Static task
static1
Behavioral task
behavioral1
Sample
75a6d57e4c1dd654e5a6073e3912842ea9be7bdcc232da699917be7721cd75b0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
75a6d57e4c1dd654e5a6073e3912842ea9be7bdcc232da699917be7721cd75b0.exe
Resource
win10v2004-20220901-en
General
-
Target
75a6d57e4c1dd654e5a6073e3912842ea9be7bdcc232da699917be7721cd75b0
-
Size
97KB
-
MD5
69c189f307e83aa921832f5a8e41d780
-
SHA1
ff3464820c552675381b13f2c8808c7a04f76ab9
-
SHA256
75a6d57e4c1dd654e5a6073e3912842ea9be7bdcc232da699917be7721cd75b0
-
SHA512
771404468e4651ad767a9f5ce62a8bcd66bcdf4f33e7f6c7b9654ae6d091556e98123fd3658022fa1228b73ec965e4d20fde48dd6dc2abad5c76f535ff39a3b2
-
SSDEEP
1536:9xcqijN0Ctp1ik903nMLL1fQJkG3//d+dQcoANKa7:jViltp1e3naLA3//d+dQPCKa7
Malware Config
Signatures
Files
-
75a6d57e4c1dd654e5a6073e3912842ea9be7bdcc232da699917be7721cd75b0.exe windows x86
da30f95fd56599bcdde1b27de35f4edd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
lstrlenW
WideCharToMultiByte
DeleteFileW
GetCurrentThreadId
MultiByteToWideChar
lstrlenA
InterlockedIncrement
lstrcmpiW
GetExitCodeThread
SetLastError
DebugBreak
OutputDebugStringW
FreeLibrary
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
WriteFile
CreateFileW
CreateThread
CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
GetCurrentProcess
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
FlushInstructionCache
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlUnwind
GetModuleFileNameA
GetStdHandle
WriteConsoleA
RaiseException
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
GetProcAddress
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
HeapDestroy
HeapReAlloc
HeapSize
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
Sleep
ExitProcess
GetCPInfo
user32
wvsprintfW
SetWindowLongW
SetWindowTextW
LoadStringW
MessageBoxW
SendMessageW
DestroyWindow
PostThreadMessageW
GetWindowLongW
GetDlgItem
SetWindowPos
MapWindowPoints
EndDialog
CharNextW
PeekMessageW
GetSystemMetrics
LoadImageW
DefWindowProcW
GetActiveWindow
UnregisterClassA
DialogBoxParamW
GetParent
GetWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
GetClientRect
advapi32
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
shell32
ShellExecuteW
DoEnvironmentSubstW
ole32
CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
wininet
InternetReadFile
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoW
InternetCloseHandle
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ