Static task
static1
Behavioral task
behavioral1
Sample
39b03d2078ff432adac89eb15578f6d96d8a129ddf79a11fcdae41998748e4b7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
39b03d2078ff432adac89eb15578f6d96d8a129ddf79a11fcdae41998748e4b7.exe
Resource
win10v2004-20220812-en
General
-
Target
39b03d2078ff432adac89eb15578f6d96d8a129ddf79a11fcdae41998748e4b7
-
Size
488KB
-
MD5
d93161184b6cad432d8deef169158a89
-
SHA1
ce4da4812842f7cde57940cda136ea4f8995428a
-
SHA256
39b03d2078ff432adac89eb15578f6d96d8a129ddf79a11fcdae41998748e4b7
-
SHA512
adf38b2e03b3a809d038daef570de71322e1a4c2eea5fa9b47ebc3c1a5ce34999e3f30a3c1cb8ad5f69b170abb21a1546ebd17d20d6bfcccf5bb6e0896850d02
-
SSDEEP
1536:KM+8j7A1tjDr832fnXQTHdrRHz6EV1C6uuBGhZn7A:Bg1BBgTHdr5zNV1C6VGhZn7A
Malware Config
Signatures
Files
-
39b03d2078ff432adac89eb15578f6d96d8a129ddf79a11fcdae41998748e4b7.exe windows x86
e1e33c374cb046ca947047365525aad1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
lstrcmpiW
lstrcpynW
LoadLibraryW
MulDiv
SetNamedPipeHandleState
CreateFileW
CloseHandle
FreeLibrary
ReadFile
WriteFile
GetProcAddress
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetModuleHandleA
ExitProcess
GetVersionExA
GetLastError
GetModuleFileNameW
GetModuleHandleW
InterlockedExchange
lstrcpyW
lstrlenW
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
user32
IsDialogMessageW
CreateDialogParamW
BeginPaint
EndPaint
SendMessageW
InvalidateRect
GetDlgItem
MoveWindow
SetWindowPos
MapWindowPoints
GetClientRect
SystemParametersInfoW
GetWindowRect
GetWindow
GetParent
GetWindowLongW
CharNextW
CloseDesktop
GetUserObjectInformationW
GetProcessWindowStation
SetThreadDesktop
OpenInputDesktop
ReleaseCapture
KillTimer
GetSystemMetrics
SetCapture
ClientToScreen
PostQuitMessage
GetCursorPos
HideCaret
GetWindowTextLengthW
SetTimer
LoadImageW
SetWindowLongW
ShowWindow
UnregisterClassW
DispatchMessageW
TranslateMessage
DestroyWindow
PeekMessageW
GetMessageW
gdi32
CreateFontW
SetTextColor
GetTextExtentPoint32W
TextOutW
CreateCompatibleDC
BitBlt
DeleteDC
CreatePen
SelectObject
MoveToEx
LineTo
GetDeviceCaps
DeleteObject
advapi32
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
ole32
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
oleaut32
VarUI4FromStr
msvcp71
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
?_Nomemory@std@@YAXXZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
comctl32
InitCommonControlsEx
msvcr71
_except_handler3
__CxxFrameHandler
??0exception@@QAE@XZ
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
_onexit
__dllonexit
?terminate@@YAXXZ
__security_error_handler
??1type_info@@UAE@XZ
memset
_callnewh
sprintf
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
malloc
??_V@YAXPAX@Z
??0exception@@QAE@ABV0@@Z
memmove
realloc
free
_purecall
??1exception@@UAE@XZ
_CxxThrowException
??3@YAXPAX@Z
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 428KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ