Static task
static1
Behavioral task
behavioral1
Sample
12c29587718a93e10cc4fbe6a967a7610cfce683e13ecce357a114d71223daf2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
12c29587718a93e10cc4fbe6a967a7610cfce683e13ecce357a114d71223daf2.exe
Resource
win10v2004-20220901-en
General
-
Target
12c29587718a93e10cc4fbe6a967a7610cfce683e13ecce357a114d71223daf2
-
Size
673KB
-
MD5
636df0af65ee77309cc2d1ea517c7bb7
-
SHA1
e454051617d50ab21f2cec8dd526da5d95f7579c
-
SHA256
12c29587718a93e10cc4fbe6a967a7610cfce683e13ecce357a114d71223daf2
-
SHA512
02fd806a160e76ed29c3cf1c79a61f5bd811277f51ee4b520a9b76481752d61b3bb6ae2e1856374ab43b4f608b42660eb662c365194ebe3d9d2a0d8ee20a4e89
-
SSDEEP
12288:gI3q2BBYe8Zc+2/4UDiDVPYNXaf5kWGaA2XkdR1GcG0ioUf8gchawlPUpVux:3q2fnz4g+moGE8R1G/VoUKawJaE
Malware Config
Signatures
Files
-
12c29587718a93e10cc4fbe6a967a7610cfce683e13ecce357a114d71223daf2.exe windows x86
752d8a1db7cd8ab247ffba957feef8de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MapWindowPoints
DestroyWindow
DestroyMenu
PostQuitMessage
SetWindowPos
IsWindow
DispatchMessageA
GetDC
GetCursorPos
PtInRect
GetParent
ShowWindow
TranslateMessage
IsWindowEnabled
RegisterClassA
CreateWindowExA
EndPaint
SetFocus
PeekMessageA
BeginPaint
DefWindowProcA
GetSystemMetrics
GetWindowRect
ReleaseCapture
SetWindowLongA
EndDialog
SetWindowTextA
CheckMenuItem
GetDlgItem
ScreenToClient
LoadCursorA
GetDesktopWindow
SetForegroundWindow
FillRect
SetDlgItemTextA
MessageBoxA
GetSysColor
IsWindowVisible
wsprintfA
GetClientRect
CallWindowProcA
oleaut32
SysAllocString
SysFreeString
SysStringLen
kernel32
GetSystemInfo
GetStdHandle
GetConsoleOutputCP
ReleaseMutex
WaitForSingleObject
FindNextFileA
HeapDestroy
GetFileAttributesW
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetLocaleInfoA
LocalAlloc
CreateFileA
SetErrorMode
SetStdHandle
GetTempPathA
WideCharToMultiByte
lstrcmpiA
GetStringTypeA
InterlockedExchange
WriteFile
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
SetFileAttributesA
FreeLibrary
LocalFree
FormatMessageW
InitializeCriticalSection
FindClose
InterlockedDecrement
FormatMessageA
SetLastError
GetModuleFileNameW
IsDebuggerPresent
GetModuleFileNameA
LoadLibraryExA
SetConsoleCtrlHandler
UnhandledExceptionFilter
LoadLibraryExW
MultiByteToWideChar
GetLocalTime
CreateMutexA
CreateThread
SetUnhandledExceptionFilter
GetCurrentThread
GetTickCount
GetVersion
GetModuleHandleA
GetCurrentThreadId
GetCurrentProcessId
GetCommandLineA
ExitProcess
VirtualAlloc
GetLastError
FindResourceA
Sleep
VirtualFree
HeapCreate
IsValidCodePage
SizeofResource
GetModuleHandleW
GlobalLock
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
GetCurrentDirectoryA
LockResource
GetEnvironmentStrings
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GlobalFree
lstrlenA
LCMapStringW
LeaveCriticalSection
HeapAlloc
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
GlobalAlloc
WaitForMultipleObjects
FindFirstFileW
CompareStringA
FindFirstFileA
CompareStringW
GetProcessHeap
GetProcAddress
GetCPInfo
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
IsBadWritePtr
QueryPerformanceCounter
GetOEMCP
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
InterlockedIncrement
SetEndOfFile
GetConsoleMode
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
Sections
.text Size: 637KB - Virtual size: 963KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ