Static task
static1
Behavioral task
behavioral1
Sample
70f52f57291c4509fd70a305d04700da7111bdc80faaec2cfc105dda34f3bc4e.exe
Resource
win7-20220414-en
General
-
Target
70f52f57291c4509fd70a305d04700da7111bdc80faaec2cfc105dda34f3bc4e
-
Size
655KB
-
MD5
3957a64b61de7dae195f4791c83184b8
-
SHA1
c3f90882b2d797a65780877937f280000b86619a
-
SHA256
70f52f57291c4509fd70a305d04700da7111bdc80faaec2cfc105dda34f3bc4e
-
SHA512
7551e54cebc5902ff7082a90b1f816f3601114941b116ac182c41ad96f4f42c866ec86a2dd0a2493b9a8b1bd5d2d0af20e4136a5b4e68a47d13f3d09361de083
-
SSDEEP
12288:BAVOXRVnrpU3T2kEa2IcQ2/9l+W+AjxIUAu0aqEFU/1P1QrJuPKDJ2lruwwr:BFVOT2krcQIAu7U/R1gGK0lruwwr
Malware Config
Signatures
Files
-
70f52f57291c4509fd70a305d04700da7111bdc80faaec2cfc105dda34f3bc4e.exe windows x86
fde6f633c78e6121627ae4bdb0738367
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDriveStringsW
SetFileAttributesW
SetUnhandledExceptionFilter
SetErrorMode
QueryPerformanceCounter
QueryPerformanceFrequency
LeaveCriticalSection
ReleaseMutex
TlsGetValue
TlsFree
FlushInstructionCache
GetSystemInfo
GetSystemDirectoryW
GetWindowsDirectoryW
VirtualAlloc
VirtualAllocEx
CreateFileMappingW
FindResourceExW
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
LoadResource
FindResourceW
LoadLibraryW
GlobalAlloc
LocalAlloc
lstrlenW
MoveFileW
GetComputerNameW
SystemTimeToFileTime
GetFileAttributesW
DecodePointer
WriteConsoleW
CloseHandle
ReadConsoleW
ReadFile
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapReAlloc
HeapSize
SetConsoleCtrlHandler
GetProcessHeap
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
GetStringTypeW
GetFileType
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetDriveTypeW
CreateFileW
CreateFileA
CreateDirectoryW
CompareFileTime
ExpandEnvironmentStringsW
LoadLibraryA
lstrlenA
GetProcAddress
InterlockedPushEntrySList
GetWindowsDirectoryA
RtlUnwind
RaiseException
InitializeSListHead
GetLastError
SetLastError
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
EncodePointer
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsSetValue
FreeLibrary
LoadLibraryExW
GetStdHandle
FindNextFileW
FindFirstFileExW
FindClose
HeapFree
HeapAlloc
OutputDebugStringW
GetCurrentThread
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
InterlockedFlushSList
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
UnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
user32
GetWindow
FindWindowW
SystemParametersInfoW
IntersectRect
SetRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxW
MessageBoxA
GetWindowTextLengthW
GetPropW
SetPropW
RedrawWindow
GetDC
SetForegroundWindow
GetSystemMetrics
SetCapture
GetKeyState
CharUpperW
RegisterClipboardFormatW
GetDlgCtrlID
CheckDlgButton
GetDlgItemTextW
UnregisterClassA
GetThreadDesktop
LoadIconW
EqualRect
LoadBitmapW
gdi32
GetStockObject
CreateRectRgnIndirect
CreateRectRgn
CreatePalette
CreateFontIndirectW
CreateDCW
SetWindowOrgEx
advapi32
RegCloseKey
RegNotifyChangeKeyValue
shell32
Shell_NotifyIconW
SHGetMalloc
SHChangeNotify
CommandLineToArgvW
ole32
CoInitializeEx
OleInitialize
CoCreateGuid
shlwapi
PathIsUNCW
PathIsRootW
PathIsRelativeW
PathGetDriveNumberW
PathFindFileNameW
PathQuoteSpacesW
PathAppendW
PathAddBackslashW
StrStrW
StrChrW
PathStripToRootW
PathIsURLW
PathRemoveFileSpecW
PathCombineW
PathStripPathW
SHDeleteKeyW
SHEnumValueW
PathUnquoteSpacesW
ntdll
memset
memmove
memcpy
wcschr
strchr
memcmp
strrchr
comctl32
InitCommonControlsEx
Sections
.text Size: 516KB - Virtual size: 515KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ