Static task
static1
Behavioral task
behavioral1
Sample
859c007e218e6881ff496e016a8d8b6e2248f08bec8c73a16ae6cd226fa1ae69.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
859c007e218e6881ff496e016a8d8b6e2248f08bec8c73a16ae6cd226fa1ae69.exe
Resource
win10v2004-20220812-en
General
-
Target
859c007e218e6881ff496e016a8d8b6e2248f08bec8c73a16ae6cd226fa1ae69
-
Size
128KB
-
MD5
4563b8d079169f3c4e743747a7f1d5a8
-
SHA1
78389b3c841ff3eab3190b3411b285d3af267e2d
-
SHA256
859c007e218e6881ff496e016a8d8b6e2248f08bec8c73a16ae6cd226fa1ae69
-
SHA512
8c44a19b230f2e43b6076b69be894727c1786e12e37f01a1eefefb8ab5db0ccb5ec6042e2611102d91ec9db55b601c0270f769d854b11c246a7dc4e5b14b172e
-
SSDEEP
3072:E+rwlGSu3MH57aYwIqT1UzL6/8dY3bdoDRWd:lrgGd3u5eYRqTAL6UubdsWd
Malware Config
Signatures
Files
-
859c007e218e6881ff496e016a8d8b6e2248f08bec8c73a16ae6cd226fa1ae69.exe windows x86
0197f2b51e25ce512c68d5001af0cd2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GetProfileStringA
GlobalFree
GlobalLock
GlobalUnlock
GetWindowsDirectoryA
GetLocaleInfoW
SetFilePointer
FlushFileBuffers
RaiseException
GetLocaleInfoA
LoadLibraryA
VirtualAlloc
GetStringTypeA
GetProcAddress
GetStringTypeW
LCMapStringA
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
WriteFile
RtlUnwind
InitializeCriticalSection
HeapCreate
HeapDestroy
VirtualFree
GetLastError
TlsGetValue
TlsAlloc
SetLastError
GetCurrentThreadId
DeleteCriticalSection
TlsSetValue
GetStdHandle
SetHandleCount
GetFileType
GetACP
GetCPInfo
GetOEMCP
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
TerminateProcess
lstrlenA
CreateFileA
DeviceIoControl
GetDriveTypeA
MultiByteToWideChar
lstrcpyA
GetDiskFreeSpaceA
lstrcmpiA
RtlZeroMemory
lstrcatA
GetProcessHeap
HeapAlloc
HeapFree
WideCharToMultiByte
CloseHandle
GetStartupInfoA
InterlockedIncrement
GetCurrentProcess
InterlockedDecrement
ExitProcess
SetStdHandle
GetCommandLineA
GetVersion
GetVolumeInformationA
lstrcmpA
GetModuleHandleA
user32
EndPaint
BeginPaint
MessageBoxA
SetForegroundWindow
GetWindowTextA
RegisterClassA
LoadStringA
EnumWindows
LoadCursorA
DefDlgProcA
LoadIconA
SendDlgItemMessageA
WinHelpA
ShowWindow
SetWindowLongA
GetWindowLongA
GetDlgItem
EndDialog
SetDlgItemTextA
LoadBitmapA
SetFocus
DialogBoxParamA
UpdateWindow
FillRect
DrawTextA
GetClientRect
GetDC
ReleaseDC
SetTimer
DefWindowProcA
UnregisterClassA
PeekMessageA
LoadImageA
PostMessageA
wsprintfA
TranslateMessage
DispatchMessageA
CheckDlgButton
CreateDialogParamA
DestroyWindow
GetDesktopWindow
IsDlgButtonChecked
EnableWindow
SetCursor
GetWindowRect
MoveWindow
CallWindowProcA
GetParent
InvalidateRect
DrawFocusRect
GetSysColor
DrawIconEx
SendMessageA
gdi32
GetStockObject
DeleteDC
DeleteObject
GetObjectA
SelectObject
StretchBlt
SetBkMode
CreateBitmap
CreateSolidBrush
CreateCompatibleBitmap
BitBlt
ExtTextOutA
CreateCompatibleDC
GetTextExtentPoint32A
SetBkColor
SetTextColor
advapi32
RegEnumValueA
RegDeleteValueA
RegSetValueExA
RegCloseKey
RegEnumKeyExA
RegQueryValueExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyA
shell32
SHGetFileInfoA
ShellExecuteA
ExtractIconExA
ole32
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoCreateInstance
CLSIDFromString
comctl32
ord17
PropertySheetA
CreatePropertySheetPageA
shlwapi
StrStrIA
Sections
.text Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ