Static task
static1
Behavioral task
behavioral1
Sample
673a805aebba70795d5bd6ca7f9c32129b41a153c6e9dccfa9e32fc06c1e495e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
673a805aebba70795d5bd6ca7f9c32129b41a153c6e9dccfa9e32fc06c1e495e.exe
Resource
win10v2004-20220901-en
General
-
Target
673a805aebba70795d5bd6ca7f9c32129b41a153c6e9dccfa9e32fc06c1e495e
-
Size
499KB
-
MD5
5a4c40fb416087d74ab95a897b3a9f30
-
SHA1
c10e6b7581db7540d4ffe6aecddcf74ca3cabea7
-
SHA256
673a805aebba70795d5bd6ca7f9c32129b41a153c6e9dccfa9e32fc06c1e495e
-
SHA512
5b79c6d1ee6ff77d66af3bea11e64aeea5011d63a2235d02043bde60567ea5234ad80803ed42b10998cedc7da7fc4da6cc65429eb00e04335c0086461908c1f0
-
SSDEEP
12288:Yh8u0eF19AkKSSsuJBCfGLHKI1Vuz1eW/:Yh8uF/JXuPPns4W/
Malware Config
Signatures
Files
-
673a805aebba70795d5bd6ca7f9c32129b41a153c6e9dccfa9e32fc06c1e495e.exe windows x86
8731a29f8d52ef57721dbfc01803405c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
KillTimer
FindWindowW
DialogBoxParamW
GetDlgItemTextW
LoadStringW
SetWindowTextW
ShowWindow
GetIconInfo
LoadImageW
WinHelpW
SetWindowLongW
RegisterWindowMessageW
GetParent
CheckDlgButton
CallWindowProcW
SendMessageW
GetDlgItem
MessageBoxW
SystemParametersInfoW
LoadIconW
GetDlgItemInt
SendDlgItemMessageW
SetWindowPos
SetDlgItemInt
EnableWindow
RegisterDeviceNotificationW
CheckRadioButton
EndDialog
ExitWindowsEx
DestroyWindow
SetFocus
BringWindowToTop
SetTimer
UnregisterDeviceNotification
wsprintfW
CharNextW
InvalidateRect
SetDlgItemTextW
GetWindowTextW
GetWindowLongW
IsDlgButtonChecked
CharPrevW
kernel32
lstrcpyW
CloseHandle
GetSystemDirectoryW
lstrcmpiW
GetUserDefaultLCID
GetDiskFreeSpaceW
GlobalMemoryStatusEx
GetProcAddress
LocalFree
ExpandEnvironmentStringsW
GetCurrentProcessId
lstrcatW
FormatMessageW
SetUnhandledExceptionFilter
SetLastError
GetWindowsDirectoryW
lstrlenW
GetTickCount
GetSystemInfo
GetLocaleInfoA
FreeLibrary
GetSystemTimeAsFileTime
GetLocaleInfoW
QueryPerformanceCounter
LoadLibraryA
GetModuleFileNameW
LocalAlloc
GetLastError
lstrcpynW
GetModuleHandleA
GetCurrentProcess
GetVersionExW
advapi32
OpenServiceW
StartServiceW
RegCloseKey
RegEnumValueW
LockServiceDatabase
CloseServiceHandle
UnlockServiceDatabase
RegDeleteKeyW
OpenSCManagerW
RegOpenKeyExW
ChangeServiceConfigW
RegQueryValueExW
RegDeleteValueW
ControlService
RegEnumKeyExW
QueryServiceStatus
RegCreateKeyExW
OpenProcessToken
AdjustTokenPrivileges
RegSetValueExW
GetTokenInformation
ole32
CoInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize
setupapi
SetupDiSetClassInstallParamsW
CM_Get_Hardware_Profile_Info_ExW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
CM_Get_Device_ID_ExW
CM_Get_HW_Prof_Flags_ExW
SetupDiGetClassDevsExW
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiChangeState
SetupDiDeleteDeviceInfo
SetupDiCallClassInstaller
gdi32
DeleteObject
shell32
ShellExecuteW
msvcrt
wcscmp
_itow
wcscpy
swscanf
_wcsicmp
wcscat
wcschr
_except_handler3
ntdll
RtlNtStatusToDosError
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 431KB - Virtual size: 431KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ