Static task
static1
Behavioral task
behavioral1
Sample
122617a4862a77f6f83e50fce9c63c98b43ad116c81516cbb04a6fb0a3d1dadc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
122617a4862a77f6f83e50fce9c63c98b43ad116c81516cbb04a6fb0a3d1dadc.exe
Resource
win10v2004-20220812-en
General
-
Target
122617a4862a77f6f83e50fce9c63c98b43ad116c81516cbb04a6fb0a3d1dadc
-
Size
188KB
-
MD5
02e3f31853838c72f8122a6e47a84950
-
SHA1
fc7a857abedf74933829914d84cd952aa7166a52
-
SHA256
122617a4862a77f6f83e50fce9c63c98b43ad116c81516cbb04a6fb0a3d1dadc
-
SHA512
16238695652aa8693ecfb646c818dddc151ef0db9ec7b0a40050d52582a03fb0d736e52f6a0351a090dea74381183c672246b8361a0d8118363b436be62abdf8
-
SSDEEP
3072:26emfum8IM+rd8TIR0jzuPkMowVGeKVxhPCuE7bJePB2tpWVgbkYy:2Zmfups2ER0jNkGtZaN7w2tpK
Malware Config
Signatures
Files
-
122617a4862a77f6f83e50fce9c63c98b43ad116c81516cbb04a6fb0a3d1dadc.exe windows x86
53062c860f49df89937d052203c122b0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
GetConsoleMode
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
HeapSize
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
WriteFile
ExitProcess
MultiByteToWideChar
LCMapStringW
GetProcAddress
GetCurrentThreadId
LoadLibraryW
RtlUnwind
SetStdHandle
WriteConsoleW
HeapReAlloc
IsProcessorFeaturePresent
FlushFileBuffers
CloseHandle
GetModuleHandleA
GetFileType
WriteConsoleA
GetLastError
GetStdHandle
EnumSystemCodePagesA
HeapCreate
Sleep
WideCharToMultiByte
GlobalAlloc
GetProcessHeap
SetLastError
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
CreateFileW
TlsAlloc
GetCurrentProcess
HeapAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
RaiseException
CreateFileA
InterlockedIncrement
GetCPInfo
EncodePointer
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
HeapFree
GetCommandLineA
user32
IsWindowVisible
RegisterClassW
SystemParametersInfoA
SetWindowTextA
LoadImageA
MessageBoxW
GetMenuItemCount
SetDlgItemTextA
SendMessageW
EnableWindow
LoadCursorA
GetDlgItemTextA
EnumWindows
DestroyWindow
InsertMenuItemA
SendDlgItemMessageA
RegisterWindowMessageW
LoadImageW
PostMessageW
SetForegroundWindow
GetParent
LoadMenuA
LoadIconA
SendMessageA
IsDlgButtonChecked
GetDC
GetMenu
MessageBoxA
GetWindowLongW
CreateWindowExA
ReleaseDC
GetDlgItem
SetWindowLongW
EndDialog
LoadStringW
LoadAcceleratorsA
ShowWindow
SetMenu
CreatePopupMenu
GetSysColorBrush
SetWindowTextW
gdi32
SetTextColor
DeleteDC
SetBkColor
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
StretchDIBits
CreateFontW
GetObjectA
CreateSolidBrush
BitBlt
advapi32
AllocateAndInitializeSid
GetTokenInformation
EqualSid
FreeSid
OpenProcessToken
GetSecurityInfo
LookupAccountSidA
shell32
SHGetFolderLocation
ord155
ord2
SHGetFileInfoA
ole32
RegisterDragDrop
avifil32
CreateEditableStream
winmm
timeBeginPeriod
shlwapi
StrTrimA
comctl32
ord410
gdiplus
GdiplusShutdown
GdipFree
GdipAlloc
GdipDisposeImage
GdipCreateBitmapFromFile
GdipGetPropertySize
GdipCloneImage
GdiplusStartup
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ