Static task
static1
Behavioral task
behavioral1
Sample
096d973eab6ee207c6f203c81d12fde9f5a48c72303657461761e18961a646d9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
096d973eab6ee207c6f203c81d12fde9f5a48c72303657461761e18961a646d9.exe
Resource
win10v2004-20220812-en
General
-
Target
096d973eab6ee207c6f203c81d12fde9f5a48c72303657461761e18961a646d9
-
Size
373KB
-
MD5
7990f2a0b2724b37c79132d613d82a30
-
SHA1
57659cce40d2979a9ae918ebc20320aaf98304de
-
SHA256
096d973eab6ee207c6f203c81d12fde9f5a48c72303657461761e18961a646d9
-
SHA512
6b8a489c265475a58bb9910ae585209c7fc9c65093cf3533acce1770c0ceb78d78fc3a094d475b937451394f572db6da6813bdd140722a643a4c5a67796d7239
-
SSDEEP
6144:yAIwRk6enrM9AJrMfOfYLHV4sUqQK9TUWqhExJxtZnWk77l7IOr:vIw66P6JrMfOsHVmqQKuWqCx5ZnZ7l75
Malware Config
Signatures
Files
-
096d973eab6ee207c6f203c81d12fde9f5a48c72303657461761e18961a646d9.exe windows x86
e587ccb631805e23b3ba2e043e61a5ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreatePropertySheetPageA
CreateStatusWindow
ImageList_GetBkColor
ImageList_DragMove
InitCommonControlsEx
ImageList_DragEnter
CreateStatusWindowW
ImageList_BeginDrag
ImageList_SetOverlayImage
ImageList_DrawIndirect
ImageList_AddMasked
ImageList_Read
CreateMappedBitmap
advapi32
RegOpenKeyW
CryptSetProviderA
LookupPrivilegeValueA
CryptExportKey
kernel32
GlobalFree
GetStartupInfoA
InitializeCriticalSectionAndSpinCount
GetStringTypeA
VirtualAlloc
GetModuleFileNameA
MultiByteToWideChar
LeaveCriticalSection
HeapAlloc
TlsGetValue
GetLocaleInfoA
GetCurrentThread
UnhandledExceptionFilter
ResetEvent
TlsFree
SetEnvironmentVariableA
RtlUnwind
DeleteCriticalSection
InterlockedDecrement
SetStdHandle
GetTimeZoneInformation
FindAtomW
WideCharToMultiByte
GetCurrentProcessId
GetUserDefaultLCID
TerminateProcess
EnumSystemLocalesA
FindNextFileA
GetModuleHandleA
GetLastError
CreateFileA
TlsSetValue
InterlockedExchange
GetProcAddress
LocalSize
LoadLibraryExW
FreeLibrary
CompareStringA
FreeEnvironmentStringsA
CloseHandle
QueryPerformanceCounter
GetACP
IsDebuggerPresent
TlsAlloc
GetStdHandle
WaitForMultipleObjectsEx
CompareStringW
GetSystemTimeAsFileTime
SetLastError
GetLocaleInfoW
Sleep
WriteConsoleA
VirtualQuery
ExitProcess
LCMapStringA
TransmitCommChar
GetConsoleCP
HeapSize
GetOEMCP
GetTimeFormatA
HeapReAlloc
GetThreadLocale
GlobalCompact
GetTickCount
GetModuleHandleW
GetCommandLineA
WriteConsoleW
HeapValidate
HeapFree
ContinueDebugEvent
FreeEnvironmentStringsW
GetCalendarInfoA
GetCPInfo
InterlockedIncrement
GetLogicalDriveStringsW
CreateMutexA
EnterCriticalSection
IsValidLocale
HeapCreate
HeapDestroy
WriteFile
HeapLock
GetEnvironmentStringsW
GetFileType
LoadLibraryA
SetFilePointer
VirtualFree
GetCurrentThreadId
OpenMutexA
ReadFile
GetConsoleOutputCP
GetCurrentProcess
GetConsoleMode
IsValidCodePage
GetStringTypeW
FindFirstFileW
GetEnvironmentStrings
SetConsoleCtrlHandler
OutputDebugStringW
SetUnhandledExceptionFilter
LCMapStringW
SetConsoleCP
GetDateFormatA
SetHandleCount
FlushFileBuffers
user32
CreateMenu
CreateAcceleratorTableA
GetAltTabInfo
TrackPopupMenuEx
MessageBeep
GetQueueStatus
GetOpenClipboardWindow
ReplyMessage
FrameRect
TrackPopupMenu
DestroyCaret
SetDoubleClickTime
RegisterClassA
CreateWindowStationA
CreateWindowExA
DrawFocusRect
GetMessageW
RegisterClassExA
shell32
SHGetFileInfoW
ShellExecuteA
Sections
.text Size: 255KB - Virtual size: 254KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ