Static task
static1
Behavioral task
behavioral1
Sample
7e0a09c984742dd69b94f0be5b55f3917ffdad33b57081d55c244e95feeeebf2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7e0a09c984742dd69b94f0be5b55f3917ffdad33b57081d55c244e95feeeebf2.exe
Resource
win10v2004-20220812-en
General
-
Target
7e0a09c984742dd69b94f0be5b55f3917ffdad33b57081d55c244e95feeeebf2
-
Size
206KB
-
MD5
0197328933ee4176b2d02b2b92acfc02
-
SHA1
9cfbd98466a275677568c9325f1e1dfe04fa3e29
-
SHA256
7e0a09c984742dd69b94f0be5b55f3917ffdad33b57081d55c244e95feeeebf2
-
SHA512
30a20728d71a52a72c0320d2dfa9137a4976cd2d1711243dd126c2ac4b0365b9d8da8b0483189d4a87d5a370c2ee8e846dfdb11b41f81f352ffd5d5c84eefd94
-
SSDEEP
6144:0GFQaS0faLqX7s6z0y+FLN8pPAEkEKKo:0Jqhz0ysLN8qEkio
Malware Config
Signatures
Files
-
7e0a09c984742dd69b94f0be5b55f3917ffdad33b57081d55c244e95feeeebf2.exe windows x86
004dc0dfba0e6f74ab4fb801750d5987
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyW
CreateSemaphoreW
ReadDirectoryChangesW
QueryPerformanceFrequency
GetProcessHeap
GetCommandLineA
SetCalendarInfoW
LoadLibraryA
GetProcAddress
GetACP
CreateDirectoryW
SearchPathW
OpenWaitableTimerA
GetEnvironmentStringsW
GetTempFileNameA
lstrcmpA
CreateFileMappingA
lstrcmp
GlobalFindAtomW
user32
ShowCaret
SetDlgItemTextA
CheckMenuItem
GetWindowLongW
GetForegroundWindow
SetDlgItemInt
ChildWindowFromPoint
DestroyWindow
EndDialog
ShowCursor
LoadCursorA
SetActiveWindow
InsertMenuItemA
DrawTextA
GetIconInfo
GetMenuItemInfoW
GetClassInfoA
GetDC
CallWindowProcA
DefFrameProcW
GetDlgItemInt
DeleteMenu
GetMenuItemInfoA
PeekMessageA
CharLowerA
FillRect
DrawIcon
DialogBoxIndirectParamA
SetWindowPos
gdi32
CreateFontIndirectA
CreateDCW
PolyPolygon
GetBkColor
UnrealizeObject
GetCharWidthFloatA
GetTextExtentPointA
GetNearestColor
GetTextExtentPointW
GetBitmapBits
GetCharABCWidthsW
SetWindowOrgEx
SetWinMetaFileBits
GetWorldTransform
EnumFontFamiliesW
CreateScalableFontResourceW
PolyPolyline
advapi32
RegRestoreKeyA
RegDeleteValueA
RegOpenKeyA
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
shlwapi
PathUnmakeSystemFolderW
PathCompactPathW
SHRegDuplicateHKey
PathIsLFNFileSpecA
StrCatBuffW
PathFindFileNameW
PathCombineW
UrlCanonicalizeA
UrlCombineW
SHRegDeleteUSValueW
StrPBrkA
StrNCatA
PathUnmakeSystemFolderA
SHRegGetBoolUSValueW
AssocQueryStringByKeyA
SHOpenRegStream2A
opengl32
glCallLists
wininet
FtpOpenFileA
CreateUrlCacheContainerW
ForceNexusLookupExW
InternetCanonicalizeUrlA
InternetConfirmZoneCrossingA
InternetDial
InternetQueryFortezzaStatus
InternetCheckConnectionW
InternetHangUp
DeleteUrlCacheGroup
InternetDialA
FindFirstUrlCacheEntryA
InternetAttemptConnect
inetcomm
MimeOleSetCompatMode
oledlg
OleUIBusyA
OleUIEditLinksW
OleUIConvertA
OleUIEditLinksA
OleUIUpdateLinksW
OleUIAddVerbMenuW
OleUIChangeSourceW
wsock32
GetTypeByNameW
EnumProtocolsA
GetAddressByNameA
dn_expand
getservbyport
NPLoadNameSpaces
setsockopt
Sections
.muaReG Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.JaPBqw Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Ndg Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nk Size: 1024B - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.OYg Size: 3KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.NQpOeZ Size: 3KB - Virtual size: 419KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jePB Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ