Static task
static1
Behavioral task
behavioral1
Sample
96bf7f2079dc98729b96e6631069d92536dfd8f46611914977022e915352b961.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
96bf7f2079dc98729b96e6631069d92536dfd8f46611914977022e915352b961.exe
Resource
win10v2004-20220812-en
General
-
Target
96bf7f2079dc98729b96e6631069d92536dfd8f46611914977022e915352b961
-
Size
210KB
-
MD5
82f70af68364dbc5021a01057b39f109
-
SHA1
008d5f064d4e25c34460731e13053b21221a3312
-
SHA256
96bf7f2079dc98729b96e6631069d92536dfd8f46611914977022e915352b961
-
SHA512
f70e452b5ac1101f56d215822a6f1c8ccb7b3ae29b86dd2fe6e3000a094516b01dddfe3769e5837f7cc2b80d54580881e52520c1bbdea6e4508a50539a7a4945
-
SSDEEP
3072:BgAHyqJGtz0yuatgl8kSeZ6/GkFpAJHkJIzN2vozwhumHrUV+QXY7o232JxUMfn+:BHHymQz0TcGkFmN8HQoQXkgU57
Malware Config
Signatures
Files
-
96bf7f2079dc98729b96e6631069d92536dfd8f46611914977022e915352b961.exe windows x86
272852d54bc12d191791a168320dd8a8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
HeapFree
InterlockedDecrement
LoadLibraryW
lstrcpyA
GetModuleHandleA
GetSystemInfo
GetTickCount
HeapAlloc
lstrlenA
GetCurrentProcess
SetEndOfFile
CreateSemaphoreW
GetProcessHeap
ResetEvent
IsBadReadPtr
CloseHandle
EnterCriticalSection
GetQueuedCompletionStatus
GlobalUnlock
GlobalHandle
SetEvent
CreateEventW
FreeLibrary
WaitForMultipleObjects
GetThreadPriority
GetCurrentProcessId
SetUnhandledExceptionFilter
ReleaseSemaphore
GetModuleFileNameA
GlobalMemoryStatus
InterlockedExchange
WideCharToMultiByte
CreateFileW
GetEnvironmentStringsW
GetDiskFreeSpaceW
lstrcpyW
GlobalAlloc
GlobalFree
SetThreadPriority
DeleteCriticalSection
QueryPerformanceCounter
VirtualFree
MulDiv
ReadFile
DeleteFileW
lstrlenW
GetFileAttributesW
GetCurrentThread
GetProfileIntA
GetTimeZoneInformation
IsBadCodePtr
SetFilePointer
WaitForSingleObject
CreateThread
LeaveCriticalSection
IsBadWritePtr
GetFileSize
WriteFile
lstrcmpiW
GetSystemTimeAsFileTime
InitializeCriticalSection
GetPrivateProfileStringW
MultiByteToWideChar
lstrcmpW
GetLastError
GetFullPathNameW
InterlockedIncrement
lstrcpynW
GlobalLock
user32
SendMessageW
SetDlgItemInt
TranslateMessage
IsRectEmpty
MoveWindow
GetWindowRect
GetDlgItemInt
GetWindowLongW
ClientToScreen
LoadCursorW
SetCursor
GetDlgItem
IsWindow
GetDesktopWindow
PeekMessageW
DestroyWindow
GetDC
GetAsyncKeyState
SetWindowLongW
LoadStringW
GetClientRect
DispatchMessageW
CreateDialogParamW
IsWindowVisible
CheckRadioButton
InvalidateRect
DefWindowProcW
ShowWindow
EnableWindow
ReleaseDC
CheckDlgButton
SetDlgItemTextW
msnetobj
DllUnregisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
msls31
LssbGetPlsrunsFromSubline
LssbGetNumberDnodesInSubline
LssbGetVisibleDcpInSubline
LsCompressSubline
LssbGetDurTrailWithPensInSubline
LssbGetObjDimSubline
nddeapi
NDdeIsValidAppTopicListW
NDdeGetTrustedShareA
NDdeGetTrustedShareW
NDdeGetShareSecurityW
NDdeIsValidAppTopicListA
NDdeGetErrorStringA
cewmdm
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
msltus40
DllRegisterServer
DllUnregisterServer
msoeacct
ValidEmailAddress
HrCreateAccountManager
DllGetClassObject
DllCanUnloadNow
GetDllMajorVersion
oleaut32
VarBstrFromUI8
VarBstrFromUI4
VarBstrFromUI2
VarBstrFromR4
VarBstrFromI1
VarBstrFromR8
VarBstrFromI8
VarBstrFromI4
VarBstrFromDate
VarBstrFromI2
VarBstrFromUI1
VarBstrFromCy
VarBstrFromDec
VarBstrFromDisp
msoert2
AppendTempFileList
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ