Static task
static1
Behavioral task
behavioral1
Sample
2658a32edcd790d1a5248b7811688510d9cb16974bc2989ad0061e2d9df55f80.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2658a32edcd790d1a5248b7811688510d9cb16974bc2989ad0061e2d9df55f80.exe
Resource
win10v2004-20220812-en
General
-
Target
2658a32edcd790d1a5248b7811688510d9cb16974bc2989ad0061e2d9df55f80
-
Size
428KB
-
MD5
4341b1c92725161cb0d22d23d3688d50
-
SHA1
83905c1079cc11f918e0f1964c0b50e9819e09a2
-
SHA256
2658a32edcd790d1a5248b7811688510d9cb16974bc2989ad0061e2d9df55f80
-
SHA512
ce454e133be5fa9ee078ca16016a535d79e8fe43fba067ba071d5b6bbaaa4ecc33d6625428ec55f7d660fb1ef7df38e9c70553fc3e112e8a77305b951e57ffb1
-
SSDEEP
12288:4tJqVGVoCt6BgmW1lesaL6yRhzzJyFDh:4tJqVw6BpW1lesaGyRhzUFDh
Malware Config
Signatures
Files
-
2658a32edcd790d1a5248b7811688510d9cb16974bc2989ad0061e2d9df55f80.exe windows x86
5d3ad2d927c99f80d7bf570842cdef3b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyW
RegSetValueExW
RegEnumKeyA
CryptGenKey
RegSetValueExA
DuplicateTokenEx
DuplicateToken
RegQueryInfoKeyW
LookupPrivilegeNameA
CryptSetKeyParam
CryptSetHashParam
CryptSignHashW
CryptGetHashParam
CryptDestroyHash
RegOpenKeyExA
CryptAcquireContextW
wininet
FtpFindFirstFileA
InternetInitializeAutoProxyDll
RetrieveUrlCacheEntryFileW
UnlockUrlCacheEntryFile
FtpPutFileW
FreeUrlCacheSpaceA
HttpSendRequestA
FindFirstUrlCacheContainerA
user32
CharLowerW
CopyImage
DefWindowProcW
WindowFromPoint
SubtractRect
DrawIcon
MessageBoxExA
WINNLSEnableIME
CallNextHookEx
GetScrollRange
ScreenToClient
RegisterWindowMessageW
GetWindowLongA
RegisterClassW
SetCursor
GetClassNameW
SetWindowsHookA
GetSubMenu
IsCharUpperA
GetWindowInfo
RemovePropA
GetClassInfoExA
TranslateAcceleratorW
CreateIconFromResource
MapDialogRect
LoadMenuIndirectW
DdeFreeDataHandle
SetRectEmpty
MessageBoxIndirectA
MenuItemFromPoint
GetThreadDesktop
SetShellWindow
GetPriorityClipboardFormat
DestroyCaret
RegisterClassExA
RegisterClassA
DestroyWindow
DrawFocusRect
RealChildWindowFromPoint
OemToCharW
FrameRect
GetTitleBarInfo
DrawMenuBar
CreateWindowExW
AttachThreadInput
UnregisterClassA
GetDesktopWindow
ToUnicodeEx
WINNLSGetIMEHotkey
ShowWindow
SetWindowsHookExW
GetOpenClipboardWindow
SwapMouseButton
GetKeyboardLayoutNameW
PostThreadMessageW
CreateMDIWindowA
EnumWindowStationsW
FindWindowExA
GetMessageW
PaintDesktop
GetKeyboardLayoutList
IsIconic
CreateMDIWindowW
RegisterClipboardFormatW
DlgDirSelectComboBoxExW
TranslateAcceleratorA
CharUpperBuffW
VkKeyScanExA
IntersectRect
ReplyMessage
ArrangeIconicWindows
SendMessageTimeoutA
GetAltTabInfo
GetClassInfoA
ModifyMenuA
ShowWindowAsync
UnregisterDeviceNotification
LoadMenuA
BeginPaint
IsRectEmpty
CharNextA
ValidateRgn
GetMenuCheckMarkDimensions
SetMenuInfo
CharLowerBuffW
MapWindowPoints
MonitorFromWindow
EqualRect
GetClipboardData
SetWindowTextW
SetFocus
GetMessageTime
MessageBoxA
GetInputState
SetDeskWallpaper
OpenDesktopW
MessageBoxIndirectW
BroadcastSystemMessageW
gdi32
GetTextExtentPointA
IntersectClipRect
GdiPlayScript
comctl32
ImageList_GetImageInfo
ImageList_SetBkColor
ImageList_DrawIndirect
ImageList_EndDrag
CreateMappedBitmap
ImageList_DragMove
ImageList_SetFlags
InitCommonControlsEx
ImageList_Create
ImageList_AddMasked
ImageList_Add
GetEffectiveClientRect
ImageList_GetFlags
ImageList_GetImageCount
ImageList_Draw
CreatePropertySheetPageW
ImageList_DragEnter
CreateUpDownControl
ImageList_LoadImageW
ImageList_LoadImageA
CreateToolbar
ImageList_SetDragCursorImage
ImageList_ReplaceIcon
DrawStatusTextA
ImageList_SetOverlayImage
kernel32
SystemTimeToFileTime
lstrcpy
LCMapStringW
GetCurrentDirectoryW
EnumResourceTypesW
lstrcmp
EnumResourceNamesA
SetConsoleCP
SetEnvironmentVariableA
QueryPerformanceCounter
GetStringTypeA
GetOEMCP
WriteConsoleInputA
HeapAlloc
HeapCreate
LocalShrink
IsValidLocale
GetFileAttributesExA
EnterCriticalSection
GetCurrentThread
CreateFileMappingA
SetHandleCount
ResetEvent
GetCommandLineA
WriteConsoleOutputCharacterW
VirtualFree
LeaveCriticalSection
GetTimeFormatA
GetCalendarInfoA
ReadFile
VirtualAllocEx
TlsSetValue
GetSystemDirectoryW
TlsGetValue
GetACP
MultiByteToWideChar
GetStringTypeW
SetStdHandle
EnumDateFormatsExW
GetStartupInfoA
HeapDestroy
GetFileType
ExitProcess
RtlUnwind
MapViewOfFileEx
EnumSystemCodePagesA
RtlMoveMemory
GetEnvironmentStringsW
GetProcAddress
CreateMutexA
PulseEvent
CreateDirectoryW
HeapFree
TerminateThread
DeleteCriticalSection
GetSystemTimeAsFileTime
FormatMessageA
LoadLibraryA
OpenSemaphoreA
TerminateProcess
LocalFlags
VirtualAlloc
GetLocaleInfoW
CreateFileA
GetCPInfo
GetStdHandle
RemoveDirectoryW
GetTickCount
DebugBreak
WritePrivateProfileStructA
FlushFileBuffers
FreeResource
CloseHandle
TlsFree
IsValidCodePage
GetUserDefaultLCID
GetLocalTime
WideCharToMultiByte
FreeEnvironmentStringsA
WriteFile
GetCurrencyFormatW
GetPrivateProfileStringA
WriteConsoleA
GetModuleFileNameA
GetProfileIntA
SetEndOfFile
IsBadReadPtr
GetSystemInfo
EnumCalendarInfoA
WaitForMultipleObjects
VirtualProtect
SetConsoleCtrlHandler
InterlockedDecrement
CreateDirectoryExA
GetLastError
SleepEx
GetModuleHandleA
ContinueDebugEvent
GetCommandLineW
EnumResourceLanguagesA
IsBadWritePtr
GetEnvironmentStrings
FindFirstFileExW
UnhandledExceptionFilter
CompareStringA
HeapReAlloc
GetCurrentThreadId
VirtualQuery
LCMapStringA
SetLastError
TlsAlloc
HeapValidate
GetDateFormatA
WritePrivateProfileStringW
LocalUnlock
InterlockedExchange
GetStartupInfoW
CompareStringW
GlobalUnlock
GetCurrentProcessId
lstrcmpi
SetCriticalSectionSpinCount
GetLocaleInfoA
OpenMutexA
EnumSystemLocalesA
OpenProcess
FreeEnvironmentStringsW
SetFilePointer
GetCurrentProcess
GetPrivateProfileSectionW
GetVersionExA
GlobalReAlloc
GetMailslotInfo
InitializeCriticalSection
GetTimeZoneInformation
OutputDebugStringA
InterlockedIncrement
Sections
.text Size: 192KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 108KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ