Static task
static1
Behavioral task
behavioral1
Sample
501e223bb7727320a25236b2668f981ea7efdbfa14bab4d20bffe36a5871ad52.exe
Resource
win7-20220812-en
General
-
Target
501e223bb7727320a25236b2668f981ea7efdbfa14bab4d20bffe36a5871ad52
-
Size
184KB
-
MD5
4a8524e60d7a5b36cbef6be158f69040
-
SHA1
390dd8cd85b51ff4413c608e8ec650c1714bfc85
-
SHA256
501e223bb7727320a25236b2668f981ea7efdbfa14bab4d20bffe36a5871ad52
-
SHA512
cd6d8163ec15190197ec326f67e46619ea41fb532c551f8be26da9e4ad8a2d10b457c0569087104d7918ec70d4a6f6c5dcad3c8518e2d7e19c2b12e864138d5b
-
SSDEEP
3072:UqDYSxvsfddz/lyd2KdXGTW6eto6zAOlc6Y7gN0qyLOD12oQY2:UqDYqOUd1l7d/OLLI2Y2
Malware Config
Signatures
Files
-
501e223bb7727320a25236b2668f981ea7efdbfa14bab4d20bffe36a5871ad52.exe windows x86
d4c0296f315c1b5d42127e7348a7ef37
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
??3@YAXPAX@Z
__p__commode
_mbsrchr
vsprintf
_controlfp
_except_handler3
__set_app_type
__p__fmode
??2@YAPAXI@Z
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
atol
atof
sprintf
_ftol
advapi32
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
kernel32
CreateThread
OutputDebugStringA
WriteFile
FatalAppExitA
SetFilePointer
SetConsoleTitleA
AllocConsole
GetStdHandle
IsBadReadPtr
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
lstrlenA
LeaveCriticalSection
EnterCriticalSection
DebugBreak
GetCurrentThreadId
CloseHandle
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
lstrcpyA
lstrcatA
GetModuleFileNameA
GetModuleHandleA
lstrcmpiA
lstrcpynA
MulDiv
GetDiskFreeSpaceA
FreeLibrary
GetProcAddress
LoadLibraryA
GetFullPathNameA
GetFileSize
CreateFileA
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
OpenFile
WriteProfileStringA
GetProfileIntA
GetProfileStringA
GetStartupInfoA
WaitForSingleObject
gdi32
DeleteObject
PatBlt
CreateSolidBrush
ExtTextOutA
GetStockObject
SelectObject
CreateFontA
GetTextMetricsA
SetBkColor
SetTextColor
user32
EndPaint
BeginPaint
GetAsyncKeyState
ShowWindow
MoveWindow
LoadIconA
InvalidateRect
GetDC
DefWindowProcA
PostQuitMessage
LoadCursorA
LoadAcceleratorsA
WaitMessage
TranslateAcceleratorA
GetSysColor
GetWindowLongA
GetWindowTextA
GetDlgItemInt
RegisterClassA
IsCharAlphaA
SetDlgItemTextA
CheckDlgButton
DialogBoxParamA
EndDialog
wvsprintfA
MessageBoxA
wsprintfA
GetMenu
GetSubMenu
RemoveMenu
CheckMenuItem
GetSystemMetrics
GetWindowRect
SetWindowPos
SetWindowTextA
PeekMessageA
TranslateMessage
DispatchMessageA
PostMessageA
UpdateWindow
GetDlgItem
IsCharAlphaNumericA
SetDlgItemInt
EnableWindow
SetFocus
MessageBeep
KillTimer
GetMenuItemCount
EnableMenuItem
GetDlgItemTextA
SetTimer
IsDlgButtonChecked
CreateWindowExA
ReleaseDC
CreatePopupMenu
AppendMenuA
GetClientRect
winmm
timeGetTime
comdlg32
GetOpenFileNameA
ole32
CoCreateInstance
CoTaskMemFree
CoUninitialize
MkParseDisplayName
CreateBindCtx
CoInitialize
CoTaskMemAlloc
oleaut32
OleCreatePropertyFrame
SysFreeString
msacm32
acmMetrics
acmFormatChooseA
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE