Static task
static1
Behavioral task
behavioral1
Sample
84e3e31a307c02fb8cb54d37335411e8ecd8c8de4dbc0d5fe59eef630d98526d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
84e3e31a307c02fb8cb54d37335411e8ecd8c8de4dbc0d5fe59eef630d98526d.exe
Resource
win10v2004-20220812-en
General
-
Target
84e3e31a307c02fb8cb54d37335411e8ecd8c8de4dbc0d5fe59eef630d98526d
-
Size
741KB
-
MD5
625c8af657d7660f8be18a9240e86920
-
SHA1
a56c033f3f06579f8f4e66fea9a0df56bf6511f7
-
SHA256
84e3e31a307c02fb8cb54d37335411e8ecd8c8de4dbc0d5fe59eef630d98526d
-
SHA512
febd837cdab542cdc4e5d880b814240b77c92de8383e2d713a3bea2c2e4d99647499246c9da20f616d34a2cff98056a7c3f0cd539b84930cc37332104ce75dfb
-
SSDEEP
12288:qEDadqkCcPhGNjcxcKgL+lg1MtfxB16/Q4Reyahg2KjGqlngRqkhFok:qEDBVcJzxcKdlgYfg/heyqKKq0R
Malware Config
Signatures
Files
-
84e3e31a307c02fb8cb54d37335411e8ecd8c8de4dbc0d5fe59eef630d98526d.exe windows x86
5c772c79724c1d647e39da0420eaf2df
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetMailslotInfo
GetStdHandle
GetProcessPriorityBoost
AssignProcessToJobObject
GetBinaryTypeA
InterlockedDecrement
IsValidLocale
QueueUserAPC
SearchPathA
DeleteFileA
SuspendThread
SetEnvironmentVariableW
EnumUILanguagesA
LockFile
SetupComm
CreateHardLinkW
FindNextVolumeMountPointW
FindResourceExA
lstrcmpA
IsValidLanguageGroup
FindNextVolumeW
FindResourceExW
DnsHostnameToComputerNameW
GetOEMCP
GlobalGetAtomNameW
CommConfigDialogA
OpenFile
FormatMessageA
lstrcpynW
OpenSemaphoreA
WritePrivateProfileSectionW
LCMapStringA
GetSystemDefaultLCID
VerifyVersionInfoW
GetDateFormatA
GetThreadSelectorEntry
GetTempPathW
PeekNamedPipe
WriteFileEx
GetVersionExA
FreeResource
GlobalCompact
SetFileAttributesA
GetDiskFreeSpaceW
TlsFree
GetPrivateProfileSectionA
DuplicateHandle
lstrcpyA
GetQueuedCompletionStatus
CreateEventW
WaitForSingleObjectEx
InterlockedCompareExchange
GetThreadLocale
SetTapeParameters
GlobalMemoryStatus
DosDateTimeToFileTime
CancelDeviceWakeupRequest
IsBadHugeWritePtr
GetEnvironmentVariableA
RtlUnwind
GetTimeFormatA
lstrcmpiA
SetNamedPipeHandleState
GetSystemPowerStatus
BackupSeek
GetCommModemStatus
GetStartupInfoA
Process32NextW
DeleteFileW
GetModuleFileNameA
LocalShrink
GetAtomNameA
VerSetConditionMask
CallNamedPipeW
OpenFileMappingA
GetFullPathNameA
CreateNamedPipeW
SetProcessPriorityBoost
OutputDebugStringW
QueueUserWorkItem
SetThreadPriority
GetFileAttributesW
CreateSemaphoreW
SignalObjectAndWait
_lclose
DefineDosDeviceW
WriteProfileSectionA
SetLastError
GetUserDefaultLCID
FreeUserPhysicalPages
FatalExit
HeapAlloc
EnumSystemLanguageGroupsA
LocalHandle
GetCurrentThread
FileTimeToDosDateTime
GetPrivateProfileSectionNamesA
SystemTimeToTzSpecificLocalTime
EnumResourceNamesA
SetThreadIdealProcessor
advapi32
RegOpenKeyExA
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegCloseKey
RegSetValueExW
comctl32
InitCommonControlsEx
user32
SetRect
GetDesktopWindow
DrawMenuBar
IntersectRect
EnableMenuItem
SetCapture
InvertRect
GetMessageW
DialogBoxParamW
ReleaseDC
FrameRect
ShowWindow
GetSystemMetrics
GetDlgItemTextW
InvalidateRect
MoveWindow
FillRect
UpdateWindow
UnionRect
LoadCursorW
BeginPaint
CheckDlgButton
MessageBoxW
IsIconic
CheckRadioButton
MessageBoxA
GetDlgItem
GetSubMenu
GetWindowRect
EndPaint
wsprintfW
DefWindowProcW
RegisterClassW
LoadAcceleratorsW
SendMessageW
GetWindowPlacement
WinHelpW
PostMessageW
TranslateAcceleratorW
SetDlgItemTextW
WaitMessage
OffsetRect
GetForegroundWindow
LoadIconW
CreateWindowExW
PeekMessageW
GetDC
DestroyWindow
PtInRect
LoadStringA
LoadBitmapW
IsDlgButtonChecked
IsZoomed
AdjustWindowRect
GetClientRect
DrawTextW
EndDialog
GetMenu
ReleaseCapture
DispatchMessageW
shlwapi
PathCombineA
PathAppendA
Sections
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 250KB - Virtual size: 594KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 173KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ