SDqwsgrfTRRADQDSwatuHdfCxv
Static task
static1
Behavioral task
behavioral1
Sample
32e51accf5a30da12e43b3c7f83867577fcd6fb363d7773a743ab1bbb9653d06.exe
Resource
win7-en-20211208
General
-
Target
32e51accf5a30da12e43b3c7f83867577fcd6fb363d7773a743ab1bbb9653d06
-
Size
423KB
-
MD5
ab52b38a4f5393e5bf919b75c0abdbdf
-
SHA1
1fe162d6461405f7bd2c8def91e547cf85b28638
-
SHA256
32e51accf5a30da12e43b3c7f83867577fcd6fb363d7773a743ab1bbb9653d06
-
SHA512
c7cbf5bbba6c6b4e5069ea0f5b6343e771cfd86f6a1295d7b9b653465f3068ac0a5c9492a89f38ac81db92879642dbab8943507a72438223690bacb291d8cdbc
-
SSDEEP
12288:rri2MOG3QxDHneAljAuc4PTXRPYJcVjkudDJp0scy/jYVBAhP:rrJq+Auc4P9PYAcnVax
Malware Config
Signatures
Files
-
32e51accf5a30da12e43b3c7f83867577fcd6fb363d7773a743ab1bbb9653d06.exe windows x86
d4afe9c8484ee2c68798acdf1b836ee2
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord6
InitCommonControlsEx
kernel32
CreateFileW
CloseHandle
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetStringTypeW
SetStdHandle
SetConsoleCtrlHandler
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetUserDefaultLangID
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapReAlloc
HeapSize
GetCurrentThread
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
VirtualQuery
VirtualProtect
GetSystemInfo
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsDBCSLeadByte
WideCharToMultiByte
MultiByteToWideChar
FindResourceA
lstrcmpiA
SizeofResource
LoadResource
LoadLibraryExA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
GetFileType
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
RaiseException
DecodePointer
VirtualAlloc
InterlockedFlushSList
RtlUnwind
GetSystemTimeAsFileTime
WriteConsoleW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VirtualFree
IsProcessorFeaturePresent
FlushInstructionCache
GetCurrentProcess
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetProcessHeap
HeapFree
IsDebuggerPresent
OutputDebugStringW
EncodePointer
HeapAlloc
user32
LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
DefWindowProcA
IsRectEmpty
OffsetRect
IntersectRect
SetRectEmpty
FillRect
GetUpdateRect
EndPaint
BeginPaint
LoadIconA
LoadCursorA
SetWindowLongA
GetWindowLongA
InflateRect
SetRect
SetCursor
MessageBoxA
GetWindowRect
GetClientRect
InvalidateRect
ReleaseDC
GetDC
UpdateWindow
SetMenuItemInfoA
GetMenuItemInfoA
InsertMenuItemW
GetSubMenu
EnableMenuItem
CheckMenuItem
DestroyMenu
GetMenu
LoadMenuA
CharNextA
SetWindowPos
ShowWindow
IsWindow
CreateWindowExA
GetClassInfoExA
RegisterClassExA
UnregisterClassA
CallWindowProcA
PostQuitMessage
gdi32
TextOutW
TextOutA
MoveToEx
SetTextColor
SelectObject
Rectangle
LineTo
GetClipBox
DeleteObject
CreatePen
CreateFontA
GetStockObject
advapi32
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
CryptAcquireContextA
RegDeleteValueA
RegQueryInfoKeyW
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
ole32
CoInitializeEx
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
oleaut32
DispCallFunc
VarUI4FromStr
VariantClear
VariantInit
SafeArrayUnaccessData
SafeArrayAccessData
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString
Exports
Exports
Sections
.text Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ