Static task
static1
Behavioral task
behavioral1
Sample
135dbc68c0631115e6735a7b93bd3aadc2f84e7dbbef6ca1c8245a79c501adc7.exe
Resource
win7-20220812-en
General
-
Target
135dbc68c0631115e6735a7b93bd3aadc2f84e7dbbef6ca1c8245a79c501adc7
-
Size
564KB
-
MD5
6aa63bafcc7ab0e07ba32a34c2186ef0
-
SHA1
0b051ae5919eea67daa029743e3c09e63088750b
-
SHA256
135dbc68c0631115e6735a7b93bd3aadc2f84e7dbbef6ca1c8245a79c501adc7
-
SHA512
3721d1abdbbae6cc563db81800a3e1fa0868fa787881cd8ef4dd5d43188b4994e9e0093466bde60bd3c2481ad6b8b3891f0ea940a11935a3938bdccea2e047fd
-
SSDEEP
12288:qoPHT5gfH+7sAlWhQt/huLZD8778CKxeeTS:NPTKe7ZWhQtmG8CKEe+
Malware Config
Signatures
Files
-
135dbc68c0631115e6735a7b93bd3aadc2f84e7dbbef6ca1c8245a79c501adc7.exe windows x86
2d9e5a9ea4c84792e1ab62cab138ce81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
d3d8
Direct3DCreate8
winmm
timeGetTime
comctl32
ord17
kernel32
CreateThread
CreateMutexA
LockResource
LoadResource
SizeofResource
FindResourceA
ReleaseMutex
InterlockedExchange
GetSystemInfo
IsProcessorFeaturePresent
WriteFile
GetLastError
GetFileSize
MapViewOfFile
CreateFileMappingA
CreateFileW
UnmapViewOfFile
GetDriveTypeA
SetEndOfFile
ReadFile
GetTimeZoneInformation
GetCurrentProcessId
GetTickCount
CompareStringW
CompareStringA
WaitForSingleObject
IsBadReadPtr
InitializeCriticalSection
SetStdHandle
VirtualQuery
VirtualProtect
SetFilePointer
GetOEMCP
GetACP
GetLocaleInfoA
GetCPInfo
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
HeapSize
FlushFileBuffers
LCMapStringW
LCMapStringA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
IsBadWritePtr
HeapReAlloc
VirtualAlloc
OutputDebugStringA
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceFrequency
QueryPerformanceCounter
GetFullPathNameA
CreateFileA
CloseHandle
lstrcatA
FreeLibrary
LoadLibraryA
Sleep
GetCurrentThread
SetThreadPriority
GetCommandLineA
lstrcpyA
GetModuleHandleA
GetProcAddress
GetVersionExA
MulDiv
IsBadCodePtr
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
GetSystemTimeAsFileTime
RtlUnwind
HeapFree
HeapAlloc
GetStartupInfoA
ExitProcess
TerminateProcess
GetCurrentProcess
SetEnvironmentVariableA
GetCurrentDirectoryA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
EnterCriticalSection
LeaveCriticalSection
RaiseException
TlsFree
SetLastError
GetCurrentThreadId
user32
GetWindowRect
GetSystemMetrics
SetTimer
SetWindowTextA
CheckRadioButton
GetDlgItem
GetWindowTextA
SendMessageA
CheckDlgButton
IsDlgButtonChecked
EnableWindow
EndDialog
DialogBoxParamA
MessageBoxA
FrameRect
DrawTextA
LoadStringA
ScreenToClient
InvalidateRect
UpdateWindow
SetRect
wsprintfA
SetWindowPos
UnionRect
ShowWindow
GetWindowPlacement
KillTimer
SetCursor
BeginPaint
FillRect
EndPaint
DefWindowProcA
PeekMessageA
LoadCursorA
LoadIconA
RegisterClassA
GetClientRect
AdjustWindowRect
CreateWindowExA
EnumDisplaySettingsA
PostMessageA
GetMessageA
PostQuitMessage
TranslateMessage
DispatchMessageA
SetRectEmpty
SystemParametersInfoA
IsIconic
gdi32
ExcludeClipRect
GetStockObject
CreateCompatibleDC
CreateDIBSection
GetDeviceCaps
CreateFontA
SelectObject
SetTextColor
SetBkColor
SetTextAlign
GetTextExtentPoint32A
ExtTextOutA
DeleteObject
DeleteDC
SetMapMode
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc
SHGetFolderPathA
ole32
CoInitialize
CoCreateInstance
Sections
.text Size: 340KB - Virtual size: 337KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE