Static task
static1
Behavioral task
behavioral1
Sample
399490b74a42df1d9ff2b1b7de017ef103950ce2a35547002ebe63108539b3d8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
399490b74a42df1d9ff2b1b7de017ef103950ce2a35547002ebe63108539b3d8.exe
Resource
win10v2004-20220812-en
General
-
Target
399490b74a42df1d9ff2b1b7de017ef103950ce2a35547002ebe63108539b3d8
-
Size
507KB
-
MD5
6ba650ce47b1e3b25cfdc4d43157d9b0
-
SHA1
536a65e05da253de2e16e6a18b8bb13ec2373432
-
SHA256
399490b74a42df1d9ff2b1b7de017ef103950ce2a35547002ebe63108539b3d8
-
SHA512
f216f6941180ef3858d043ea33d7388879f85d80c3dfd60cfc61422f50b05f56ec6451f1803e94d1069a2e46cfe84e67e14ed952be3c97d721c25bf8ac7e5d61
-
SSDEEP
12288:+1DLBxXlO2+mHFeqfmfuFR2H8Eq1DVe6XZsuviLF0aLdjnBkJ:+1DLBxXA2r6u3VVSFLF0YbkJ
Malware Config
Signatures
Files
-
399490b74a42df1d9ff2b1b7de017ef103950ce2a35547002ebe63108539b3d8.exe windows x86
521948d9e48bac68a27e524f0cbaa891
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
Sleep
GetCurrentThreadId
HeapAlloc
LoadLibraryW
LoadLibraryW
LoadLibraryA
HeapFree
GetLastError
LoadLibraryA
VirtualProtect
CreateFileW
VirtualProtect
GetModuleFileNameW
CreateThread
GetProcessHeap
GetCurrentProcess
GetModuleHandleW
LeaveCriticalSection
InterlockedDecrement
InterlockedDecrement
GetTickCount
GetCurrentThreadId
GetVersionExA
lstrlenA
DisableThreadLibraryCalls
LeaveCriticalSection
lstrcmpiW
GetProcAddress
Sleep
GetCurrentProcessId
InitializeCriticalSection
CreateThread
lstrcmpiW
InterlockedExchange
GetCurrentProcess
LocalAlloc
DisableThreadLibraryCalls
QueryPerformanceCounter
MultiByteToWideChar
HeapFree
QueryPerformanceCounter
CreateFileW
DisableThreadLibraryCalls
GetProcAddress
DeleteCriticalSection
VirtualAlloc
HeapAlloc
VirtualAlloc
LoadLibraryW
InterlockedExchange
CloseHandle
CloseHandle
GetModuleFileNameW
GetModuleFileNameA
GetVersionExA
GetCurrentProcessId
MultiByteToWideChar
GetTickCount
GetModuleHandleA
GetModuleHandleA
CreateEventW
InitializeCriticalSection
InterlockedIncrement
GetModuleHandleA
EnterCriticalSection
user32
wsprintfA
InvalidateRect
DialogBoxParamW
LoadIconW
GetClientRect
SetTimer
DispatchMessageW
GetWindowLongW
GetDlgItem
LoadIconW
IsDlgButtonChecked
PeekMessageW
DialogBoxParamW
GetDC
GetSystemMetrics
SetForegroundWindow
CreateWindowExW
EndDialog
GetSystemMetrics
SendMessageW
ShowWindow
DefWindowProcW
SendMessageW
EndDialog
LoadIconW
BeginPaint
GetSystemMetrics
DialogBoxParamW
SetWindowLongW
LoadStringW
GetParent
LoadStringW
GetDC
LoadCursorW
PostQuitMessage
SetDlgItemTextW
LoadStringW
SetFocus
GetSysColor
GetDlgItem
KillTimer
IsWindow
SetWindowPos
EnableWindow
GetWindowRect
DestroyWindow
GetDC
SetWindowPos
BeginPaint
SetFocus
GetClientRect
PeekMessageW
IsDlgButtonChecked
SetCursor
DefWindowProcW
LoadIconW
LoadIconW
DefWindowProcW
SetDlgItemTextW
LoadStringW
DialogBoxParamW
gdi32
CreateDIBitmap
SetTextColor
CreateCompatibleDC
SetBrushOrgEx
GetBrushOrgEx
RoundRect
CombineRgn
GetCurrentObject
Rectangle
Ellipse
StretchBlt
CreateDIBitmap
CreateCompatibleDC
GetWindowOrgEx
CreateFontIndirectA
CreateBitmap
MoveToEx
CreateSolidBrush
GetBrushOrgEx
Rectangle
GetWindowExtEx
SetWindowExtEx
CreateFontA
CreateBitmap
CreateDIBSection
CreateSolidBrush
GetBkColor
BitBlt
BitBlt
GetCurrentObject
GetWindowOrgEx
CreateBitmap
SelectObject
CreateBitmapIndirect
CreateDIBSection
SetBkColor
CreateSolidBrush
CreateBitmapIndirect
SetBkColor
GetCurrentObject
CreateFontA
Polygon
SetPixel
Polygon
CreateDIBSection
GetBkMode
SetBkColor
SelectObject
CreateSolidBrush
CreateBitmapIndirect
SetPixel
CombineRgn
SelectObject
CreateRectRgn
Polygon
CreatePen
SetTextColor
GetWindowExtEx
CreateRectRgn
SetBkMode
Ellipse
SetBrushOrgEx
RoundRect
SetBkColor
SetWindowExtEx
RoundRect
PatBlt
GetWindowOrgEx
CreateSolidBrush
PatBlt
Sections
.text Size: 499KB - Virtual size: 964KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ