Static task
static1
Behavioral task
behavioral1
Sample
0f21caee1e938905c3837277bb7643a78b1346341db1e4f4cd9a1ee302277375.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0f21caee1e938905c3837277bb7643a78b1346341db1e4f4cd9a1ee302277375.exe
Resource
win10v2004-20220901-en
General
-
Target
0f21caee1e938905c3837277bb7643a78b1346341db1e4f4cd9a1ee302277375
-
Size
200KB
-
MD5
44ceec67ad3337eb941ab71aafb1e610
-
SHA1
eebbd5cfcd6e0fd8168db6da1562b46755c606e7
-
SHA256
0f21caee1e938905c3837277bb7643a78b1346341db1e4f4cd9a1ee302277375
-
SHA512
68ade5ba7fed3e6405cadebf19163d22725f80d19423ad5129e49ffcd6db087ccef5f8bf4b1a3e0ba625acb75d9540b01a39cc4befe110d2f6aae6ad26275fdd
-
SSDEEP
3072:jxEIXy6gIJU+KMIvsL057CcYO13YNce2JQokJqZoDBLleD7pM1xzoI7h+aS1GG:j+wC8U+JIg21Ocoleozo0naGG
Malware Config
Signatures
Files
-
0f21caee1e938905c3837277bb7643a78b1346341db1e4f4cd9a1ee302277375.exe windows x86
57262231353cfbd1cf58db5e8cc63e09
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempFileNameA
CopyFileA
DeleteFileA
GetWindowsDirectoryA
WriteFile
GetTickCount
SetErrorMode
SetFileTime
SetEndOfFile
GetDriveTypeA
GetLogicalDriveStringsA
SetLastError
SetFilePointer
MoveFileA
GetModuleFileNameA
CreateEventA
GetModuleHandleA
CreateDirectoryA
GetDiskFreeSpaceA
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
GetFileSize
ReadFile
CloseHandle
GetFileAttributesA
Sleep
GetLocalTime
HeapFree
WaitForSingleObject
FreeResource
SizeofResource
RaiseException
SetStdHandle
GetStringTypeW
GetStringTypeA
HeapDestroy
HeapCreate
TlsAlloc
TlsGetValue
GetFileType
GetStdHandle
TlsSetValue
GetEnvironmentStringsW
GetEnvironmentStrings
LoadResource
LockResource
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LeaveCriticalSection
EnterCriticalSection
ExitProcess
VirtualAlloc
VirtualFree
GetSystemInfo
DeleteCriticalSection
InitializeCriticalSection
GetLastError
GetProcessHeap
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
TerminateProcess
GetExitCodeProcess
GetCurrentProcess
GetVersion
OutputDebugStringA
FindClose
FindFirstFileA
FormatMessageA
HeapAlloc
UnmapViewOfFile
UnhandledExceptionFilter
SetHandleCount
LCMapStringA
VirtualLock
FindResourceA
MapViewOfFile
CreateFileMappingA
SetEvent
LCMapStringW
GetVolumeInformationA
SetThreadPriority
CreateThread
FlushFileBuffers
GetFullPathNameA
VirtualUnlock
HeapSize
GetCurrentDirectoryA
GetStartupInfoA
GetCommandLineA
RtlUnwind
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
MultiByteToWideChar
user32
IsWindowVisible
SetWindowPos
SetTimer
EnableWindow
RegisterClassExA
CreateWindowExA
GetSystemMetrics
LoadIconA
LoadImageA
LoadCursorA
GetLastActivePopup
FindWindowA
LoadStringA
GetTopWindow
SetForegroundWindow
MoveWindow
SetWindowTextA
SetClassLongA
GetWindowRect
SetFocus
SendDlgItemMessageA
CreateDialogParamA
GetDC
ReleaseDC
DefWindowProcA
UpdateWindow
DestroyWindow
PostQuitMessage
DialogBoxParamA
EndDialog
wsprintfA
MessageBoxA
IsWindow
GetDlgItem
SetDlgItemTextA
ShowWindow
gdi32
GetDeviceCaps
GetStockObject
advapi32
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
comctl32
ord17
shell32
ShellExecuteA
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ