Static task
static1
Behavioral task
behavioral1
Sample
022ff7094d5218b69736259112f1980f180aec93ad796c77c9cbf5cab6072d34.exe
Resource
win7-20220812-en
General
-
Target
022ff7094d5218b69736259112f1980f180aec93ad796c77c9cbf5cab6072d34
-
Size
357KB
-
MD5
651c0f168fca95e0c7fa02c0e6112df0
-
SHA1
acae8b8a7f93fa7dea88b3fefbc5f4d9645ce733
-
SHA256
022ff7094d5218b69736259112f1980f180aec93ad796c77c9cbf5cab6072d34
-
SHA512
5d7eb836f319552ece0cee19683c372e90e1b3e96b5d94804074af8aba1a44e96ca59e70166c027a94e02b144b25df08af44f73cd5aa290dd0d366fdda06ccc0
-
SSDEEP
6144:sCJgGAHKKGgegZF371slz/863eAhBptcb6sbRtPC+gWTBzIbjTMNV/0pADUc9R9P:sFGARGgegvyWehBptcesbRtjgWTpSB2R
Malware Config
Signatures
Files
-
022ff7094d5218b69736259112f1980f180aec93ad796c77c9cbf5cab6072d34.exe windows x86
81fc7ccc44e081e53c70b67d4c2b40e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
GetModuleHandleW
FindResourceW
FreeResource
SizeofResource
LoadResource
LockResource
DeleteFileW
GlobalAlloc
GlobalLock
CreateFileW
WriteFile
GlobalUnlock
GlobalFree
CloseHandle
InterlockedDecrement
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
GetCommandLineW
InterlockedIncrement
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetLastError
lstrlenW
GetStartupInfoW
user32
ShowWindow
MessageBoxW
CreateWindowExW
SetClassLongW
IsWindowVisible
SetCursor
RegisterClassExW
wsprintfW
LoadCursorW
GetClassInfoExW
SetWindowLongW
LoadStringW
DestroyWindow
DispatchMessageW
TranslateMessage
GetMessageW
DefWindowProcW
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
ReleaseDC
GetSystemMetrics
GetDC
IsRectEmpty
SetRect
PtInRect
DrawTextW
InflateRect
CopyRect
CallWindowProcW
InvalidateRect
GetSysColorBrush
GetClientRect
PostMessageW
GetParent
SendMessageW
SetWindowPos
GetWindowTextLengthW
EqualRect
IsWindow
UpdateWindow
CreateDialogParamW
KillTimer
MoveWindow
SetTimer
GetAsyncKeyState
RedrawWindow
BeginPaint
EndPaint
GetWindowRect
GetDlgItem
ReleaseCapture
GetCursorPos
ScreenToClient
FillRect
GetWindowLongW
SetWindowTextW
SetFocus
GetWindowTextW
gdi32
SelectObject
CreateCompatibleBitmap
GetDeviceCaps
CreateCompatibleDC
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectW
CreateDCW
SetStretchBltMode
CreateDIBSection
Polygon
BitBlt
MoveToEx
CreateSolidBrush
CreatePen
Rectangle
SetBkMode
Ellipse
SetTextColor
CreateFontW
RestoreDC
SetROP2
SetWindowOrgEx
SetViewportOrgEx
SetMapMode
DeleteDC
LineTo
StretchBlt
EnumFontFamiliesW
EnumFontFamiliesExW
GetPixel
SaveDC
DeleteObject
shell32
CommandLineToArgvW
ole32
CoInitialize
CoUninitialize
shlwapi
StrCmpIW
StrCmpW
comctl32
InitCommonControlsEx
_TrackMouseEvent
msimg32
AlphaBlend
msvcp60
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Xlen@std@@YAXXZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
msvcrt
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
_except_handler3
getenv
sscanf
sprintf
exit
strtod
fprintf
_CIpow
abort
_snprintf
_wcsdup
_snwprintf
wcslen
__CxxLongjmpUnwind
_adjust_fdiv
longjmp
isprint
fscanf
fgets
getc
fputc
fflush
ftell
fseek
fwrite
fread
_purecall
_wfopen
fclose
_CxxThrowException
_ftol
floor
malloc
strncpy
free
_wcsicmp
__CxxFrameHandler
_controlfp
__p__commode
??2@YAPAXI@Z
__p__fmode
__set_app_type
_setjmp3
_iob
printf
Sections
.text Size: 208KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE