Static task
static1
Behavioral task
behavioral1
Sample
ceb83dffd65e374020d1633925b565f6d877d1ea8f218f02132dfc34d8b5285b.exe
Resource
win7-20220812-en
General
-
Target
ceb83dffd65e374020d1633925b565f6d877d1ea8f218f02132dfc34d8b5285b
-
Size
224KB
-
MD5
74bb022bfd0e5b65f9298fac00e84fc2
-
SHA1
3be89e348983c85e94b01313a47f561739ad3daf
-
SHA256
ceb83dffd65e374020d1633925b565f6d877d1ea8f218f02132dfc34d8b5285b
-
SHA512
105b498c949159c5a00b72df528634be940e53bb65e7a71a9c1c3d7c9d1e8ad04b587d073fb9c8650ae4a7337b16022fef0345e36d8ddeb9998a6aa90471a045
-
SSDEEP
3072:qnuPvz149nYD9FJOukopnmqqnsZdysdJzTF3G/VKRBzD31zZklt/Hh3:ms+x0sopgntsdHBRZ1zSH/Hh3
Malware Config
Signatures
Files
-
ceb83dffd65e374020d1633925b565f6d877d1ea8f218f02132dfc34d8b5285b.exe windows x86
d06b32c2f3ab7a8148841933776c2f15
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
shlwapi
SHDeleteKeyW
kernel32
lstrlenW
GetVersionExW
GetCurrentProcess
GetModuleHandleW
GetModuleFileNameW
CreateProcessW
GetLastError
CreateFileW
CopyFileW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
ExitThread
ExitProcess
lstrcpyW
lstrcmpW
UnmapViewOfFile
MultiByteToWideChar
GetSystemTime
CreateEventW
MapViewOfFile
SetFileTime
GetFileTime
GetWindowsDirectoryW
GetFileSize
CreateDirectoryW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
SetEndOfFile
SetFilePointer
GetShortPathNameW
MoveFileExW
DeleteFileW
WriteFile
LocalFree
FormatMessageW
SetCurrentDirectoryW
LocalAlloc
GetExitCodeThread
CreateThread
OpenProcess
HeapAlloc
GetProcessHeap
HeapFree
TerminateProcess
GetDiskFreeSpaceW
ResumeThread
SuspendThread
WideCharToMultiByte
Sleep
GetSystemDirectoryW
CreateMutexW
OpenMutexW
WaitForSingleObject
ReleaseMutex
CloseHandle
lstrcmpiW
LoadLibraryW
GetProcAddress
FreeLibrary
GetFileAttributesW
lstrcatW
CreateFileMappingW
GetStartupInfoW
user32
GetWindowTextW
MessageBoxW
wsprintfW
GetForegroundWindow
SendMessageW
SetDlgItemTextW
SendDlgItemMessageW
wsprintfA
EnableWindow
GetDlgItem
DispatchMessageW
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjects
PostQuitMessage
ExitWindowsEx
GetWindowLongW
SetWindowLongW
GetWindowRect
ScreenToClient
CreateWindowExW
CallWindowProcW
GetDlgItemTextW
DestroyWindow
DialogBoxParamW
CharUpperW
FindWindowW
PostMessageW
EnumWindows
GetWindowThreadProcessId
GetMessageW
GetClientRect
SetWindowPos
SetWindowTextW
CreateDialogParamW
LoadIconW
ShowWindow
advapi32
RegQueryValueExW
AdjustTokenPrivileges
OpenProcessToken
RegOpenKeyExW
RegEnumKeyW
RegQueryInfoKeyW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
GetUserNameW
FreeSid
LookupPrivilegeValueW
shell32
ShellExecuteW
ShellExecuteExW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetMalloc
ole32
CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree
oleaut32
LoadTypeLibEx
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
_itow
strstr
strchr
memmove
wcschr
wcsncpy
_ftime
_ftol
memcpy
_stricmp
strncpy
_wcsupr
wcscmp
_wsplitpath
strlen
wcsncmp
free
malloc
memcmp
??2@YAPAXI@Z
??3@YAXPAX@Z
wcsstr
memset
wcsrchr
wcslen
wcscat
wcscpy
__CxxFrameHandler
_controlfp
_except_handler3
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 21KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE