Static task
static1
Behavioral task
behavioral1
Sample
2740addf3c7d92f73135e6929ab31f41b5a96603f090f0a7c2f24eddb642f00d.exe
Resource
win7-20220901-en
General
-
Target
2740addf3c7d92f73135e6929ab31f41b5a96603f090f0a7c2f24eddb642f00d
-
Size
520KB
-
MD5
175ae865d49449c3c7263c723ca0cb90
-
SHA1
22e2fac246820f59ec665ee7a8e4b0cab69f69b6
-
SHA256
2740addf3c7d92f73135e6929ab31f41b5a96603f090f0a7c2f24eddb642f00d
-
SHA512
7b98e80a5cefebbe3fc2bc840882ce4e62b4d51a2c68e0625e385e800763826858f79f172e38f2036315d95264a08520a80ba01107da54209289b1e5f454d565
-
SSDEEP
6144:TvLpPV4I/w5899C+SgmaZHFrSluBp7BnBHwUDd/UvONneDVH66g5bZOC:TvLpPH9isrS8vpd/9NnAVH66CF5
Malware Config
Signatures
Files
-
2740addf3c7d92f73135e6929ab31f41b5a96603f090f0a7c2f24eddb642f00d.exe windows x86
7d8fa7c1e43d927cf18ca8ae169eb559
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
GetVersionExA
WaitForSingleObject
CreateProcessA
ResetEvent
SetEvent
WaitForMultipleObjects
Sleep
CreateThread
GetLastError
CreateMutexA
LoadLibraryExA
GetModuleHandleA
GetSystemDirectoryA
TerminateProcess
GlobalFree
GlobalAlloc
ReleaseMutex
GetCurrentProcessId
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
CompareStringW
CompareStringA
FindFirstFileA
GetLocaleInfoW
HeapSize
FlushFileBuffers
GetConsoleMode
GetConsoleCP
VirtualAlloc
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
OpenProcess
FindClose
CloseHandle
LoadLibraryA
GetProcAddress
FreeLibrary
CreateEventA
GetModuleFileNameA
WriteConsoleW
SetStdHandle
ReadFile
SetFilePointer
CreateFileA
SetEnvironmentVariableA
RaiseException
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
MultiByteToWideChar
GetFileAttributesA
RtlUnwind
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
WideCharToMultiByte
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FatalAppExitA
WriteFile
SetConsoleCtrlHandler
InterlockedExchange
SetEnvironmentVariableW
user32
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
SetWindowLongA
GetWindowLongA
DefWindowProcA
PostQuitMessage
LoadMenuA
GetSubMenu
DestroyMenu
SetMenuDefaultItem
GetCursorPos
SetForegroundWindow
TrackPopupMenu
CreatePopupMenu
GetMenuStringA
ModifyMenuA
EnableMenuItem
FindWindowA
GetWindowThreadProcessId
SendMessageA
AppendMenuA
MessageBoxA
LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA
PostMessageA
wsprintfA
gdi32
GetStockObject
advapi32
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegEnumKeyA
shell32
Shell_NotifyIconA
ShellExecuteA
Sections
.text Size: 300KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ugvqgxu Size: 80KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE