Static task
static1
Behavioral task
behavioral1
Sample
fd9c32fb520fdf5423d0e8df56d6aee386dfe5c98ff27ad06f39157bffb2089a.exe
Resource
win7-20220901-en
General
-
Target
fd9c32fb520fdf5423d0e8df56d6aee386dfe5c98ff27ad06f39157bffb2089a
-
Size
378KB
-
MD5
6f415ca960fbec1cb9a7671ff6932a00
-
SHA1
068cd9fb2866baf050a91df56d4193307bb338da
-
SHA256
fd9c32fb520fdf5423d0e8df56d6aee386dfe5c98ff27ad06f39157bffb2089a
-
SHA512
9fb01ca3760a9bbf41e427fc6e81b8a12e9a5e4e69848860ce2493d777365ed7eaa2a510e76cf5ac44d4d3b5696b26976c42bfde08b24a76804f577ab2314b5b
-
SSDEEP
6144:2I9YvpAA93le6w5NUR334u8T2tjIvra2YfbVNMLmf8rM2P5KkflCc:ropAAtle6wUV3Xsij2QVNM3rVPVf
Malware Config
Signatures
Files
-
fd9c32fb520fdf5423d0e8df56d6aee386dfe5c98ff27ad06f39157bffb2089a.exe windows x86
ffeec55bdc406c1d94e316283a8e52ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringA
RaiseException
lstrlenW
WideCharToMultiByte
InterlockedDecrement
GetWindowsDirectoryA
lstrcpynA
GetCurrentThreadId
GetCurrentProcessId
GetTickCount
WriteFile
SetFilePointer
MoveFileA
DeleteFileA
SetFileAttributesA
GetFileSize
CreateFileA
GetModuleFileNameA
GetLocalTime
GetFileAttributesA
GetProcAddress
LoadLibraryA
SetCurrentDirectoryA
GetCommandLineA
Sleep
GetCurrentDirectoryA
SetLastError
LockResource
SizeofResource
LoadResource
FindResourceA
FindResourceExA
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
FreeLibrary
CopyFileA
RemoveDirectoryA
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
MultiByteToWideChar
InitializeCriticalSection
LoadLibraryExA
lstrcmpiA
IsDBCSLeadByte
GetPrivateProfileIntA
CompareStringW
CompareStringA
FlushFileBuffers
ReadFile
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InterlockedExchange
InitializeCriticalSectionAndSpinCount
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetLocaleInfoW
SetConsoleCtrlHandler
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
lstrlenA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CreateThread
CloseHandle
GetLastError
GetPrivateProfileStringA
WritePrivateProfileStringA
ExitProcess
LCMapStringW
LCMapStringA
FatalAppExitA
HeapCreate
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentThread
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
IsDebuggerPresent
lstrcatA
SetEnvironmentVariableA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
RtlUnwind
VirtualProtect
GetModuleHandleW
GetSystemInfo
VirtualQuery
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
user32
CharNextA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
CreateDialogIndirectParamA
DefWindowProcA
SetWindowLongA
CharUpperA
IsWindow
FindWindowA
UnregisterClassA
GetParent
GetWindow
GetWindowRect
GetWindowLongA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
KillTimer
SetTimer
ShowWindow
GetClientRect
SetWindowPos
DestroyWindow
LoadIconA
PostMessageA
MessageBoxA
PostQuitMessage
SystemParametersInfoA
SetForegroundWindow
SendMessageA
advapi32
RegCreateKeyExA
RegQueryValueExA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
shell32
Shell_NotifyIconA
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
CoUninitialize
oleaut32
CreateErrorInfo
GetErrorInfo
VarUI4FromStr
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SetErrorInfo
VariantInit
VariantChangeType
SysAllocString
VariantClear
shlwapi
PathFileExistsA
comctl32
InitCommonControlsEx
Sections
.text Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE