Static task
static1
Behavioral task
behavioral1
Sample
980c7cd635eadde37f9c877f9709dd4a7daa20295a865717979a635b9404ccc7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
980c7cd635eadde37f9c877f9709dd4a7daa20295a865717979a635b9404ccc7.exe
Resource
win10v2004-20220812-en
General
-
Target
980c7cd635eadde37f9c877f9709dd4a7daa20295a865717979a635b9404ccc7
-
Size
440KB
-
MD5
e34ee06bbf2c325b57f67dd4ee3a1246
-
SHA1
2788f00c8872e56b90243ef2191ca4115a425615
-
SHA256
980c7cd635eadde37f9c877f9709dd4a7daa20295a865717979a635b9404ccc7
-
SHA512
f9b6e7d14d2799024867baabd4a68cf3703d917eb17e0c14ae106ad2bf76627419da140ffc53a3a6127c214f637f67095d0ea30747ff60d69381bceffa3cd5c4
-
SSDEEP
6144:m2q3pdp56As2qp+D9Sef/0xbrP2KwULKZIXr5Atyh817u1t4QyElTYCzpK0o:v4iAap+zXxqIIXtAty27GtTy+TNlK0
Malware Config
Signatures
Files
-
980c7cd635eadde37f9c877f9709dd4a7daa20295a865717979a635b9404ccc7.exe windows x86
ca0e098f18dc97ffd92c66cdc5dd3762
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
GetCommandLineW
LockResource
GetCurrentProcessId
GetEnvironmentStrings
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
FindNextFileW
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
LCMapStringW
GetLastError
LeaveCriticalSection
ExitProcess
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
RemoveDirectoryA
GlobalLock
WaitForMultipleObjects
DuplicateHandle
FindNextFileA
CreateFileMappingA
ResetEvent
CompareStringA
GetDiskFreeSpaceA
FindFirstFileA
lstrcmpA
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileW
SetEvent
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
GetOEMCP
LoadLibraryW
SetHandleCount
GetSystemTime
EnterCriticalSection
HeapFree
ReadFile
InterlockedIncrement
GetCurrentThreadId
SetEndOfFile
GetConsoleMode
GlobalAlloc
GetVersion
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
MulDiv
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
CreateMutexA
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
FormatMessageA
TlsGetValue
FindClose
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
FreeLibrary
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
WriteFile
InterlockedExchange
GetStringTypeA
lstrcmpiA
WideCharToMultiByte
GetTempPathA
SetStdHandle
GetLocaleInfoW
FreeEnvironmentStringsW
SetErrorMode
CreateFileA
LocalAlloc
GetLocaleInfoA
GetStartupInfoW
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetExitCodeProcess
HeapDestroy
FindFirstFileW
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
CloseHandle
lstrcpynA
GetACP
GetModuleHandleW
SizeofResource
CreateProcessA
VirtualQuery
HeapCreate
VirtualFree
Sleep
IsBadReadPtr
FindResourceA
VirtualAlloc
WriteConsoleW
GetFullPathNameA
gdi32
DeleteObject
GetDeviceCaps
GetStockObject
SetTextColor
SelectObject
SetBkMode
SetBkColor
advapi32
RegQueryValueExA
RegQueryValueExW
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
user32
IsIconic
GetWindowRect
GetSystemMetrics
DefWindowProcA
KillTimer
BeginPaint
SetFocus
CreateWindowExA
GetWindowLongA
RegisterClassA
EnableMenuItem
LoadStringA
GetWindow
IsWindowEnabled
TranslateMessage
PostMessageA
EnableWindow
SetCapture
ShowWindow
UpdateWindow
GetParent
GetMessageA
DestroyWindow
MoveWindow
GetDC
DispatchMessageA
IsWindow
ReleaseDC
PostQuitMessage
MapWindowPoints
SetWindowLongA
EndDialog
SetWindowTextA
CheckMenuItem
SetTimer
GetSubMenu
GetDlgItem
ScreenToClient
LoadCursorA
LoadIconA
GetDesktopWindow
SetForegroundWindow
FillRect
MessageBoxA
GetSysColor
IsWindowVisible
GetFocus
InvalidateRect
SendMessageA
GetClientRect
CallWindowProcA
SetWindowPos
SetCursor
oleaut32
SysFreeString
SysAllocStringLen
SysStringLen
VariantClear
SysAllocString
ole32
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoUninitialize
msvcrt
_strcmpi
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__set_app_type
_except_handler3
_controlfp
__p__fmode
Sections
.text Size: 304KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ