Static task
static1
Behavioral task
behavioral1
Sample
71da03c704d5a5b97ea83ee45d4e85d72a6d81d02746081372cf55d35fc5e4b1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
71da03c704d5a5b97ea83ee45d4e85d72a6d81d02746081372cf55d35fc5e4b1.exe
Resource
win10v2004-20220812-en
General
-
Target
71da03c704d5a5b97ea83ee45d4e85d72a6d81d02746081372cf55d35fc5e4b1
-
Size
331KB
-
MD5
08a227677d8b80cf1fbabc6e9078b220
-
SHA1
1e592ab20cd90c9ae7fc5bf4bdc0706e8f244fea
-
SHA256
71da03c704d5a5b97ea83ee45d4e85d72a6d81d02746081372cf55d35fc5e4b1
-
SHA512
b80a91b5b05e652bc3b1bfc4eee0452dcd94207bb03f8bf4236b85d4048807694424428a0164184793d449c17122e834970b8c34683eadff9275694fdb83f737
-
SSDEEP
6144:4XElKYAGBzf4AtCirycBdr7/rryhb/rnWtGFVoBI:4XElKMr4AjrywrWFQuVv
Malware Config
Signatures
Files
-
71da03c704d5a5b97ea83ee45d4e85d72a6d81d02746081372cf55d35fc5e4b1.exe windows x86
25a8164eab592477f82700ee1267c0e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
comdlg32
GetOpenFileNameA
GetOpenFileNameW
oleaut32
SysStringByteLen
VariantCopy
VariantClear
SysAllocString
ole32
CoInitialize
CoUninitialize
user32
DialogBoxParamW
DialogBoxParamA
SetWindowLongA
GetWindowLongA
GetWindowRect
MoveWindow
SystemParametersInfoA
GetWindowTextLengthW
GetWindowTextW
GetWindowTextLengthA
GetWindowTextA
SetWindowTextW
SendMessageW
LoadStringW
InvalidateRect
CharPrevA
CharUpperW
CharUpperA
LoadIconA
IsWindowEnabled
SetWindowTextA
IsDlgButtonChecked
ShowWindow
CheckDlgButton
MessageBoxW
wsprintfA
KillTimer
EndDialog
EnableWindow
SetDlgItemTextA
GetDlgItem
SendMessageA
SetTimer
PostMessageA
LoadCursorA
ScreenToClient
MapDialogRect
SetCursor
LoadStringA
advapi32
RegOpenKeyExA
RegQueryValueExW
RegQueryValueExA
RegSetValueExW
RegSetValueExA
RegDeleteValueW
RegDeleteValueA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
SHGetMalloc
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
memset
_iob
wcsncmp
free
malloc
memcpy
wcslen
memcmp
_purecall
memmove
_CxxThrowException
__CxxFrameHandler
_isatty
_controlfp
_fileno
kernel32
SetPriorityClass
WaitForMultipleObjects
GetDriveTypeA
FileTimeToLocalFileTime
GetProcessTimes
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
OpenEventA
GetStdHandle
GetSystemTime
SystemTimeToFileTime
FileTimeToDosDateTime
GetModuleHandleA
GlobalMemoryStatus
GetSystemInfo
GetModuleHandleW
FileTimeToSystemTime
CompareFileTime
GetProcAddress
GetCurrentProcess
VirtualAlloc
WriteFile
ReadFile
DeviceIoControl
SetFilePointer
GetFileSize
CreateFileA
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindClose
GetTempFileNameW
GetTempFileNameA
GetTempPathW
GetTempPathA
SearchPathW
SearchPathA
GetCurrentDirectoryW
SetCurrentDirectoryW
SetCurrentDirectoryA
VirtualFree
WaitForSingleObject
CreateEventA
SetEvent
InitializeCriticalSection
GetStartupInfoA
MoveFileW
SetEndOfFile
GetCurrentDirectoryA
GetFullPathNameW
GetFullPathNameA
lstrlenA
DeleteFileW
DeleteFileA
CreateDirectoryW
RemoveDirectoryW
SetFileAttributesW
MoveFileA
RemoveDirectoryA
SetFileAttributesA
SetLastError
CreateFileW
SetFileTime
CloseHandle
GetWindowsDirectoryW
GetWindowsDirectoryA
FormatMessageW
FormatMessageA
LocalFree
GetModuleFileNameW
GetModuleFileNameA
AreFileApisANSI
LoadLibraryA
LoadLibraryExA
FreeLibrary
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetVersionExA
DeleteCriticalSection
Sleep
GetTickCount
lstrcatA
LeaveCriticalSection
EnterCriticalSection
CreateDirectoryA
Sections
.text Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE