Static task
static1
Behavioral task
behavioral1
Sample
7bb53a5b0faa20860d420d14d254ce82adc1c0db8571950c3698e54866ba5843.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7bb53a5b0faa20860d420d14d254ce82adc1c0db8571950c3698e54866ba5843.exe
Resource
win10v2004-20220812-en
General
-
Target
7bb53a5b0faa20860d420d14d254ce82adc1c0db8571950c3698e54866ba5843
-
Size
252KB
-
MD5
23ab9578a1125870f23227170f47322b
-
SHA1
b922d35624447cac1f820c49c7f1cb7463cf760f
-
SHA256
7bb53a5b0faa20860d420d14d254ce82adc1c0db8571950c3698e54866ba5843
-
SHA512
54c07a5504de191025331a1c3c6684212e846b2f7d8cf4cae7a7b43f612e846fa337cafba4fc161debfb02aa67f974d47eb1ba5618471704faac3baaf8733bad
-
SSDEEP
6144:OmeXM4HzkDBcLvVLNzti4zkq+UX7MezRnjV:3eJHzkyZuUX7M4RjV
Malware Config
Signatures
Files
-
7bb53a5b0faa20860d420d14d254ce82adc1c0db8571950c3698e54866ba5843.exe windows x86
9541b8cf4b324f412683a66423d0812f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
CreateFileA
MulDiv
SetLastError
GlobalUnlock
GlobalLock
FreeLibrary
SizeofResource
LoadResource
LoadLibraryExA
GetModuleHandleA
GlobalFree
GlobalHandle
LockResource
lstrcpyA
lstrcpynA
DeleteFileA
Module32First
CreateToolhelp32Snapshot
CopyFileA
RemoveDirectoryA
CreateDirectoryA
GlobalAddAtomA
GetSystemDirectoryA
SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
Sleep
GetOEMCP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
TerminateThread
GetConsoleCP
GetFileType
SetHandleCount
SetFilePointer
ReadFile
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStdHandle
HeapCreate
RtlUnwind
GetStartupInfoA
GetCommandLineA
CreateThread
ExitThread
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualProtect
LocalFree
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcAddress
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
IsDBCSLeadByte
lstrcmpiA
InterlockedDecrement
InterlockedIncrement
lstrlenW
lstrcmpA
OutputDebugStringA
InterlockedExchange
GetCurrentThreadId
SetPriorityClass
GetCurrentThread
SetThreadPriority
ExitProcess
lstrcatA
GetModuleFileNameA
lstrlenA
CloseHandle
GetConsoleMode
FindResourceA
GlobalAlloc
GetCurrentProcess
FlushInstructionCache
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetEnvironmentStrings
user32
GetFocus
GetActiveWindow
DialogBoxParamA
UnregisterClassA
SetWindowLongA
GetWindowLongA
ShowWindow
SetForegroundWindow
FindWindowA
GetClassNameA
IsWindowEnabled
GetWindowThreadProcessId
DefWindowProcA
UnregisterHotKey
GetSystemMetrics
CharNextA
LoadImageA
RegisterHotKey
GetDlgCtrlID
GetSysColorBrush
GetKeyboardLayout
MapDialogRect
UnloadKeyboardLayout
SetWindowContextHelpId
MessageBoxA
SendDlgItemMessageA
EnableWindow
KillTimer
SetTimer
DialogBoxIndirectParamA
RegisterWindowMessageA
GetWindowTextLengthA
DestroyWindow
SetWindowTextA
CreateAcceleratorTableA
CreateWindowExA
RegisterClassExA
LoadCursorA
GetClassInfoExA
IsWindow
GetDesktopWindow
SetFocus
GetWindowTextA
DestroyAcceleratorTable
BeginPaint
EndPaint
CallWindowProcA
FillRect
ReleaseCapture
IsChild
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
ClientToScreen
MoveWindow
GetSysColor
SendMessageA
EndDialog
GetWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
GetDlgItem
GetParent
gdi32
GetObjectA
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject
DeleteObject
GetStockObject
SetBkMode
SetTextColor
CreateFontA
CreateSolidBrush
shell32
SHChangeNotify
ShellExecuteA
imm32
ImmIsIME
ImmInstallIMEA
advapi32
RegDeleteKeyA
ControlService
DeleteService
OpenSCManagerA
CreateServiceA
CloseServiceHandle
OpenServiceA
StartServiceA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
ole32
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
StringFromGUID2
OleLockRunning
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
OleUninitialize
OleInitialize
oleaut32
SysFreeString
SysAllocStringLen
SysAllocString
DispCallFunc
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
VariantClear
VariantInit
SysStringByteLen
VarUI4FromStr
SysStringLen
comctl32
InitCommonControlsEx
wininet
InternetOpenA
InternetReadFile
InternetOpenUrlA
Sections
.text Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ