Static task
static1
Behavioral task
behavioral1
Sample
7f87eeaf0cc00e4903167f5176d84b1622c12d08cf9b6d87808fb0be8a7de96a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7f87eeaf0cc00e4903167f5176d84b1622c12d08cf9b6d87808fb0be8a7de96a.exe
Resource
win10v2004-20220812-en
General
-
Target
7f87eeaf0cc00e4903167f5176d84b1622c12d08cf9b6d87808fb0be8a7de96a
-
Size
188KB
-
MD5
6c1a5c4734da6d19be4d34c0a8964150
-
SHA1
58e533fdaf703aa95f745cd830fbc39df48d2588
-
SHA256
7f87eeaf0cc00e4903167f5176d84b1622c12d08cf9b6d87808fb0be8a7de96a
-
SHA512
cdae9dcfa01883c56192dc3c25882fcb208b006402a3d1baf0fb36d2c513ce69e34bb38dab05b5b5576c8382296d953b732c1c73a3f742fa734b288534762ce7
-
SSDEEP
3072:yRwFvRVBN3tZVmiqK2qI+J3aqMqM4/yIvd3F4r921WOVPTxKRccn/n:yRshRmZkyIV3F4knT/Mn
Malware Config
Signatures
Files
-
7f87eeaf0cc00e4903167f5176d84b1622c12d08cf9b6d87808fb0be8a7de96a.exe windows x86
6067c616e6f18e301f582851a03e7c60
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
InterlockedExchange
RtlUnwind
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
SetFilePointer
HeapReAlloc
LCMapStringW
InitializeCriticalSection
LCMapStringA
VirtualQuery
GetSystemInfo
lstrcmpA
VirtualProtect
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
ExitProcess
SetUnhandledExceptionFilter
DeleteCriticalSection
IsBadCodePtr
GetTimeZoneInformation
ReadFile
SetEndOfFile
CompareStringA
CompareStringW
lstrcatA
MultiByteToWideChar
lstrlenA
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
GetPrivateProfileStringA
lstrcpynA
LoadLibraryA
GetModuleFileNameA
GetSystemDirectoryA
CloseHandle
GetTickCount
WinExec
GetModuleHandleA
GetProcAddress
Sleep
CreateMutexA
GetLastError
GetCurrentProcess
WriteFile
LeaveCriticalSection
EnterCriticalSection
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
VirtualAlloc
GetCurrentThreadId
SetLastError
GetLocaleInfoA
GetACP
GetVersionExA
WideCharToMultiByte
RaiseException
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
TlsAlloc
SetEnvironmentVariableA
user32
WinHelpA
MessageBoxA
MapWindowPoints
ChangeDisplaySettingsExA
EnumDisplaySettingsExA
ReleaseDC
KillTimer
PtInRect
GetDlgCtrlID
wsprintfA
GetWindowTextA
EnumWindows
IsWindowVisible
GetWindow
FindWindowExA
LockWindowUpdate
GetClientRect
ShowWindow
EnumChildWindows
PostMessageA
GetClassNameA
GetParent
SetWindowLongA
GetSystemMetrics
FindWindowA
ExitWindowsEx
EnumDisplaySettingsA
EnableWindow
GetDC
BeginPaint
FillRect
EndPaint
DialogBoxParamA
SetTimer
GetDesktopWindow
GetWindowRect
EndDialog
GetDlgItem
SendMessageA
SetWindowPos
SetForegroundWindow
LoadIconA
SendDlgItemMessageA
LoadStringA
SetDlgItemTextA
GetWindowLongA
gdi32
GetStockObject
GetObjectA
CreateFontIndirectA
SelectObject
GetTextAlign
SetTextAlign
TextOutA
DeleteObject
CreateDCA
DeleteDC
ExtEscape
advapi32
CloseServiceHandle
LookupPrivilegeValueA
RegDeleteValueA
RegCreateKeyExA
OpenSCManagerA
OpenServiceA
QueryServiceConfigA
ChangeServiceConfigA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
AdjustTokenPrivileges
rpcrt4
UuidToStringA
RpcStringFreeA
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
comctl32
PropertySheetA
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xrdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE