Static task
static1
Behavioral task
behavioral1
Sample
97eb60736ffb10ff4fd244174d26744e93b37a65a388f11e6c20d3cfffc20a54.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
97eb60736ffb10ff4fd244174d26744e93b37a65a388f11e6c20d3cfffc20a54.exe
Resource
win10v2004-20220812-en
General
-
Target
97eb60736ffb10ff4fd244174d26744e93b37a65a388f11e6c20d3cfffc20a54
-
Size
372KB
-
MD5
6f35e35922490c06cde485d0ce3fe3e9
-
SHA1
7f653145bf6e38bd0851d795dd077b2b0484c5d8
-
SHA256
97eb60736ffb10ff4fd244174d26744e93b37a65a388f11e6c20d3cfffc20a54
-
SHA512
d61cad2fc47e985ef7ec7db28658b7d44810282fffb9ccd2c58e11d2817209759296328f77776af11a6ac86eb3cc1968a251af9d8704e20bf6ea97bdaddcfc55
-
SSDEEP
6144:ibLcXA1081ITASSIHLdG5VKv8o85gRBoPgx5bIGZcH1fgDsGspK8WetutTgSW:Od1Qvowbq14Dv8uTgSW
Malware Config
Signatures
Files
-
97eb60736ffb10ff4fd244174d26744e93b37a65a388f11e6c20d3cfffc20a54.exe windows x86
16b472101fb62815c6680d17940dfaf9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileTime
GetFileAttributesA
GetFileTime
RtlUnwind
HeapFree
HeapAlloc
RaiseException
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitProcess
VirtualAlloc
HeapReAlloc
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetACP
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetWindowsDirectoryA
SetCurrentDirectoryA
GetTempFileNameA
GetProfileIntA
AreFileApisANSI
GetCommandLineW
FileTimeToLocalFileTime
SetErrorMode
SystemTimeToFileTime
FileTimeToSystemTime
CreateFileA
GetCurrentProcess
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
ReadFile
DeleteFileA
MoveFileA
GetCurrentDirectoryA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetCurrentProcessId
CloseHandle
InterlockedDecrement
GetModuleFileNameW
FormatMessageA
LocalFree
MulDiv
GetCurrentThread
ConvertDefaultLocale
GetModuleFileNameA
GetVersion
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GlobalAlloc
GetProfileStringA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
MultiByteToWideChar
lstrcmpW
GetVersionExA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
lstrlenA
GetLastError
SetLastError
GetModuleHandleA
SetFilePointer
GetDateFormatA
GetTimeFormatA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
LoadLibraryA
GetComputerNameA
GetProcAddress
GetTickCount
FreeLibrary
user32
PostQuitMessage
ShowWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
GetKeyState
IsWindowVisible
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
OffsetRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
CharUpperBuffA
MapDialogRect
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
ReleaseDC
GetDC
CopyRect
IsWindow
LoadCursorA
SetForegroundWindow
LoadStringA
SetCursor
PeekMessageA
TranslateMessage
DispatchMessageA
GetSystemMetrics
LoadIconA
EnableWindow
KillTimer
SetTimer
UpdateWindow
GetClientRect
IsIconic
SetMenu
PostMessageA
SendMessageA
UnregisterClassA
GetSysColorBrush
WindowFromPoint
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowThreadProcessId
GetMessageA
GetCursorPos
ValidateRect
DestroyMenu
GetClassInfoExA
CheckMenuRadioItem
LoadMenuA
EnableMenuItem
CheckMenuItem
DrawIcon
wsprintfA
GetClassLongA
gdi32
RestoreDC
SetMapMode
DeleteObject
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
SaveDC
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
ExtTextOutA
GetDeviceCaps
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
OffsetViewportOrgEx
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegFlushKey
shell32
DragQueryFileA
ShellExecuteExA
shlwapi
PathFindFileNameA
PathFindExtensionA
oleaut32
VariantInit
VariantChangeType
VariantClear
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
wkwin32
ord44
ord50
ord38
ord65
ord42
ord39
ord40
ord48
ord20
ord46
ord54
ord304
ord305
ord306
ord52
ord33
ord61
ord45
Sections
.text Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE