Static task
static1
Behavioral task
behavioral1
Sample
de2b51d743d9632858ebdb9731754d4472621cffb4a6858b8482a5bd69cf946f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
de2b51d743d9632858ebdb9731754d4472621cffb4a6858b8482a5bd69cf946f.exe
Resource
win10v2004-20220812-en
General
-
Target
de2b51d743d9632858ebdb9731754d4472621cffb4a6858b8482a5bd69cf946f
-
Size
90KB
-
MD5
a0eee27ab58f0e54419c1e1218108d9f
-
SHA1
02920037ec8b0759c263b05541748388bb8eec28
-
SHA256
de2b51d743d9632858ebdb9731754d4472621cffb4a6858b8482a5bd69cf946f
-
SHA512
f957bba7f9128be271b4fdbefb92e23ff1c2b5e19d9f9ef2fdc59a89b97b64b6ac911cfe3327cd3c3d235df416f50c87c1ac9ddd3841ee82aa4248f084d49e88
-
SSDEEP
1536:o5oitABZ5NybyH+BHDazMhOj2/M8D6tkvs1eyl553/IjYcU/ANehv:oxABNHcjcMhOjMMKMMPe5P
Malware Config
Signatures
Files
-
de2b51d743d9632858ebdb9731754d4472621cffb4a6858b8482a5bd69cf946f.exe windows x86
1a33f1ee0dbc1d8d9280c303afec9317
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadIconA
IsZoomed
GetMenuItemCount
SetScrollPos
CallWindowProcA
GetMessagePos
GetFocus
GetSysColor
CheckMenuItem
MessageBeep
SetDlgItemTextA
ShowWindow
GetMessageA
DestroyMenu
msvcrt
fflush
__p__commode
__p__fmode
__setusermatherr
fputc
__getmainargs
_setmode
_XcptFilter
_exit
fputs
_adjust_fdiv
_initterm
sqrt
_acmdln
calloc
memmove
_except_handler3
__set_app_type
strrchr
free
memcpy
getenv
fopen
comdlg32
GetOpenFileNameA
kernel32
VirtualFree
GetOEMCP
GetFullPathNameA
GetStartupInfoA
VirtualProtect
GetSystemDefaultLCID
GetCommandLineW
GetCommandLineA
VirtualQuery
GetACP
LocalAlloc
GetStartupInfoW
InterlockedDecrement
GetNumberFormatA
ole32
ReleaseStgMedium
IsEqualGUID
CoDisconnectObject
CoLoadLibrary
RevokeDragDrop
CoTaskMemRealloc
CreateStreamOnHGlobal
StringFromCLSID
CoReleaseMarshalData
CoInitialize
OleRun
advapi32
LookupPrivilegeValueA
RegEnumKeyExW
EqualSid
InitializeSecurityDescriptor
CryptAcquireContextA
RegOpenKeyW
RegEnumValueW
QueryServiceStatus
OpenSCManagerW
CryptGenRandom
CryptHashData
OpenProcessToken
FreeSid
RegDeleteValueW
OpenThreadToken
RegOpenKeyExW
ControlService
comctl32
ImageList_Add
ImageList_GetImageCount
CreateToolbarEx
ImageList_DragLeave
ImageList_Remove
ImageList_Draw
ImageList_GetIconSize
ImageList_Create
ImageList_Replace
gdi32
ExtTextOutA
PolylineTo
Chord
GetOutlineTextMetricsA
CreateDIBSection
CreateFontIndirectA
Ellipse
SetDIBitsToDevice
GetROP2
CreatePatternBrush
ExtEscape
PlayMetaFile
GetBkMode
SetColorAdjustment
GetViewportOrgEx
GetEnhMetaFileHeader
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ