Static task
static1
Behavioral task
behavioral1
Sample
19856579c20f63931fd6c8aa07bc0cf6effc28596699cef2d590de80d140f383.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
19856579c20f63931fd6c8aa07bc0cf6effc28596699cef2d590de80d140f383.exe
Resource
win10v2004-20220812-en
General
-
Target
19856579c20f63931fd6c8aa07bc0cf6effc28596699cef2d590de80d140f383
-
Size
369KB
-
MD5
326790e7f185125291ce762ef73d13d0
-
SHA1
035d991933e527eed10708ae1a91e5f77e38cd50
-
SHA256
19856579c20f63931fd6c8aa07bc0cf6effc28596699cef2d590de80d140f383
-
SHA512
2403eed22a9cdc3088cf334bc8fd1c0f1ed186c9f29fbd9b394f635798bb41d0cc480e7b5d251251587a385f1b8f1092284635613ebfe1be745fb7a4802014d7
-
SSDEEP
6144:UF/gPBCz2yE3w6pGsMnRr1x5lZfvwbVNMrNBG42VDPWDz3B:UF/oCz27A6kvBLlKVNM/v2t+LB
Malware Config
Signatures
Files
-
19856579c20f63931fd6c8aa07bc0cf6effc28596699cef2d590de80d140f383.exe windows x86
5679c825407491ca461935d72c683d2d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
lstrlenW
WideCharToMultiByte
InterlockedDecrement
GetWindowsDirectoryA
GetProcAddress
LoadLibraryA
SetCurrentDirectoryA
GetCommandLineA
Sleep
GetCurrentProcessId
GetModuleFileNameA
lstrcpynA
GetCurrentDirectoryA
SetLastError
LockResource
SizeofResource
LoadResource
FindResourceA
FindResourceExA
GetCurrentThreadId
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
FreeLibrary
GetTickCount
GetPrivateProfileIntA
WriteFile
SetFilePointer
MoveFileA
DeleteFileA
SetFileAttributesA
GetFileSize
CreateFileA
GetLocalTime
GetFileAttributesA
CopyFileA
RemoveDirectoryA
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
MultiByteToWideChar
InitializeCriticalSection
LoadLibraryExA
lstrcmpiA
IsDBCSLeadByte
OutputDebugStringA
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
ReadFile
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InterlockedExchange
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetLocaleInfoW
SetConsoleCtrlHandler
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
lstrlenA
CreateProcessA
WaitForSingleObject
CreateThread
GetExitCodeProcess
CloseHandle
GetLastError
GetPrivateProfileStringA
WritePrivateProfileStringA
ExitProcess
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
FatalAppExitA
HeapCreate
GetCurrentThread
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
lstrcatA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
RtlUnwind
VirtualProtect
GetModuleHandleW
GetSystemInfo
VirtualQuery
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
user32
CharNextA
CharUpperA
IsWindow
FindWindowA
SendMessageA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
CreateDialogIndirectParamA
DefWindowProcA
SetWindowLongA
UnregisterClassA
GetWindow
GetWindowRect
GetWindowLongA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
KillTimer
SetTimer
ShowWindow
GetClientRect
SetWindowPos
DestroyWindow
LoadIconA
PostMessageA
MessageBoxA
PostQuitMessage
SystemParametersInfoA
SetForegroundWindow
GetParent
advapi32
RegDeleteValueA
RegQueryValueExA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
shell32
Shell_NotifyIconA
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
CoUninitialize
oleaut32
CreateErrorInfo
GetErrorInfo
VarUI4FromStr
SysFreeString
SetErrorInfo
VariantInit
VariantChangeType
SysAllocString
VariantClear
shlwapi
PathFileExistsA
comctl32
InitCommonControlsEx
Sections
.text Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-F Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE