Static task
static1
Behavioral task
behavioral1
Sample
f808174d7caad96f5e26b28df5caa22fef2521b90363b73cad9541da2c21405f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f808174d7caad96f5e26b28df5caa22fef2521b90363b73cad9541da2c21405f.exe
Resource
win10v2004-20220812-en
General
-
Target
f808174d7caad96f5e26b28df5caa22fef2521b90363b73cad9541da2c21405f
-
Size
177KB
-
MD5
65d39568d950f2e1c1af58a5e449ad70
-
SHA1
98c98e6bc850a5668381e5eca9d5fc8c36499174
-
SHA256
f808174d7caad96f5e26b28df5caa22fef2521b90363b73cad9541da2c21405f
-
SHA512
51489cb785dc8acd51d3b767bf0e3f87a2cac1db653d2d5071ead638fd16190f2c184a5b33e67ae9a8b12a772e9c26d632b4b71922d85a3533369193617f02e4
-
SSDEEP
3072:GGgCfVIKbdsVRiySwMRA/GBf95dhnAvYm7q7w853Vnlvb9T6O5IK72bT44c2qCJ4:7tVIKMiySwO1sXkTbl6O97q44PDJuqgd
Malware Config
Signatures
Files
-
f808174d7caad96f5e26b28df5caa22fef2521b90363b73cad9541da2c21405f.exe windows x86
d8a7f60e4f4f9f217ba22356f7fbf2f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
DeleteFileW
LoadLibraryW
GetProcAddress
GetSystemDefaultLangID
GetFileAttributesW
CreateDirectoryW
SetFileAttributesW
GetModuleFileNameW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FindFirstFileW
FindClose
FormatMessageW
LocalFree
GetTempFileNameW
MoveFileExW
GetWindowsDirectoryW
GetCurrentDirectoryW
GetLongPathNameW
MoveFileW
lstrlenW
GetFullPathNameW
GetTempPathW
GetFileSize
FindResourceW
GetPrivateProfileStringW
FlushInstructionCache
SetLastError
RaiseException
GetCurrentProcess
GetCurrentThreadId
FreeLibrary
WriteFile
SetEndOfFile
CreateMutexW
ReleaseMutex
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
GetVersionExA
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
OpenProcess
WaitForSingleObject
CloseHandle
CreateFileW
ReadFile
SetFilePointer
GetLastError
GetModuleHandleW
InterlockedExchange
user32
LoadStringW
DialogBoxParamW
MapWindowPoints
GetWindow
SystemParametersInfoW
SendDlgItemMessageW
SetWindowTextW
MessageBoxW
GetDlgItem
SetWindowLongW
IsWindowVisible
SetFocus
IsWindow
GetActiveWindow
UnregisterClassA
wsprintfW
GetPropW
PostMessageW
SetPropW
MoveWindow
GetParent
GetDesktopWindow
ScreenToClient
GetWindowRect
EnableWindow
SendMessageW
EndDialog
GetClientRect
CreateDialogParamW
LoadIconW
BringWindowToTop
ShowWindow
SetWindowPos
GetWindowLongW
advapi32
RegQueryValueExA
RegOpenKeyExW
RegOpenCurrentUser
RegQueryValueExW
RegCloseKey
RegOpenKeyExA
shell32
SHFileOperationW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteExW
ole32
CoInitialize
CoUninitialize
CoTaskMemFree
OleInitialize
OleUninitialize
msvcr80
_encode_pointer
_controlfp_s
_invoke_watson
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_invalid_parameter_noinfo
strlen
wcslen
memmove_s
??2@YAPAXI@Z
??3@YAXPAX@Z
memcpy_s
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
memcpy
_itow
memset
_purecall
??_V@YAXPAX@Z
_stricmp
_splitpath_s
towupper
towlower
wcschr
free
malloc
_CxxThrowException
__CxxFrameHandler3
_unlock
comctl32
InitCommonControlsEx
PropertySheetW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ