Static task
static1
Behavioral task
behavioral1
Sample
925004bdfc223fc2f3a2c4dd91683ba08d21450f1adca0ff3b576f2578247c0c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
925004bdfc223fc2f3a2c4dd91683ba08d21450f1adca0ff3b576f2578247c0c.exe
Resource
win10v2004-20220812-en
General
-
Target
925004bdfc223fc2f3a2c4dd91683ba08d21450f1adca0ff3b576f2578247c0c
-
Size
320KB
-
MD5
91aab7d4867a509e5a6203fca489f95e
-
SHA1
7c03621269c0aee173d5f174bcd60f24a48c175a
-
SHA256
925004bdfc223fc2f3a2c4dd91683ba08d21450f1adca0ff3b576f2578247c0c
-
SHA512
f4ae0dc69d60e86774a31ba54dc5588dd31905f0f8fdf946f68b76beaf88bea4daa614e91646b74f3d7ce221b36cbd7498106d93570e48fdda1a8505739bee15
-
SSDEEP
6144:bFuzLaXUSycp/mrA2HI/YhGVxTuFYzRlVz87KrkwQ6G0vZq8Q:bFcuXfy6rAhGVxA+HV4eQ65Zq
Malware Config
Signatures
Files
-
925004bdfc223fc2f3a2c4dd91683ba08d21450f1adca0ff3b576f2578247c0c.exe windows x86
eadb89cfb7cf7d6ef839509205e2d4ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
PrintDlgA
GetOpenFileNameW
ChooseFontW
comctl32
ImageList_BeginDrag
DestroyPropertySheetPage
ImageList_Merge
ImageList_LoadImage
ImageList_GetFlags
ImageList_DragShowNolock
_TrackMouseEvent
InitCommonControlsEx
ImageList_Destroy
CreatePropertySheetPageW
DrawStatusTextA
ImageList_LoadImageA
user32
MessageBoxA
GetMonitorInfoW
CreateWindowExA
SetDoubleClickTime
ChildWindowFromPoint
TrackPopupMenuEx
ReplyMessage
InSendMessage
RegisterClassA
DdeCmpStringHandles
ModifyMenuA
SetDlgItemTextA
AdjustWindowRect
MapVirtualKeyExW
DrawFrameControl
DestroyMenu
DdeNameService
ShowWindow
RegisterClassExA
CharLowerBuffA
GetDC
ReleaseCapture
advapi32
AbortSystemShutdownW
LookupPrivilegeDisplayNameA
RegConnectRegistryA
CryptSetProviderExW
CryptSignHashA
RegFlushKey
GetUserNameW
RegSaveKeyW
CreateServiceW
InitializeSecurityDescriptor
CryptSetHashParam
CryptVerifySignatureW
CryptGenRandom
CryptImportKey
CryptGetHashParam
RegQueryValueExW
RegNotifyChangeKeyValue
RegRestoreKeyW
kernel32
OpenMutexA
GetStringTypeW
CreateEventA
DeleteCriticalSection
MultiByteToWideChar
EnumSystemLocalesA
Sleep
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
CreateFileA
GetModuleHandleA
GetUserDefaultLCID
UnhandledExceptionFilter
GlobalFix
ReadFileEx
IsDebuggerPresent
GetModuleFileNameW
GetConsoleOutputCP
HeapAlloc
GetSystemTimeAsFileTime
RemoveDirectoryA
HeapReAlloc
GetCurrentThreadId
GetCurrentThread
SetCurrentDirectoryA
FreeEnvironmentStringsW
ExitProcess
GetCurrentProcessId
FlushFileBuffers
MapViewOfFileEx
GetDateFormatA
OpenFileMappingW
GetOEMCP
WideCharToMultiByte
HeapSize
GetTimeZoneInformation
TlsGetValue
LeaveCriticalSection
FileTimeToSystemTime
GetLocaleInfoW
GetSystemDirectoryW
SetConsoleCtrlHandler
GetCommandLineW
CreateMutexA
EnterCriticalSection
QueryPerformanceCounter
LoadResource
WriteConsoleA
SetStdHandle
SetLastError
SetFilePointer
InterlockedIncrement
GetEnvironmentStringsW
GetCurrentDirectoryW
GetModuleFileNameA
GetExitCodeThread
GetCurrentProcess
GetStartupInfoW
InterlockedDecrement
InterlockedExchange
RtlUnwind
GetShortPathNameW
WriteConsoleW
VirtualQuery
GetModuleHandleW
SetEnvironmentVariableA
GetTickCount
SetHandleCount
EnumCalendarInfoExA
IsValidCodePage
GetStringTypeA
GetLastError
HeapDestroy
VirtualAlloc
CreatePipe
HeapCreate
GetPrivateProfileSectionNamesA
ReadFile
GetTimeFormatA
HeapFree
VirtualFree
lstrcmpA
LCMapStringA
LCMapStringW
GetCPInfo
GetFileType
FreeLibrary
GetProfileStringW
IsValidLocale
WriteFile
CompareStringA
SetUnhandledExceptionFilter
lstrcmpiW
GetACP
GetCommandLineA
TerminateProcess
GetProcAddress
GetConsoleCP
LoadLibraryA
TlsAlloc
TlsFree
TlsSetValue
CompareStringW
MoveFileExA
GetStdHandle
CloseHandle
LocalHandle
GetStartupInfoA
VirtualUnlock
Sections
.text Size: 198KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ