Static task
static1
Behavioral task
behavioral1
Sample
fceff4f4842d0ce1810697ad237d0cc1f67172e2b0b157a884e5421dc8dbc3b0.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
fceff4f4842d0ce1810697ad237d0cc1f67172e2b0b157a884e5421dc8dbc3b0.exe
Resource
win10v2004-20230220-en
General
-
Target
fceff4f4842d0ce1810697ad237d0cc1f67172e2b0b157a884e5421dc8dbc3b0
-
Size
1.9MB
-
MD5
2079e6efdffca10307551e7d3ff9a0a4
-
SHA1
f00652e3580a2bd3590ac4a17e36ef717e4c4c1d
-
SHA256
fceff4f4842d0ce1810697ad237d0cc1f67172e2b0b157a884e5421dc8dbc3b0
-
SHA512
0d0f40bb0a092c4c332d4ea59531e0a89326279e96cdb8a237427b7e38fadb79543002cb2fe07d4b07de49113e93d2b95acd242fdab93a60dad27220f9ebb34b
-
SSDEEP
49152:JbK4wgYUPH2mcieWnVXdhVIrDF8rDfLvcK:zDcieiVN3IrDF83zvcK
Malware Config
Signatures
Files
-
fceff4f4842d0ce1810697ad237d0cc1f67172e2b0b157a884e5421dc8dbc3b0.exe windows x64
0802f72f17b3c7ecc0a86e26b3b04adc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapAlloc
GetSystemTimeAsFileTime
ExitProcess
HeapFree
GetCommandLineA
GetStartupInfoA
RtlUnwindEx
RaiseException
RtlPcToFileHeader
HeapReAlloc
HeapQueryInformation
HeapSize
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
GetStdHandle
HeapSetInformation
InitializeCriticalSectionAndSpinCount
GetACP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetErrorMode
GetCurrentProcess
FlushFileBuffers
MoveFileA
GetModuleHandleW
GetOEMCP
GetCPInfo
GlobalFlags
GetModuleFileNameW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
WritePrivateProfileStringA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
lstrcmpA
GlobalFree
GlobalAlloc
FormatMessageA
LocalFree
GetCurrentProcessId
lstrlenA
GlobalLock
GlobalUnlock
MulDiv
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
CompareStringA
GetLastError
SetLastError
lstrcmpW
GetModuleHandleA
GetVersionExA
SetFileTime
WriteFile
LocalFileTimeToFileTime
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
CloseHandle
SetFilePointer
CreateFileA
LockResource
Sleep
GetFileAttributesA
GetTickCount
FindNextFileA
GetEnvironmentVariableA
CreateDirectoryA
FindClose
FindFirstFileA
LoadLibraryA
SizeofResource
LoadResource
FindResourceA
WideCharToMultiByte
lstrlenW
GetProcAddress
HeapCreate
MultiByteToWideChar
user32
UnregisterClassA
ValidateRect
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
PostQuitMessage
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
GetWindowThreadProcessId
GetActiveWindow
SetCursor
ReleaseCapture
LoadAcceleratorsA
InvalidateRect
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
GetDesktopWindow
TranslateAcceleratorA
IsWindowEnabled
ShowWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
GetClassLongPtrA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrA
SetWindowLongPtrA
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
LoadCursorA
EnableWindow
UpdateWindow
wsprintfA
TrackPopupMenu
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
GetClientRect
GetSysColorBrush
GetMenuItemInfoA
InflateRect
ShowOwnedPopups
GetMessageA
TranslateMessage
GetWindowDC
GetCursorPos
GetWindow
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
SetWindowLongA
GetWindowLongA
GetMenu
CallWindowProcA
DefWindowProcA
SendMessageA
GetDlgCtrlID
PtInRect
CopyRect
PostMessageA
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
GetParent
ScreenToClient
EqualRect
DeferWindowPos
GrayStringA
gdi32
DeleteDC
CreatePatternBrush
CreateBitmap
CreateCompatibleDC
GetStockObject
GetDeviceCaps
CreateSolidBrush
CreateFontIndirectA
GetTextExtentPoint32A
SelectObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
CreateCompatibleBitmap
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
BitBlt
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
SetViewportOrgEx
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
DragFinish
DragQueryFileA
shlwapi
PathFindFileNameA
PathFindExtensionA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 255KB - Virtual size: 255KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ