Static task
static1
Behavioral task
behavioral1
Sample
c633ee3625dd582963e2924b2c5031b6530e5df0f87525517e4c11270156edd0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c633ee3625dd582963e2924b2c5031b6530e5df0f87525517e4c11270156edd0.exe
Resource
win10v2004-20220901-en
General
-
Target
c633ee3625dd582963e2924b2c5031b6530e5df0f87525517e4c11270156edd0
-
Size
174KB
-
MD5
5f3352ae485aab75baf474cfda0f549d
-
SHA1
de49791c6dd65f2264709094fdc0a41040f91f2c
-
SHA256
c633ee3625dd582963e2924b2c5031b6530e5df0f87525517e4c11270156edd0
-
SHA512
5d45cd50f7baf42642732303c48d047d68cace8ab5846d6b3f3f9a9d3e77dd52927d236fe54e07010c036f6169c84967e2ef1e8f0e9cfb447fab3dc81ca7585d
-
SSDEEP
3072:JWZO7SOfSGG8eBWwxCsKHIj7QTq9SFBGs4fP:AZwSG29Koj7U4aBPQ
Malware Config
Signatures
Files
-
c633ee3625dd582963e2924b2c5031b6530e5df0f87525517e4c11270156edd0.exe windows x86
89f7523102069be7b2b1d50df6b9b8d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysReAllocStringLen
SysFreeString
OleLoadPicture
VariantChangeType
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayCreate
SysAllocStringLen
GetErrorInfo
SysStringLen
SysAllocStringLen
SysReAllocStringLen
GetErrorInfo
SysFreeString
SafeArrayCreate
SafeArrayPtrOfIndex
SafeArrayGetUBound
VariantChangeType
RegisterTypeLib
comdlg32
GetFileTitleA
ChooseColorA
msvcrt
exit
memcpy
log10
strncmp
calloc
memcmp
advapi32
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
shell32
SHGetFileInfoA
SHGetSpecialFolderLocation
DragQueryFileA
SHGetFolderPathA
user32
OffsetRect
IsDialogMessageA
SetPropA
MsgWaitForMultipleObjects
OemToCharA
PeekMessageW
PostMessageA
ScrollWindow
LoadCursorA
SetScrollPos
DefWindowProcA
CharUpperBuffA
LoadKeyboardLayoutA
CallNextHookEx
GetMessagePos
MessageBeep
DestroyIcon
GetWindowLongA
GetKeyboardType
CharLowerA
ShowScrollBar
GetMenuState
GetActiveWindow
SetWindowLongW
EnableMenuItem
DestroyCursor
EnumWindows
GetSysColorBrush
DestroyMenu
GetMenu
OpenClipboard
IsChild
FindWindowA
DefMDIChildProcA
CreateWindowExA
IsZoomed
LoadStringA
DrawIcon
EnumChildWindows
GetMenuItemID
RemovePropA
SetWindowLongA
DefFrameProcA
IsRectEmpty
WaitMessage
GetSysColor
DrawIconEx
DrawFrameControl
AdjustWindowRectEx
InsertMenuA
IsWindowEnabled
ScreenToClient
SetTimer
GetDesktopWindow
GetClipboardData
GetWindowLongW
SetForegroundWindow
RedrawWindow
GetParent
DrawEdge
SetWindowPlacement
TranslateMDISysAccel
SendMessageA
GetKeyboardLayout
DrawTextA
EmptyClipboard
wsprintfA
PostQuitMessage
SetWindowPos
UpdateWindow
ShowOwnedPopups
GetTopWindow
SetActiveWindow
CallWindowProcA
MapWindowPoints
ChildWindowFromPoint
PeekMessageA
SetMenu
GetWindowThreadProcessId
CharToOemA
DeleteMenu
GetWindowTextA
GetMenuStringA
DestroyWindow
CheckMenuItem
GetDCEx
DispatchMessageA
SetWindowsHookExA
GetClassInfoA
ShowWindow
PtInRect
CreateIcon
GetScrollInfo
GetKeyState
ReleaseDC
GetPropA
GetClassNameA
IsWindowUnicode
GetDlgItem
EnableScrollBar
GetKeyNameTextA
SendMessageW
DrawMenuBar
GetScrollRange
GetSubMenu
MapVirtualKeyA
GetWindowRect
LoadBitmapA
GetLastActivePopup
RemoveMenu
GetClientRect
GetKeyboardLayoutNameA
IsWindowVisible
LoadIconA
ActivateKeyboardLayout
CreatePopupMenu
ReleaseCapture
RegisterWindowMessageA
GetSystemMenu
ole32
OleRun
CoTaskMemFree
WriteClassStm
PropVariantClear
GetHGlobalFromStream
CreateBindCtx
CoRegisterClassObject
CoGetObjectContext
shlwapi
SHEnumValueA
SHSetValueA
SHStrDupA
SHDeleteValueA
SHEnumValueA
PathIsDirectoryA
PathGetCharTypeA
SHDeleteKeyA
gdi32
CreateFontIndirectA
CreatePalette
CreateDIBitmap
GetDIBColorTable
CreateDIBSection
SelectPalette
CreateCompatibleDC
CreateBitmap
SelectObject
CreateBrushIndirect
LineTo
kernel32
LoadLibraryA
ExitProcess
FormatMessageA
GetProcAddress
FindClose
GlobalAlloc
LocalAlloc
GetModuleHandleA
ExitThread
GetLocaleInfoA
VirtualAlloc
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerFindFileA
comctl32
ImageList_Read
ImageList_Draw
ImageList_DrawEx
ImageList_Write
ImageList_GetBkColor
ImageList_Destroy
ImageList_DragShowNolock
ImageList_Remove
ImageList_Add
ImageList_Create
Sections
CODE Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 518B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 139KB - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 590B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ