Static task
static1
Behavioral task
behavioral1
Sample
74af0103025235becaf688bca59c9cf30561b286a28f1b7cbf814a3f0d6ca221.exe
Behavioral task
behavioral2
Sample
74af0103025235becaf688bca59c9cf30561b286a28f1b7cbf814a3f0d6ca221.exe
Resource
win10v2004-20220812-en
General
-
Target
74af0103025235becaf688bca59c9cf30561b286a28f1b7cbf814a3f0d6ca221
-
Size
326KB
-
MD5
27318211db1c0459c7ed672cd2ae8550
-
SHA1
a8cbae9759214b0be8026052d99f51879c6fc968
-
SHA256
74af0103025235becaf688bca59c9cf30561b286a28f1b7cbf814a3f0d6ca221
-
SHA512
1d1cd7846a6c55ea3afdf89b4da3686e5a3ab181ad30200e77dea0fa154607c3be033c709cd5377ab034e7120ef8ee690ea8a6d708a14cbb469a253019cb2b92
-
SSDEEP
6144:3gNEVdaI9nnnXWrCWUz2pRXgBSLvITY+Xv2rMSsQLH5Adt:3gNEnhGw4ITRv2gSsPdt
Malware Config
Signatures
Files
-
74af0103025235becaf688bca59c9cf30561b286a28f1b7cbf814a3f0d6ca221.exe windows x86
be29daa0a5e3bc5e1fefb2ab26ecbe51
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
wcsncpy
memcpy
swscanf
_except_handler3
wcstok
wcscpy
strlen
malloc
free
_wtoi
iswdigit
wcsncmp
wcslen
swprintf
vswprintf
wcsrchr
wcsstr
memmove
_wcsicmp
wcscmp
wcschr
__CxxFrameHandler
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
_controlfp
kernel32
GetStartupInfoA
GetModuleHandleA
DeleteFileW
GetCurrentProcess
SetPriorityClass
RemoveDirectoryW
GlobalAlloc
GlobalLock
GlobalFree
GetVersionExW
GetTempPathW
lstrcpyW
lstrcatW
FindFirstFileW
CreateFileW
GetFileInformationByHandle
CloseHandle
GlobalDeleteAtom
FreeLibrary
LoadLibraryW
GlobalAddAtomW
GlobalFindAtomW
MulDiv
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameW
CreateDirectoryW
GetFileAttributesW
GetUserDefaultLangID
GetProcAddress
SetLastError
FindClose
FindNextFileW
CompareStringW
user32
DrawTextW
GetSysColor
EndPaint
ScreenToClient
BeginPaint
SetWindowLongW
PtInRect
GetClientRect
KillTimer
InvalidateRect
GetWindowLongW
GetPropW
SetPropW
RemovePropW
DialogBoxIndirectParamW
GetDC
ReleaseDC
RegisterWindowMessageW
OffsetRect
CopyRect
GetSystemMetrics
ClientToScreen
MoveWindow
EndDialog
SetWindowTextW
GetDlgItem
SendMessageW
GetParent
GetWindowRect
SystemParametersInfoW
SetWindowPos
SendDlgItemMessageW
FindWindowW
EnableWindow
SetDlgItemTextW
ShowWindow
LoadStringW
PostMessageW
CreateWindowExW
SetFocus
LoadIconW
SetTimer
gdi32
BitBlt
SetBkColor
ExtTextOutW
SetBkMode
SetTextColor
SelectObject
CreateCompatibleBitmap
CreateFontW
DeleteObject
DeleteDC
CreateCompatibleDC
GetTextExtentPoint32W
GetTextMetricsW
advapi32
RegSetValueExW
RegCloseKey
RegCreateKeyW
RegSetValueExA
RegOpenKeyExW
RegQueryValueExW
shell32
ShellExecuteW
SHChangeNotify
ole32
StringFromGUID2
CLSIDFromString
oleaut32
SysStringLen
SysAllocString
SysFreeString
SysAllocStringLen
comctl32
PropertySheetW
Sections
.text Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ