Static task
static1
Behavioral task
behavioral1
Sample
72145abcfea9bb8f177e43643caf9505fa0f97106c7a3c59dc8e8f3514326ecb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
72145abcfea9bb8f177e43643caf9505fa0f97106c7a3c59dc8e8f3514326ecb.exe
Resource
win10v2004-20220812-en
General
-
Target
72145abcfea9bb8f177e43643caf9505fa0f97106c7a3c59dc8e8f3514326ecb
-
Size
216KB
-
MD5
2e78cbf3ce31dcfda21d38b2fd4c5f34
-
SHA1
6dcb670f07610eafae7bd30ca4c47606fee4b2ce
-
SHA256
72145abcfea9bb8f177e43643caf9505fa0f97106c7a3c59dc8e8f3514326ecb
-
SHA512
a30cdcb35712eb3331fae041935da2fc7432561eec8efcc7f6b96a60e5bd2f4cae0b06d695ebc51ac6f58e28bf1c6ca826ce65367beb7aff45d9cad1adde7b1c
-
SSDEEP
6144:P7Fv+1AnqWa3mK9pH5nBHV4+GI133udy0:TF+ua5pl9V4+F1Hu40
Malware Config
Signatures
Files
-
72145abcfea9bb8f177e43643caf9505fa0f97106c7a3c59dc8e8f3514326ecb.exe windows x86
dda70cdff98b8ca1b8cdf3dc3c76569b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msnetobj
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
kernel32
GetThreadPriority
ReleaseSemaphore
MulDiv
GetCurrentThread
CreateThread
lstrcpyW
IsBadCodePtr
QueryPerformanceCounter
GetFileSize
SetThreadPriority
GetProfileIntA
CloseHandle
WaitForMultipleObjects
GetFileAttributesW
GetDiskFreeSpaceW
FreeLibrary
GetQueuedCompletionStatus
lstrcmpiW
lstrcpyA
CreateEventW
LeaveCriticalSection
lstrcmpW
WaitForSingleObject
SetUnhandledExceptionFilter
GetCurrentProcess
GetEnvironmentStringsW
DeleteFileW
InterlockedIncrement
GetFullPathNameW
ResetEvent
InterlockedExchange
HeapFree
GlobalAlloc
HeapAlloc
GetSystemInfo
GetTimeZoneInformation
CreateFileW
GlobalLock
SetFilePointer
GetCurrentProcessId
GetTickCount
GetModuleFileNameA
GlobalMemoryStatus
lstrcpynW
IsBadWritePtr
GlobalHandle
GetSystemTimeAsFileTime
LoadLibraryW
GetLastError
GetModuleHandleA
lstrlenA
EnterCriticalSection
CreateSemaphoreW
MultiByteToWideChar
GlobalUnlock
GlobalFree
WideCharToMultiByte
GetProcessHeap
IsBadReadPtr
lstrlenW
InitializeCriticalSection
WriteFile
InterlockedDecrement
DeleteCriticalSection
SetEvent
GetVersionExW
GetPrivateProfileStringW
ReadFile
SetEndOfFile
VirtualFree
oleaut32
VarBstrFromDisp
VarBstrFromUI2
VarBstrFromI8
VarBstrFromDate
VarBstrFromR4
VarBstrFromUI8
VarBstrFromI2
VarBstrFromDec
VarBstrFromI4
VarBstrFromUI1
VarBstrFromUI4
VarBstrFromCy
VarBstrFromI1
VarBstrFromR8
user32
CreateDialogParamW
ReleaseDC
SendMessageW
PeekMessageW
InvalidateRect
SetWindowLongW
DestroyWindow
GetAsyncKeyState
SetDlgItemInt
GetDesktopWindow
DefWindowProcW
GetWindowLongW
GetDC
CheckRadioButton
IsRectEmpty
DispatchMessageW
LoadStringW
GetDlgItemInt
MoveWindow
TranslateMessage
GetWindowRect
SetCursor
GetDlgItem
EnableWindow
ClientToScreen
GetClientRect
IsWindowVisible
CheckDlgButton
ShowWindow
IsWindow
SetDlgItemTextW
LoadCursorW
msoert2
AppendTempFileList
msls31
LsCompressSubline
LssbGetPlsrunsFromSubline
LssbGetDurTrailWithPensInSubline
LssbGetNumberDnodesInSubline
LssbGetObjDimSubline
LssbGetVisibleDcpInSubline
nddeapi
NDdeGetErrorStringA
NDdeGetTrustedShareW
NDdeIsValidAppTopicListW
NDdeIsValidAppTopicListA
NDdeGetShareSecurityA
NDdeGetShareSecurityW
NDdeGetTrustedShareA
cewmdm
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
DllGetClassObject
msoeacct
DllGetClassObject
ValidEmailAddress
DllCanUnloadNow
GetDllMajorVersion
HrCreateAccountManager
msltus40
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ