Static task
static1
Behavioral task
behavioral1
Sample
8566c428243ad47addf32638270b5646afdb0baf44fabc9305ce60bd957cd874.exe
Resource
win7-20220812-en
General
-
Target
8566c428243ad47addf32638270b5646afdb0baf44fabc9305ce60bd957cd874
-
Size
844KB
-
MD5
63f7a24ea9068de6a96d8055fe32897a
-
SHA1
cdf5739deee531b3dcc31816e2275c5dc900e8f8
-
SHA256
8566c428243ad47addf32638270b5646afdb0baf44fabc9305ce60bd957cd874
-
SHA512
a0a18c25f48924aed47cd3dadd54d5ab8eb96312a586071759baac11b66d92f90487092382ea9d02a2d52d05866a4fa12b9247508407ec75cc5aaf03042e0b02
-
SSDEEP
12288:R27APLTizDCyzXuXnY12i/XKQH9bjW/RfrW5tG1E7YOXr8euEGKKaRvd:n/3y6pMHx8BuUiErK3vd
Malware Config
Signatures
Files
-
8566c428243ad47addf32638270b5646afdb0baf44fabc9305ce60bd957cd874.exe windows x86
9852860c018d6adc535f271f9e7e4a44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Create
ord17
ImageList_AddMasked
ImageList_Destroy
kernel32
GetCurrentProcess
GetCurrentThread
ResumeThread
CreateProcessA
CloseHandle
WriteFile
CreateFileA
SetPriorityClass
GetModuleFileNameA
GetCommandLineA
lstrcmpiA
GlobalLock
GlobalUnlock
FindResourceA
LoadResource
LockResource
SizeofResource
lstrlenA
GetWindowsDirectoryA
CreateDirectoryA
GetLastError
CopyFileA
RemoveDirectoryA
LoadLibraryA
FreeLibrary
MultiByteToWideChar
lstrcatA
lstrcpyA
GlobalAlloc
DeleteFileA
SetThreadPriority
GetStringTypeA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
TerminateProcess
ExitProcess
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetStartupInfoA
GetModuleHandleA
SetFilePointer
GetSystemTime
GetTimeZoneInformation
GetLocalTime
HeapFree
GetStringTypeW
HeapAlloc
SetStdHandle
FlushFileBuffers
GetProcAddress
CompareStringW
SetEnvironmentVariableA
CompareStringA
LCMapStringW
LCMapStringA
user32
OpenClipboard
EmptyClipboard
DialogBoxParamA
CloseClipboard
GetFocus
SetFocus
GetDlgItemTextA
ShowWindow
SetClipboardData
LoadBitmapA
SendDlgItemMessageA
GetDlgItem
SetDlgItemTextA
SendMessageA
LoadCursorA
SetCursor
IsDlgButtonChecked
MessageBoxA
wsprintfA
SetWindowTextA
ScreenToClient
DestroyCursor
GetCapture
SetCapture
PtInRect
ReleaseCapture
SetWindowLongA
RegisterClassA
UnregisterClassA
GetParent
DefWindowProcA
GetMenuItemCount
DrawTextA
BeginPaint
GetClientRect
CreateDialogParamA
EndPaint
GetMenuItemInfoA
DestroyMenu
GetCursorPos
TrackPopupMenu
GetDlgCtrlID
GetWindowLongA
CreatePopupMenu
InsertMenuItemA
SetClassLongA
MapWindowPoints
InvalidateRect
DestroyWindow
SetWindowPos
GetWindowRect
SetScrollPos
GetSysColor
GetSysColorBrush
CheckDlgButton
EnableMenuItem
DestroyIcon
LoadIconA
IsWindowEnabled
UpdateWindow
EndDialog
EnableWindow
GetDesktopWindow
ClientToScreen
gdi32
GetStockObject
SetBkColor
SetTextColor
SetBkMode
Ellipse
DeleteObject
LineTo
MoveToEx
CreatePen
SelectObject
CreateFontIndirectA
CreateSolidBrush
GetObjectA
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
shell32
SHGetSpecialFolderLocation
SHBrowseForFolderA
CommandLineToArgvW
SHGetPathFromIDListA
ShellExecuteA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
winmm
PlaySoundA
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 62KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 685KB - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE