Static task
static1
Behavioral task
behavioral1
Sample
7604d6a6b0077f81aa6c9b62377b3a92ffd1e5706674ed2eeb1fcbf24c678f7e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7604d6a6b0077f81aa6c9b62377b3a92ffd1e5706674ed2eeb1fcbf24c678f7e.exe
Resource
win10v2004-20220812-en
General
-
Target
7604d6a6b0077f81aa6c9b62377b3a92ffd1e5706674ed2eeb1fcbf24c678f7e
-
Size
320KB
-
MD5
661b783cfa07caa331b30eb315120991
-
SHA1
341bba92cf9ad56120ba2054ffef79847a1a358e
-
SHA256
7604d6a6b0077f81aa6c9b62377b3a92ffd1e5706674ed2eeb1fcbf24c678f7e
-
SHA512
a749c622bf775716ccdcb45117187f23a5691e816297ff8567f487754e9b27761a4e083808c1ccad18e4e7668487a1e60918bf0af6c4971eb8865438d12547d8
-
SSDEEP
6144:AWFSGMj45hcrtViBgWm1GAmKWznw8ZN7R+8pEUn:AgUtweBaKWz9NFNBn
Malware Config
Signatures
Files
-
7604d6a6b0077f81aa6c9b62377b3a92ffd1e5706674ed2eeb1fcbf24c678f7e.exe windows x86
112bd67aeb388b5c628839d44570bab2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalAddAtomW
GetVersionExA
LoadLibraryA
GlobalFindAtomW
GetCommandLineA
HeapFree
GetSystemTimeAsFileTime
RtlUnwind
ExitProcess
RaiseException
HeapReAlloc
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GlobalFlags
LCMapStringW
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetTimeZoneInformation
VirtualAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryA
GetDriveTypeA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
CreateFileA
GetModuleHandleA
GetCurrentProcessId
GetFileTime
GetFileAttributesW
ReleaseMutex
CreateMutexW
GetFullPathNameW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
SetErrorMode
SetLastError
GlobalFree
GlobalUnlock
LocalFree
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
LoadLibraryW
CompareStringA
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
FreeLibrary
GetProcAddress
HeapAlloc
lstrlenW
FormatMessageW
GetProcessHeap
InterlockedDecrement
InterlockedIncrement
GetCurrentProcess
GetLocaleInfoW
GetVolumeInformationW
CloseHandle
WaitForSingleObject
GetModuleFileNameW
CreateFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLocalTime
FindClose
FindNextFileW
WideCharToMultiByte
FindFirstFileW
GetCurrentThreadId
GetCommandLineW
GetLastError
DeleteFileW
GetModuleHandleW
WritePrivateProfileStringW
GetPrivateProfileStringW
MultiByteToWideChar
SizeofResource
LoadResource
LockResource
LCMapStringA
FindResourceW
user32
ShowWindow
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
CopyRect
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
LoadCursorW
GetSysColorBrush
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
PostQuitMessage
UnregisterClassA
PostMessageW
GetSubMenu
GetSysColor
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
UnhookWindowsHookEx
SetCursor
DestroyMenu
GetClassInfoW
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSystemMetrics
CharUpperW
MessageBoxW
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongW
GetParent
SendMessageW
GetWindowThreadProcessId
GetWindowTextW
ValidateRect
GetCursorPos
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
gdi32
GetStockObject
Escape
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetDeviceCaps
ExtTextOutW
TextOutW
RectVisible
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap
SelectObject
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
shlwapi
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE