Static task
static1
Behavioral task
behavioral1
Sample
2633887d8ee3a00374ddaee34bf48827aba9fd9e47f440a76764f84d77f8d976.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2633887d8ee3a00374ddaee34bf48827aba9fd9e47f440a76764f84d77f8d976.exe
Resource
win10v2004-20220901-en
General
-
Target
2633887d8ee3a00374ddaee34bf48827aba9fd9e47f440a76764f84d77f8d976
-
Size
65KB
-
MD5
0996ebe4cbffa6b314352d5e741e17bf
-
SHA1
c08a8e76d6ee1ca7653437fa50db227e9d074da8
-
SHA256
2633887d8ee3a00374ddaee34bf48827aba9fd9e47f440a76764f84d77f8d976
-
SHA512
8c07075542a5fb65082e93fe85d6e6fe0262bf706826ba0291e7abffb2e2022e67bb86e78b5399d1c810d0533eed3cf2496659da90a7941abd70ccf47cb9ec7a
-
SSDEEP
1536:tcL2Z1DdEkehl3X5yGLwO0YuDIIiVUGUO:eLajehl51keu0I0UGU
Malware Config
Signatures
Files
-
2633887d8ee3a00374ddaee34bf48827aba9fd9e47f440a76764f84d77f8d976.exe windows x86
e18a2f7c8477e5e6ea2b8a690d89d1d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
comctl32
ImageList_ReplaceIcon
ImageList_DragLeave
ImageList_Replace
ImageList_BeginDrag
ImageList_GetImageRect
ImageList_AddIcon
ImageList_EndDrag
ImageList_GetImageInfo
ImageList_DrawEx
InitCommonControls
ImageList_DragEnter
ImageList_LoadImageW
ImageList_LoadImageA
ImageList_Read
ImageList_Copy
ImageList_Create
ImageList_Remove
ImageList_GetIcon
ImageList_AddMasked
ImageList_DrawIndirect
ImageList_Draw
ImageList_Remove
ImageList_Copy
ImageList_LoadImageW
ImageList_LoadImage
ImageList_AddIcon
ImageList_EndDrag
ImageList_GetIconSize
ImageList_DragMove
ImageList_BeginDrag
ImageList_Create
ImageList_DragShowNolock
InitCommonControls
ImageList_GetImageRect
ImageList_GetIcon
ImageList_AddIcon
ImageList_GetImageCount
ImageList_DragLeave
ImageList_BeginDrag
ImageList_GetIconSize
ImageList_DrawIndirect
ImageList_DragEnter
ImageList_DragMove
ImageList_EndDrag
ImageList_Read
ImageList_LoadImage
ImageList_Destroy
ImageList_GetImageInfo
user32
GetDlgItem
BlockInput
DrawIconEx
CopyImage
AppendMenuW
CopyIcon
AlignRects
IsWindow
CalcMenuBar
DialogBoxParamW
InsertMenuA
AppendMenuW
GetMenu
CopyIcon
AlignRects
IsMenu
LoadMenuA
DialogBoxParamW
BlockInput
GetWindowTextA
DrawTextW
CreateIcon
EndDialog
DrawTextA
CopyIcon
DrawTextA
AlignRects
DialogBoxParamW
GetWindowTextA
CopyImage
DrawIcon
CreateIcon
CopyRect
GetWindowTextLengthA
DialogBoxParamA
AppendMenuW
IsMenu
GetCursor
LoadCursorA
GetMenu
InsertMenuA
DrawTextW
GetDlgItem
DrawTextA
CloseWindow
CopyIcon
DrawIcon
EndDialog
AppendMenuW
DrawIconEx
GetWindowTextLengthA
GetCursor
GetDC
LoadCursorA
BlockInput
GetDlgItem
AlignRects
CopyImage
DialogBoxParamW
GetFocus
LoadMenuA
advapi32
RegEnumKeyW
RegEnumKeyA
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteValueW
RegLoadKeyW
RegFlushKey
RegOpenKeyA
RegOpenKeyW
RegEnumValueW
RegQueryValueA
RegDeleteKeyA
RegLoadKeyA
RegDeleteValueA
RegCreateKeyExW
RegQueryValueExW
RegGetKeySecurity
RegLoadKeyA
RegEnumKeyA
RegEnumKeyExW
RegOpenKeyExA
RegCreateKeyExA
RegReplaceKeyW
RegDeleteKeyW
RegGetKeySecurity
RegDeleteValueA
RegDeleteValueW
RegEnumKeyW
RegQueryInfoKeyW
RegReplaceKeyW
RegEnumKeyExA
RegQueryValueW
RegDeleteValueA
RegEnumKeyExW
RegQueryValueA
RegLoadKeyA
RegEnumKeyW
RegQueryValueExW
RegEnumValueW
RegFlushKey
RegLoadKeyW
kernel32
GetCommandLineA
FindAtomA
DeleteFileW
CopyFileW
GetLastError
DeleteFileA
DeleteAtom
GetFileSize
GlobalFree
OpenFileMappingA
ReadFile
CopyFileExW
Sleep
CopyFileExA
GetCommandLineA
CopyFileW
CreateThread
GetConsoleMode
FindFirstFileA
ReadConsoleA
OpenFile
GetLastError
CopyFileA
GlobalFree
DeleteFileA
CreateDirectoryA
GetFileSize
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bbs Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 110B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ