Static task
static1
Behavioral task
behavioral1
Sample
fe36e41d5a311960f1cfe33e13306334286699059fb83145c30bf013f3943720.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fe36e41d5a311960f1cfe33e13306334286699059fb83145c30bf013f3943720.exe
Resource
win10v2004-20220812-en
General
-
Target
fe36e41d5a311960f1cfe33e13306334286699059fb83145c30bf013f3943720
-
Size
916KB
-
MD5
312b4f44e3f7bea070325f65c2b5997c
-
SHA1
f983a6ab9694dffc9a6b278ad204157e4369d61d
-
SHA256
fe36e41d5a311960f1cfe33e13306334286699059fb83145c30bf013f3943720
-
SHA512
09afa8faa06f647687dfa46202629de512d70e9a1e8f8ddb80157d70383651e24792fdf17cc64b08a119edc1c4fe8d722645743a6b79f3153dc09a8e3acc71cd
-
SSDEEP
24576:qgVRmPkmXZqhEBbrxVOa/qvVrblSpNutKTdl/KsP:qTPkmXchWVOa/qtbSugZlfP
Malware Config
Signatures
Files
-
fe36e41d5a311960f1cfe33e13306334286699059fb83145c30bf013f3943720.exe windows x86
fa11acf18ac83b344266818b20fb9d75
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
shell32
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW
ShellExecuteExW
CommandLineToArgvW
ShellExecuteW
SHGetFileInfoW
SHBrowseForFolderW
kernel32
SetCurrentDirectoryW
CreateProcessW
CloseHandle
GetCurrentDirectoryW
LocalFree
SetFileApisToOEM
GetCurrentProcess
GetCurrentThread
SetThreadPriority
SetPriorityClass
GetLastError
GetEnvironmentVariableW
GetCommandLineW
GetFileAttributesW
FormatMessageW
RemoveDirectoryW
CreateDirectoryW
DeleteFileW
InterlockedExchangeAdd
FindFirstFileW
FindClose
FindNextFileW
GetModuleHandleW
FreeLibrary
GetProcAddress
LoadLibraryW
CreateFileW
SetFilePointer
SetEndOfFile
SetFileTime
WriteFile
GetFileSize
ReadFile
GetCurrentThreadId
Sleep
ResumeThread
GetACP
MultiByteToWideChar
WideCharToMultiByte
GetTempFileNameW
GetLongPathNameW
MoveFileW
lstrlenW
GetTempPathW
GetWindowsDirectoryW
GetFullPathNameW
WaitForSingleObject
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateEventW
SetEvent
ResetEvent
GetVersionExW
FindResourceW
FileTimeToSystemTime
ExpandEnvironmentStringsW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
HeapReAlloc
VirtualAlloc
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
GetModuleFileNameW
DeleteCriticalSection
WaitForMultipleObjects
SetFileAttributesW
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
ExitThread
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
user32
GetActiveWindow
LoadStringW
GetDesktopWindow
CreateDialogParamW
PostQuitMessage
IsWindowVisible
LoadIconW
EnableWindow
TranslateMessage
SetTimer
ScreenToClient
KillTimer
GetMessageW
DestroyIcon
SendMessageW
IsWindow
MessageBoxW
ShowWindow
PostMessageW
DialogBoxParamW
GetSystemMetrics
GetWindowRect
SetWindowPos
EndDialog
GetWindowTextW
SetWindowTextW
GetDlgItem
DispatchMessageW
IsDialogMessageW
gdi32
CreateSolidBrush
DeleteObject
advapi32
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
ole32
CoInitialize
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitializeEx
Sections
.text Size: 283KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ