Static task
static1
Behavioral task
behavioral1
Sample
197c03b183c15b5d82e854d3dd8452143124a638b84baf367544b18bc4bd4c9f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
197c03b183c15b5d82e854d3dd8452143124a638b84baf367544b18bc4bd4c9f.exe
Resource
win10v2004-20220812-en
General
-
Target
197c03b183c15b5d82e854d3dd8452143124a638b84baf367544b18bc4bd4c9f
-
Size
160KB
-
MD5
661f53a9a74c4732d8ca6f83e164a6e0
-
SHA1
7cd410e588044109500d9434a86b2bae4c9efbae
-
SHA256
197c03b183c15b5d82e854d3dd8452143124a638b84baf367544b18bc4bd4c9f
-
SHA512
1b8c4b49f6d6331af3a02daed2092bc673f6a92e30565fd783d1d47c1535884ae5ed499fbd030e3ba89734e43579c617679710fdfa87854400c8339324167745
-
SSDEEP
3072:haiUReFvwPRXpo2QsSSFHTimqwIfMVp5:ge98puShrIfMVn
Malware Config
Signatures
Files
-
197c03b183c15b5d82e854d3dd8452143124a638b84baf367544b18bc4bd4c9f.exe windows x86
01d1d7b2eaa5329bdee4e18234987636
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapFree
GetStdHandle
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapReAlloc
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
GetStringTypeA
GetStringTypeW
GetCPInfo
GetOEMCP
LCMapStringA
FindFirstFileA
SetFileAttributesA
FindNextFileA
FindClose
RemoveDirectoryA
MultiByteToWideChar
CreateDirectoryA
FreeLibrary
GetCurrentDirectoryA
SetCurrentDirectoryA
_lcreat
_lwrite
_lclose
OpenFile
DeleteFileA
LocalAlloc
LocalFree
GetProcAddress
GetModuleFileNameA
Sleep
TerminateThread
CloseHandle
GetTempPathA
CreateThread
GetVersion
lstrcmpiA
lstrcpyA
GetVersionExA
lstrcatA
FindResourceA
LoadResource
LockResource
FreeResource
WritePrivateProfileStringA
GetPrivateProfileStringA
GetACP
lstrlenA
LoadLibraryA
HeapSize
LCMapStringW
user32
GetSubMenu
DialogBoxParamA
DestroyMenu
LoadMenuA
MessageBoxA
SetWindowTextA
GetDesktopWindow
GetWindowRect
BeginPaint
EndPaint
CallWindowProcA
GetWindowLongA
SetWindowLongA
FillRect
KillTimer
InvalidateRect
SetTimer
GetDlgItemInt
GetDlgItemTextA
SetFocus
GetCursorPos
EnableMenuItem
TrackPopupMenu
SetDlgItemInt
LoadIconA
MapWindowPoints
SetWindowPos
CreateWindowExA
LoadBitmapA
SetDlgItemTextA
IsDlgButtonChecked
EnableWindow
LoadImageA
GetDlgItem
GetClientRect
SendMessageA
EndDialog
GetDC
ReleaseDC
wsprintfA
LoadStringA
gdi32
SelectObject
StretchBlt
DeleteDC
CreateCompatibleBitmap
GetObjectA
DeleteObject
CreateSolidBrush
GetTextExtentPoint32A
TextOutA
SetTextColor
StretchDIBits
CreateCompatibleDC
SetStretchBltMode
comdlg32
GetOpenFileNameA
advapi32
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc
ole32
CoCreateInstance
avifil32
AVIStreamGetFrame
AVIStreamInfoA
AVIStreamReadFormat
AVIStreamTimeToSample
AVIStreamStart
AVIStreamGetFrameOpen
AVIStreamRead
AVIFileExit
AVIFileInit
AVIStreamSampleToTime
AVIFileGetStream
AVIStreamGetFrameClose
AVIFileInfoA
AVIFileOpenA
AVIFileRelease
AVIStreamLength
comctl32
CreateToolbarEx
ord17
msacm32
acmStreamOpen
acmStreamSize
acmStreamPrepareHeader
acmStreamConvert
acmStreamClose
acmStreamUnprepareHeader
winmm
mciSendStringA
encmpa
ord9
ord8
ord7
ord5
ord6
ord4
ord3
ord1
ord2
encodem1v
ord1
ord2
ord3
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.KAO Size: 4KB - Virtual size: 569B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE