Static task
static1
Behavioral task
behavioral1
Sample
72a0acff46696f986d489c385e89381fc9b141d2f4ff3aee55e72fc98bc614d6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
72a0acff46696f986d489c385e89381fc9b141d2f4ff3aee55e72fc98bc614d6.exe
Resource
win10v2004-20220812-en
General
-
Target
72a0acff46696f986d489c385e89381fc9b141d2f4ff3aee55e72fc98bc614d6
-
Size
119KB
-
MD5
6daed9b50e11ab7ae8ee75fadfa50db3
-
SHA1
653a569092402bac35483bd4107063fbe3e1a996
-
SHA256
72a0acff46696f986d489c385e89381fc9b141d2f4ff3aee55e72fc98bc614d6
-
SHA512
1383d9760100f8d424d4ac372d26ff1bf7d8777f7ccfc30972223e12dc75697651b47fba4ca897069ff1a33943718212bae5bba005f6cc5c028d9cf828507897
-
SSDEEP
1536:pF8Wm+SKQQIMfysF+6xp6JmOW90p7525i+MqMN70eOHDTecoXCTFGNwVWWgAb2ld:pKWm+QJMA6xp6Jd8L6J7sDbo4RUuCdI
Malware Config
Signatures
Files
-
72a0acff46696f986d489c385e89381fc9b141d2f4ff3aee55e72fc98bc614d6.exe windows x86
20ac11dfdbde87d927737c8b4bed8691
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
SetFilePointer
RemoveDirectoryA
lstrcpyA
WriteFile
ExitProcess
CopyFileA
GetModuleHandleA
GetCommandLineA
GetTickCount
GetTempPathA
CreateThread
GetFileSize
UnmapViewOfFile
SetFileAttributesA
lstrcatA
GetFileTime
GetShortPathNameA
CreateDirectoryA
GetSystemDirectoryA
MultiByteToWideChar
FreeLibrary
GetProcAddress
DeleteFileA
WritePrivateProfileStringA
FindFirstFileA
FindNextFileA
FindClose
GetPrivateProfileStringA
lstrcmpiA
Sleep
GlobalAlloc
MoveFileA
CreateFileA
lstrlenA
GetFileAttributesA
MapViewOfFile
CompareFileTime
GlobalFree
CloseHandle
SetFileTime
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
LoadLibraryA
GetModuleFileNameA
CreateFileMappingA
GetWindowsDirectoryA
GetDiskFreeSpaceA
SetEndOfFile
user32
GetWindowRect
SetClassLongA
GetParent
GetDlgItemTextA
SendDlgItemMessageA
LoadBitmapA
IsWindowVisible
EnableWindow
SetFocus
EndDialog
IsWindowEnabled
DialogBoxParamA
SetTimer
SetWindowTextA
SetDlgItemTextA
CreateDialogParamA
ScreenToClient
GetDlgItem
SetForegroundWindow
MessageBoxA
wsprintfA
DispatchMessageA
FindWindowA
SendMessageA
GetClientRect
SetRect
FillRect
GetWindowTextA
DrawTextA
EndPaint
LoadIconA
LoadCursorA
RegisterClassA
SystemParametersInfoA
GetDesktopWindow
CreateWindowExA
DestroyWindow
SetWindowPos
ShowWindow
BeginPaint
DefWindowProcA
PeekMessageA
gdi32
CreateFontA
CreateSolidBrush
LineTo
MoveToEx
CreatePen
BitBlt
CreateCompatibleDC
TextOutA
GetTextMetricsA
SetBkColor
GetNearestColor
GetStockObject
SetBkMode
SetTextColor
CreateBrushIndirect
DeleteObject
SelectObject
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyA
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHFileOperationA
SHGetMalloc
ole32
CoCreateInstance
OleInitialize
OleUninitialize
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE