Static task
static1
Behavioral task
behavioral1
Sample
7558d7ac40211daaa6ad46b140ff98c31a7165ab162e6c1613ff0355bb1e4075.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7558d7ac40211daaa6ad46b140ff98c31a7165ab162e6c1613ff0355bb1e4075.exe
Resource
win10v2004-20220812-en
General
-
Target
7558d7ac40211daaa6ad46b140ff98c31a7165ab162e6c1613ff0355bb1e4075
-
Size
280KB
-
MD5
6dff2e455f804095db3c07264a90f938
-
SHA1
4ad5c677ab2fd85d618951047598e87ecd701ad8
-
SHA256
7558d7ac40211daaa6ad46b140ff98c31a7165ab162e6c1613ff0355bb1e4075
-
SHA512
5f2d732da682f542c9ee148081adba704772bd232d0304777f20408986848415cec9a1d4b2b44d11b0c1f193f1e7e7b038edb8f694894abf4358d8fec59be3c2
-
SSDEEP
6144:hYhmBPgpg8z1wHoTMcf5muq4Bk80c6NQr5y9DkgVLfTBaceMLRK4NqIL34l:hYwBPgpg8ZGoTMcs4Bk80c6NQr5ODNNc
Malware Config
Signatures
Files
-
7558d7ac40211daaa6ad46b140ff98c31a7165ab162e6c1613ff0355bb1e4075.exe windows x86
cab99ee9df1e2a4f19c0f5a91df286e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileSectionA
GetProcAddress
LoadLibraryA
GetUserDefaultLangID
GetFileAttributesA
GetCurrentDirectoryA
GetCurrentProcess
GetModuleHandleA
CreateThread
GetLocalTime
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
GetTimeZoneInformation
HeapReAlloc
lstrlenA
GetStringTypeW
GetStringTypeA
RtlUnwind
VirtualFree
HeapCreate
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetWindowsDirectoryA
CopyFileA
DeleteFileA
Sleep
GetVersionExA
GetSystemInfo
WinExec
GetSystemDirectoryA
FreeLibrary
QueryDosDeviceA
DefineDosDeviceA
TerminateProcess
SetEnvironmentVariableA
GetOEMCP
GetVersion
HeapDestroy
SetLastError
GetLastError
CreateFileA
SetFilePointer
WriteFile
VirtualAlloc
CloseHandle
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapFree
ExitProcess
GetCommandLineA
GetStartupInfoA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindNextFileA
FindFirstFileA
user32
GetDlgItemTextA
CharUpperA
DestroyWindow
ShowWindow
DialogBoxParamA
EnableWindow
FindWindowExA
EnumChildWindows
GetWindowTextA
GetDlgItem
SendMessageA
IsDlgButtonChecked
SetWindowTextA
DefWindowProcA
LoadIconA
CheckDlgButton
EndDialog
SetDlgItemTextA
SendDlgItemMessageA
LoadStringA
MessageBoxA
comdlg32
GetSaveFileNameA
advapi32
RegDeleteKeyA
RegQueryValueExA
RegEnumValueA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
CloseServiceHandle
OpenServiceA
DeleteService
RegCloseKey
OpenSCManagerA
CreateServiceA
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
comctl32
InitCommonControlsEx
ord17
cfgmgr32
CM_Get_Sibling
CM_Get_Child
CM_Reenumerate_DevNode
CM_Locate_DevNodeA
CM_Get_DevNode_Status
CM_Get_Device_IDA
CM_Get_Parent
setupapi
SetupDiOpenDeviceInfoA
SetupDiCreateDeviceInfoList
SetupDiSetSelectedDevice
SetupDiCallClassInstaller
SetupDiGetSelectedDriverA
SetupDiGetINFClassA
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoA
SetupDiGetDriverInfoDetailA
SetupDiDestroyDriverInfoList
SetupDiDestroyDeviceInfoList
SetupDiSetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstallParamsA
SetupDiSetDeviceInstallParamsA
SetupDiGetDeviceRegistryPropertyA
SetupDiOpenDevRegKey
Sections
.text Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE