Static task
static1
Behavioral task
behavioral1
Sample
966b94be9ea59f7ddd2a2e01ad64f4795efbc2fe3fa92fcd83002cd67a5c3efb.exe
Resource
win7-20220414-en
General
-
Target
966b94be9ea59f7ddd2a2e01ad64f4795efbc2fe3fa92fcd83002cd67a5c3efb
-
Size
1.9MB
-
MD5
8d2541dff99194f2caaf922c01534d8b
-
SHA1
697b3d3ffe7a6cbcd6074ddc9c258fba5b30e048
-
SHA256
966b94be9ea59f7ddd2a2e01ad64f4795efbc2fe3fa92fcd83002cd67a5c3efb
-
SHA512
e14236e68149de4dd58da5ff2be1d58cda03e50629c9569a803809e84e0c5707c19bd318ce3df9aa24fb1741a29d5908e611446563e1bd6d0761a50224c2c5df
-
SSDEEP
6144:UbpAo0ERQfnIOChEpAZQQ5SHQjhjmpYfPa3I/:3o0Mo7ChEEXdjmppI
Malware Config
Signatures
Files
-
966b94be9ea59f7ddd2a2e01ad64f4795efbc2fe3fa92fcd83002cd67a5c3efb.exe windows x86
0c7d34a48fe745a8b0654f00cdb284e0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
Sleep
VirtualAllocEx
GetModuleHandleW
FlushFileBuffers
GetCurrentThreadId
GlobalMemoryStatus
GetSystemInfo
CreateFileA
DeviceIoControl
GetDiskFreeSpaceExA
GetVolumeInformationA
MulDiv
WriteFile
SetFilePointer
SetErrorMode
SetUnhandledExceptionFilter
GetLongPathNameA
GetSystemDirectoryA
CreateMutexA
GetFileAttributesExA
GetModuleHandleA
FormatMessageA
VirtualQuery
GlobalSize
GlobalReAlloc
lstrcmpiA
GetCPInfo
lstrlenW
lstrlenA
GetVersion
FindResourceA
SizeofResource
LoadResource
LockResource
GlobalUnlock
CopyFileA
GetModuleFileNameA
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
FindClose
MultiByteToWideChar
SetEvent
WaitForSingleObject
CreateThread
GlobalLock
CloseHandle
CreateEventA
GetTempPathA
GetTempFileNameA
GetCurrentProcessId
GlobalAlloc
GlobalFree
LoadLibraryA
GetProcAddress
GetDriveTypeA
SetThreadExecutionState
GetShortPathNameA
WinExec
CreateDirectoryA
MoveFileA
GetTickCount
GetVersionExA
ResumeThread
TerminateThread
lstrcpyA
RemoveDirectoryA
DeleteFileA
GetFileAttributesA
lstrcatA
GetCurrentProcess
GetStartupInfoA
FreeLibrary
user32
LoadIconA
GetAsyncKeyState
CopyIcon
GetKeyState
AnyPopup
IsCharLowerA
GetShellWindow
GetKeyboardType
DestroyMenu
CharNextA
GetMenuCheckMarkDimensions
GetDialogBaseUnits
GetMenu
IsWindowUnicode
VkKeyScanW
GetCursor
DrawMenuBar
GetMessagePos
GetOpenClipboardWindow
CountClipboardFormats
LoadCursorW
UnregisterClassW
UnregisterDeviceNotification
RegisterDeviceNotificationW
MessageBoxW
RegisterClassW
GetDesktopWindow
CreateWindowExW
SetWindowLongW
GetWindowLongW
DefWindowProcW
PeekMessageW
TranslateMessage
DispatchMessageW
DestroyWindow
gdi32
GetEnhMetaFileBits
GetStockObject
SaveDC
AbortPath
AddFontResourceW
AddFontResourceA
PathToRegion
GetObjectType
EndPath
DeleteObject
GetTextColor
CancelDC
advapi32
RegOpenKeyW
RegQueryValueExA
GetUserNameA
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 306B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ra2 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ra6 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ra5 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ra4 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ