Static task
static1
Behavioral task
behavioral1
Sample
751da430e03b4d5d2a5ce40676394a8ce95cccbdcc24731f75b6682c82de3ed9.exe
Resource
win7-20220812-en
General
-
Target
751da430e03b4d5d2a5ce40676394a8ce95cccbdcc24731f75b6682c82de3ed9
-
Size
473KB
-
MD5
4569f5482227b798ac3061d3d36dcc04
-
SHA1
242426d25e8dadfdc3df2d7e4c3bc4f67fe02c53
-
SHA256
751da430e03b4d5d2a5ce40676394a8ce95cccbdcc24731f75b6682c82de3ed9
-
SHA512
9f2e4583f83b3791ac188a1242fdbcfa1ca8815889673f302cc964128ce44d7357fe84c059bae58877cfa73c16119bf5c4a06d7550656c4bf319ec73e86a08f6
-
SSDEEP
6144:K2sv8RPceJhjEaVTp74CQc+J5x5qtpzDEFfc3J3RPSYl6PAmoINZoDX:cejNrP3J3MYltmW
Malware Config
Signatures
Files
-
751da430e03b4d5d2a5ce40676394a8ce95cccbdcc24731f75b6682c82de3ed9.exe windows x86
688e0c17efb16d2ca8a4fb97bcdc80b7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
lz32
GetExpandedNameW
LZOpenFileW
LZCopy
LZClose
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
comctl32
ord17
setupapi
SetupIterateCabinetW
shlwapi
StrStrIW
kernel32
SetConsoleCtrlHandler
RtlUnwind
GetVersionExW
FindClose
FindNextFileW
lstrcmpW
FindFirstFileW
lstrcatW
lstrcpyW
lstrlenW
WritePrivateProfileStringW
WritePrivateProfileSectionW
GetPrivateProfileSectionW
GetWindowsDirectoryW
MoveFileExW
FreeLibrary
GetProcAddress
LoadLibraryW
WaitForSingleObject
OpenProcess
CloseHandle
InterlockedExchange
GetModuleFileNameW
GetCurrentProcessId
Sleep
GetTempPathW
HeapFree
GetProcessHeap
WriteFile
DeleteFileW
HeapAlloc
CopyFileW
SetFileAttributesW
GetFileAttributesW
Process32NextW
lstrcmpiW
Process32FirstW
CreateToolhelp32Snapshot
GetLocaleInfoW
MultiByteToWideChar
WideCharToMultiByte
SetFilePointer
GetDiskFreeSpaceW
GetModuleHandleW
CreateProcessW
ReadFile
GetFileSize
CreateFileW
CreateDirectoryW
RemoveDirectoryW
SetCurrentDirectoryW
GetCurrentProcess
GetDriveTypeW
GetLogicalDriveStringsW
GetShortPathNameW
GetSystemDirectoryW
GetLastError
CreateMutexW
GetCurrentDirectoryW
InitializeCriticalSection
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
IsDebuggerPresent
GetStdHandle
ExitProcess
HeapReAlloc
VirtualAlloc
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
LoadLibraryA
GetTimeZoneInformation
HeapSize
CompareStringA
CompareStringW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
lstrcpynW
SetEnvironmentVariableA
HeapCreate
HeapDestroy
GetCurrentThread
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
IsValidCodePage
GetCommandLineA
GetVersionExA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetOEMCP
user32
KillTimer
PostMessageW
DialogBoxParamW
DefWindowProcW
IsDlgButtonChecked
EndDialog
GetDlgItemTextW
SetFocus
ExitWindowsEx
EnableWindow
FindWindowW
GetSystemMenu
DeleteMenu
CharUpperW
SetDlgItemTextW
CharPrevW
PeekMessageW
DispatchMessageW
SystemParametersInfoW
GetWindowRect
MoveWindow
ShowWindow
BringWindowToTop
SetActiveWindow
LoadStringW
MessageBoxW
wsprintfW
GetDlgItem
SendMessageW
DrawMenuBar
advapi32
LookupPrivilegeValueW
AdjustTokenPrivileges
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
shell32
SHChangeNotify
SHGetFolderPathW
SHGetFileInfoW
ShellExecuteExW
SHGetSpecialFolderLocation
SHGetMalloc
ole32
CoInitialize
CoCreateInstance
CoUninitialize
Sections
.text Size: 204KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 347KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE