccelerator
OleLockRunning
OleTranslateAccelerator
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
CoCreateInstance
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
OleDuplicateData
CoUninitialize
CoCreateGuid
CoTaskMemFree
CoInitialize
oleaut32
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
VarBstrFromDate
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysFreeString
SysAllocString
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 377KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ