Static task
static1
Behavioral task
behavioral1
Sample
733d6ac0cce0a5eec407f5d488273a280aaa0cc82a8a4c533b910ec5aa6b03c6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
733d6ac0cce0a5eec407f5d488273a280aaa0cc82a8a4c533b910ec5aa6b03c6.exe
Resource
win10v2004-20220812-en
General
-
Target
733d6ac0cce0a5eec407f5d488273a280aaa0cc82a8a4c533b910ec5aa6b03c6
-
Size
160KB
-
MD5
5c9ddf00d0ea6f8cc7b1ac9971c4517f
-
SHA1
f598de347be116daff8a2ec4fcf58ee501f588bf
-
SHA256
733d6ac0cce0a5eec407f5d488273a280aaa0cc82a8a4c533b910ec5aa6b03c6
-
SHA512
9c3cc7a5dde6641ba598dc8e325eca286b4e82cc6b29457bd93421672aeef542be0c5dce4d684d7fc1140bb2eff895e58f80ab1c7104b9e03c7a7df1bb27d49f
-
SSDEEP
3072:L1PWMYT392kx7zAnJBQYlTof/funvcsI4UcMLH:LZeIagv6cM
Malware Config
Signatures
Files
-
733d6ac0cce0a5eec407f5d488273a280aaa0cc82a8a4c533b910ec5aa6b03c6.exe windows x86
5f580d9cac5d5698d8a3de0f7921dad8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
GetStartupInfoA
ExitProcess
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapCreate
DeleteCriticalSection
InitializeCriticalSection
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CloseHandle
GetModuleFileNameA
SetEndOfFile
SetFilePointer
FlushFileBuffers
CreateFileA
WriteFile
ReadFile
SetErrorMode
GetCurrentProcess
GetOEMCP
GetCPInfo
WritePrivateProfileStringA
GetProcessVersion
GetLastError
GlobalFlags
LocalReAlloc
lstrcpynA
TlsGetValue
GlobalReAlloc
TlsSetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
TlsFree
VirtualFree
TlsAlloc
GlobalLock
LocalAlloc
MulDiv
GlobalAlloc
GlobalDeleteAtom
SetLastError
LocalFree
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
lstrlenA
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
VirtualAlloc
IsBadWritePtr
HeapDestroy
SetCurrentDirectoryA
GetExitCodeProcess
GetCurrentDirectoryA
GetCommandLineA
TerminateProcess
lstrcmpA
CreateProcessA
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
user32
MapWindowPoints
GetSysColor
UpdateWindow
SetFocus
SendDlgItemMessageA
IsDialogMessageA
SetWindowTextA
ShowWindow
ClientToScreen
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetClassNameA
PtInRect
GetSysColorBrush
LoadStringA
DestroyMenu
GetTopWindow
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgCtrlID
DefWindowProcA
AdjustWindowRectEx
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
CopyRect
GetDC
ReleaseDC
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
PostQuitMessage
PostMessageA
EnableWindow
MessageBoxA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
SetTimer
CreateWindowExA
GetClassLongA
GetWindowTextA
LoadIconA
SetForegroundWindow
GetWindow
UnregisterClassA
gdi32
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
GetDeviceCaps
RectVisible
TextOutA
PtVisible
Escape
ExtTextOutA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
comctl32
ord17
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ