Static task
static1
Behavioral task
behavioral1
Sample
224550ce345df546476c270a6479f584e4debc09bcb65c8512f9d6f58adda103.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
224550ce345df546476c270a6479f584e4debc09bcb65c8512f9d6f58adda103.exe
Resource
win10v2004-20220812-en
General
-
Target
224550ce345df546476c270a6479f584e4debc09bcb65c8512f9d6f58adda103
-
Size
476KB
-
MD5
69922d509a29d567fda72851d0529416
-
SHA1
374b5f091ec02f1bb9f70413b2cf6dfaa63c0ba1
-
SHA256
224550ce345df546476c270a6479f584e4debc09bcb65c8512f9d6f58adda103
-
SHA512
9c3a876c6fd2264e746c93545f97f0780cc29f14e84fdcf233c7eaf9ba962741930466e3af9911b5f16f84cb85069382d4d0b6e0cc0b3b2c29dae870b2b231d6
-
SSDEEP
6144:CqLpna4P/w5yWHS3TQb9CRSKxwIhOCsy+ricTF8HxBnBYn:CqLpnc4RS2waQJA6
Malware Config
Signatures
Files
-
224550ce345df546476c270a6479f584e4debc09bcb65c8512f9d6f58adda103.exe windows x86
7d8fa7c1e43d927cf18ca8ae169eb559
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
GetVersionExA
WaitForSingleObject
CreateProcessA
ResetEvent
SetEvent
WaitForMultipleObjects
Sleep
CreateThread
GetLastError
CreateMutexA
LoadLibraryExA
GetModuleHandleA
GetSystemDirectoryA
TerminateProcess
GlobalFree
GlobalAlloc
ReleaseMutex
GetCurrentProcessId
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
CompareStringW
CompareStringA
FindFirstFileA
GetLocaleInfoW
HeapSize
FlushFileBuffers
GetConsoleMode
GetConsoleCP
VirtualAlloc
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
OpenProcess
FindClose
CloseHandle
LoadLibraryA
GetProcAddress
FreeLibrary
CreateEventA
GetModuleFileNameA
WriteConsoleW
SetStdHandle
ReadFile
SetFilePointer
CreateFileA
SetEnvironmentVariableA
RaiseException
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
MultiByteToWideChar
GetFileAttributesA
RtlUnwind
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
WideCharToMultiByte
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FatalAppExitA
WriteFile
SetConsoleCtrlHandler
InterlockedExchange
SetEnvironmentVariableW
user32
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
SetWindowLongA
GetWindowLongA
DefWindowProcA
PostQuitMessage
LoadMenuA
GetSubMenu
DestroyMenu
SetMenuDefaultItem
GetCursorPos
SetForegroundWindow
TrackPopupMenu
CreatePopupMenu
GetMenuStringA
ModifyMenuA
EnableMenuItem
FindWindowA
GetWindowThreadProcessId
SendMessageA
AppendMenuA
MessageBoxA
LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA
PostMessageA
wsprintfA
gdi32
GetStockObject
advapi32
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegEnumKeyA
shell32
Shell_NotifyIconA
ShellExecuteA
Sections
.text Size: 300KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ