Static task
static1
Behavioral task
behavioral1
Sample
37091939c5e71c8a6f15a4bfc5b7f99491055a03be540c9f4d4c3128eacbb9a7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
37091939c5e71c8a6f15a4bfc5b7f99491055a03be540c9f4d4c3128eacbb9a7.exe
Resource
win10v2004-20220812-en
General
-
Target
37091939c5e71c8a6f15a4bfc5b7f99491055a03be540c9f4d4c3128eacbb9a7
-
Size
123KB
-
MD5
4192b5b146414d5ba9fc5ef16b203d90
-
SHA1
62ee2ca39183447e2b5200a158859dbe4c0fcfb2
-
SHA256
37091939c5e71c8a6f15a4bfc5b7f99491055a03be540c9f4d4c3128eacbb9a7
-
SHA512
d44f00c3426a58f96ec62f5f0816f371d7f04b780781563dbd4a74a27dfc4df4100beef027846180874391747284b9138dedcb89ff8808a3aca367c8c2fba7a4
-
SSDEEP
3072:CvHNGa2wsioMTitHDjdS+M6/7I9iUq2OXPo:CPuwXontHNj73n
Malware Config
Signatures
Files
-
37091939c5e71c8a6f15a4bfc5b7f99491055a03be540c9f4d4c3128eacbb9a7.exe windows x86
bf753d3822bc7ea034403911b685b6ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetFilePointer
VirtualProtect
WideCharToMultiByte
GlobalHandle
GlobalFree
ExpandEnvironmentStringsA
GetFullPathNameA
TerminateProcess
GetEnvironmentStrings
lstrcmpA
LocalFree
GetModuleHandleA
GetVersion
GetStartupInfoA
GetTickCount
GetThreadLocale
GetShortPathNameA
user32
MessageBeep
EnumThreadWindows
DrawEdge
RegisterClassA
GetMenuItemCount
EndPaint
SetWindowPlacement
GetWindowRect
LoadCursorA
SetRect
GetDCEx
CheckMenuItem
GetMenu
ShowWindow
msvcrt
log10
fgetpos
_acmdln
_stat
_purecall
_iob
__setusermatherr
wcschr
__set_app_type
__p__fmode
_initterm
__p__commode
__getmainargs
_except_handler3
_XcptFilter
_umask
_wcsupr
exit
_adjust_fdiv
oleaut32
SysStringByteLen
SafeArrayUnaccessData
SysFreeString
SafeArrayGetUBound
SysAllocStringLen
SysAllocStringByteLen
VariantInit
SafeArrayRedim
version
VerLanguageNameA
GetFileVersionInfoSizeA
VerInstallFileW
VerFindFileW
VerQueryValueA
VerInstallFileA
GetFileVersionInfoW
GetFileVersionInfoA
comctl32
CreateToolbarEx
ImageList_DragEnter
ImageList_GetImageCount
ImageList_Replace
ImageList_LoadImageA
ImageList_SetOverlayImage
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_DrawEx
ImageList_DragLeave
shell32
DragFinish
SHGetMalloc
ExtractIconW
ExtractIconExW
DoEnvironmentSubstW
SHGetSpecialFolderPathA
SHFileOperationW
advapi32
OpenProcessToken
GetUserNameA
RegSetValueExA
RegOpenKeyW
RegQueryInfoKeyA
ole32
OleIsCurrentClipboard
CoLoadLibrary
CreateStreamOnHGlobal
OleSetClipboard
CoGetMalloc
IIDFromString
GetRunningObjectTable
Sections
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ