Static task
static1
Behavioral task
behavioral1
Sample
777d09585cfcee94096facc86f84c3119d4cf08b474c56208e8b9e90cb818d46.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
777d09585cfcee94096facc86f84c3119d4cf08b474c56208e8b9e90cb818d46.exe
Resource
win10v2004-20230220-en
General
-
Target
777d09585cfcee94096facc86f84c3119d4cf08b474c56208e8b9e90cb818d46
-
Size
1.5MB
-
MD5
792853931cbd796789744c2538cea384
-
SHA1
443cc280910d83d0946634698820282e8d8e9f1f
-
SHA256
777d09585cfcee94096facc86f84c3119d4cf08b474c56208e8b9e90cb818d46
-
SHA512
2aecccc45b20cea2bcbc0d1d1a216d5bd9dde2dbc49b6e6cbad149cb200a392ad3e9ee0b1c7069c21682837cd41c0e3d1e8b7bd93f0d62a1430fc4fcea725e8a
-
SSDEEP
24576:UiE8hZWFnPkx5IMBwgmzZWkF7IOtO0cTGezIlV:UK+xoRmGOgJTDu
Malware Config
Signatures
Files
-
777d09585cfcee94096facc86f84c3119d4cf08b474c56208e8b9e90cb818d46.exe windows x86
abbe8a18e6416fb53ca225cb4f693a68
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
waveOutPrepareHeader
waveOutWrite
waveOutReset
waveOutUnprepareHeader
waveOutClose
waveOutOpen
waveOutGetDevCapsA
timeEndPeriod
timeGetDevCaps
timeBeginPeriod
kernel32
GlobalAlloc
lstrcatA
SetEvent
CreateEventA
InitializeCriticalSection
Sleep
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
SetThreadPriority
GetThreadPriority
CreateThread
SetFilePointer
ReadFile
SystemTimeToFileTime
lstrlenA
lstrcpyA
LocalFileTimeToFileTime
CreateDirectoryA
GetFileAttributesA
GetCurrentDirectoryA
SetFileTime
WriteFile
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
FreeLibrary
MultiByteToWideChar
GetConsoleMode
GlobalLock
WideCharToMultiByte
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
HeapCreate
HeapReAlloc
VirtualAlloc
VirtualFree
DeleteCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
GetProcAddress
GetModuleHandleW
RaiseException
RtlUnwind
HeapFree
HeapAlloc
GlobalUnlock
WinExec
WriteConsoleA
GetConsoleOutputCP
CreateFileA
UnmapViewOfFile
CloseHandle
FindFirstFileA
FindClose
GetLastError
GetConsoleCP
DeleteFileA
SetHandleCount
WriteConsoleW
HeapSize
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetFullPathNameA
GetDriveTypeA
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
ExitThread
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
IsValidCodePage
SetStdHandle
TlsFree
ExpandEnvironmentStringsA
WaitForMultipleObjects
PeekNamedPipe
FormatMessageA
GetSystemDirectoryA
VerSetConditionMask
VerifyVersionInfoA
SleepEx
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
GetProcessHeap
SetEndOfFile
GetStringTypeW
FlushFileBuffers
user32
DestroyWindow
GetDC
ReleaseDC
wsprintfA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconA
RegisterClassExA
LoadStringA
PostQuitMessage
BeginPaint
EndPaint
GetKeyState
DialogBoxParamA
SetCapture
ReleaseCapture
LoadMenuA
GetSubMenu
DeleteMenu
ClientToScreen
TrackPopupMenu
DestroyMenu
DefWindowProcA
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
SetCursor
SetMenu
GetMenu
EnableMenuItem
CheckMenuItem
KillTimer
SetTimer
SetWindowPos
InvalidateRect
GetClientRect
LoadCursorA
EndDialog
GetDlgItem
SetWindowTextA
CreateWindowExA
UpdateWindow
ShowWindow
gdi32
SelectPalette
RealizePalette
GetSystemPaletteEntries
DeleteObject
CreatePalette
GetDeviceCaps
GdiFlush
comdlg32
CommDlgExtendedError
GetOpenFileNameA
shell32
ShellExecuteA
wininet
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
wldap32
ord211
ord41
ord27
ord301
ord33
ord79
ord35
ord32
ord200
ord30
ord26
ord50
ord60
ord143
ord22
ord46
ws2_32
bind
ntohs
getsockname
setsockopt
WSAIoctl
send
htons
select
WSAGetLastError
__WSAFDIsSet
WSASetLastError
WSAStartup
WSACleanup
getsockopt
getpeername
closesocket
socket
connect
freeaddrinfo
getaddrinfo
sendto
recvfrom
accept
listen
ioctlsocket
gethostname
htonl
ntohl
recv
crypt32
CertFreeCertificateContext
advapi32
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptDestroyKey
CryptEncrypt
CryptImportKey
Sections
.text Size: 509KB - Virtual size: 509KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 251KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 668KB - Virtual size: 672KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ