Static task
static1
Behavioral task
behavioral1
Sample
1de6e0cef28b068aa12b5e97823ea761e4ca1e1621c1008fa50bd6f397ebd8d8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1de6e0cef28b068aa12b5e97823ea761e4ca1e1621c1008fa50bd6f397ebd8d8.exe
Resource
win10v2004-20220812-en
General
-
Target
1de6e0cef28b068aa12b5e97823ea761e4ca1e1621c1008fa50bd6f397ebd8d8
-
Size
444KB
-
MD5
66e8d29f38975d512a801067b84c8700
-
SHA1
7fa684611368f87383928d292c48cdb5b91f471c
-
SHA256
1de6e0cef28b068aa12b5e97823ea761e4ca1e1621c1008fa50bd6f397ebd8d8
-
SHA512
6cf6fe7307c9e645ab3e46e7cab2b7f2761cddc3bdb6d41aedf847013f9b8b85fe15e92a01dfccf540bc0e2575a0924b50a477114316b7eb4b36fcf4d3a65e21
-
SSDEEP
6144:6vO75mtSpu4hBniHQ2O7svtG/nOd/F6tM2UPu:6vQ5mtSNDnuQ2O7s1UOvAMPG
Malware Config
Signatures
Files
-
1de6e0cef28b068aa12b5e97823ea761e4ca1e1621c1008fa50bd6f397ebd8d8.exe windows x86
419307b339143eae3163c5ad2eb57387
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FindWindowExA
SendMessageA
GetParent
GetMenu
ShowWindow
GetClientRect
GetWindowRect
ClientToScreen
EnableWindow
SetWindowPos
DefMDIChildProcA
SetActiveWindow
ScreenToClient
GetWindowInfo
AdjustWindowRectEx
PostMessageA
GetPropA
CallWindowProcA
SetPropA
SetWindowLongA
GetClassNameA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
PeekMessageA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjectsEx
PostQuitMessage
GetKeyState
LoadIconA
LoadCursorA
RegisterClassExA
SystemParametersInfoA
AdjustWindowRect
CreateWindowExA
IsWindowVisible
GetWindowPlacement
SetWindowPlacement
UpdateWindow
GetForegroundWindow
SetForegroundWindow
SetFocus
GetFocus
DefFrameProcA
FillRect
SetScrollInfo
GetScrollInfo
DrawFocusRect
LoadStringA
LoadBitmapA
DrawEdge
InsertMenuItemA
GetMenuItemID
GetSubMenu
SetMenuItemInfoA
GetMenuItemCount
GetMenuItemInfoA
RemoveMenu
DestroyMenu
DeleteMenu
DrawMenuBar
TrackMouseEvent
ChildWindowFromPointEx
WindowFromPoint
ChildWindowFromPoint
GetAncestor
TranslateAcceleratorA
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
MapVirtualKeyA
PtInRect
UnregisterClassA
DrawTextA
GetQueueStatus
GetActiveWindow
GetSystemMetrics
FindWindowA
EnumThreadWindows
AttachThreadInput
IsIconic
GetTopWindow
GetWindowLongA
GetWindow
GetWindowThreadProcessId
AllowSetForegroundWindow
IsWindow
GetSysColorBrush
BringWindowToTop
IsWindowEnabled
RemovePropA
EnumChildWindows
IsZoomed
MoveWindow
GetWindowTextA
SetCursor
MessageBeep
ReleaseDC
MessageBoxA
GetWindowTextLengthA
GetSysColor
CreateMenu
SetMenu
UpdateLayeredWindow
InvalidateRect
GetDC
KillTimer
GetMessageA
SetTimer
DestroyWindow
EnumDisplayMonitors
GetMonitorInfoA
GetUpdateRect
TileWindows
CascadeWindows
GetCursorPos
SetWindowTextA
CreatePopupMenu
RegisterWindowMessageA
DefWindowProcA
ReleaseCapture
SetCapture
EndPaint
DrawFrameControl
BeginPaint
MonitorFromPoint
ole32
OleUninitialize
OleInitialize
CoInitialize
CoCreateInstance
CoUninitialize
shlwapi
UrlGetLocationA
UrlGetPartA
UrlIsA
advapi32
CryptDestroyHash
CryptHashData
CryptGetHashParam
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
CryptGenRandom
CryptAcquireContextA
CryptReleaseContext
CryptCreateHash
uxtheme
GetThemeSysFont
comdlg32
PageSetupDlgA
PrintDlgA
kernel32
GetCPInfo
GetOEMCP
GetACP
FatalAppExitA
HeapFree
VirtualFree
HeapCreate
HeapDestroy
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
TlsAlloc
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
GetVersionExA
IsProcessorFeaturePresent
VirtualProtect
WaitForSingleObject
FindCloseChangeNotification
FindFirstChangeNotificationA
GetCurrentProcessId
GetModuleHandleA
SetEvent
GetCommandLineA
CreateProcessA
GetStdHandle
EnterCriticalSection
SetErrorMode
LoadLibraryA
GetProcAddress
FreeLibrary
OpenProcess
GetExitCodeProcess
CloseHandle
CreateEventA
ResumeThread
LocalFree
HeapAlloc
GetVersion
Sleep
SetLastError
ReleaseMutex
GetLastError
CreateMutexA
GetCurrentThreadId
GetModuleFileNameA
OutputDebugStringA
GetSystemDirectoryA
GetLocaleInfoA
GetSystemTimeAsFileTime
FindNextChangeNotification
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
MulDiv
lstrlenA
LoadResource
LockResource
FreeResource
FindResourceA
SizeofResource
GetTickCount
ReadFile
GetMailslotInfo
CreateFileA
WriteFile
CreateMailslotA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetSystemInfo
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
VirtualAlloc
HeapReAlloc
IsBadWritePtr
RtlUnwind
VirtualQuery
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetFileAttributesA
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTimeFormatA
Sections
.text Size: 228KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 156KB - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ