Static task
static1
Behavioral task
behavioral1
Sample
c169480d36409b64be747f87f8fa5ebaea9592b0b69ce6a44c9b352e647cdaf1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c169480d36409b64be747f87f8fa5ebaea9592b0b69ce6a44c9b352e647cdaf1.exe
Resource
win10v2004-20220812-en
General
-
Target
c169480d36409b64be747f87f8fa5ebaea9592b0b69ce6a44c9b352e647cdaf1
-
Size
736KB
-
MD5
6e832e75c58cc6d91d1eef3acd83ac57
-
SHA1
f1100c2f8a93ad35fa1095a54298ea4c2bbd7ac5
-
SHA256
c169480d36409b64be747f87f8fa5ebaea9592b0b69ce6a44c9b352e647cdaf1
-
SHA512
cb7c596e855a1b1aed1dd6a05170b3da4fcc3bf51cc86b274b0496b3b7a9f6c78967c6f366a4aa45f2fb3c55b150e1b3d00bf7d62318dcfdf642e65cd1bf0cc0
-
SSDEEP
12288:3EEJjUVXLvrt7IR1ccI2G5oMU344gNa59EO9UdOj9:3EqjUVepIH/r4EuPj9
Malware Config
Signatures
Files
-
c169480d36409b64be747f87f8fa5ebaea9592b0b69ce6a44c9b352e647cdaf1.exe windows x86
e16c8d3860b3db15c5bb0a4724853a04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
SetFileAttributesA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapFree
TerminateProcess
GetFileType
HeapAlloc
HeapReAlloc
HeapSize
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
SetStdHandle
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadCodePtr
GetOEMCP
OutputDebugStringW
FormatMessageA
LocalFree
GetSystemDirectoryW
GetCurrentDirectoryW
MultiByteToWideChar
GlobalFree
GlobalAlloc
RaiseException
WriteFile
ReadFile
OutputDebugStringA
CreateFileA
DeviceIoControl
CloseHandle
GetPrivateProfileSectionA
WritePrivateProfileSectionA
WritePrivateProfileStringA
Sleep
GetTickCount
CopyFileA
MoveFileExA
SetLastError
GetModuleHandleA
ReleaseMutex
FreeLibrary
CreateMutexA
WaitForSingleObject
LoadLibraryA
lstrcatA
SetCurrentDirectoryA
GetSystemDirectoryA
CreateProcessA
GetLastError
GetVersionExA
lstrcmpA
lstrlenA
GetFileAttributesA
DeleteFileA
SetEndOfFile
SetFilePointer
FlushFileBuffers
SetErrorMode
GetCurrentProcess
GetCPInfo
TlsGetValue
lstrcpyA
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
GlobalFlags
GetProcessVersion
FindResourceExA
MulDiv
lstrcpynA
GetModuleFileNameA
GetCurrentThread
GetVersion
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GlobalLock
GlobalUnlock
FindResourceA
LoadResource
LockResource
LocalAlloc
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
InterlockedIncrement
IsBadWritePtr
IsBadReadPtr
GetComputerNameA
GetProcAddress
lstrlenW
WideCharToMultiByte
GetProfileStringA
InitializeCriticalSection
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
user32
GetCursorPos
SetCursor
PostQuitMessage
GetDC
ValidateRect
ReleaseDC
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemInt
GetDlgItemInt
CheckRadioButton
CheckDlgButton
LoadIconA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
AdjustWindowRectEx
ScreenToClient
GetClientRect
CopyRect
IsWindowVisible
GetTopWindow
DestroyMenu
PtInRect
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetClassNameA
GrayStringA
DrawTextA
TabbedTextOutA
ClientToScreen
GetSysColorBrush
LoadCursorA
GetMessageA
GetForegroundWindow
GetWindow
SetWindowLongA
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetWindowRect
MapDialogRect
SetWindowPos
PostMessageA
GetCapture
GetActiveWindow
SetActiveWindow
GetAsyncKeyState
GetWindowLongA
GetClassInfoA
GetFocus
SetFocus
GetDlgItem
IsWindowEnabled
GetParent
wsprintfA
LoadStringA
MessageBoxA
FindWindowA
ShowWindow
SetForegroundWindow
EnableWindow
SendMessageA
TranslateMessage
RegisterClassA
WinHelpA
UnregisterClassA
gdi32
SetBkColor
CreateBitmap
CreateSolidBrush
DeleteObject
SelectObject
GetDeviceCaps
GetStockObject
EnumFontFamiliesExA
DeleteDC
SaveDC
RestoreDC
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
RectVisible
TextOutA
PtVisible
Escape
ExtTextOutA
SetTextColor
GetObjectA
winspool.drv
GetPrinterDriverDirectoryA
GetPrinterDataA
DocumentPropertiesA
GetPrinterDriverA
EnumPortsA
EnumPrintersA
SetPrinterDataA
OpenPrinterA
ClosePrinter
advapi32
OpenServiceW
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA
RegEnumValueA
RegQueryValueExA
RegQueryInfoKeyA
RegEnumKeyA
RegEnumKeyW
RegEnumValueW
RegOpenKeyA
RegFlushKey
CloseServiceHandle
StartServiceW
OpenSCManagerA
ControlService
DeleteService
CreateServiceW
QueryServiceStatus
comctl32
CreatePropertySheetPageA
PropertySheetA
DestroyPropertySheetPage
ord17
ole32
CoInitialize
CoUninitialize
oleaut32
VariantClear
SysFreeString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SysAllocStringLen
VariantInit
Sections
.text Size: 176KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 496KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE