Static task
static1
Behavioral task
behavioral1
Sample
d668d66e59c9f035dde01af1e9f168876e8a8e68dc9e4d4cbde4d426e2580322.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d668d66e59c9f035dde01af1e9f168876e8a8e68dc9e4d4cbde4d426e2580322.exe
Resource
win10v2004-20220812-en
General
-
Target
d668d66e59c9f035dde01af1e9f168876e8a8e68dc9e4d4cbde4d426e2580322
-
Size
428KB
-
MD5
923c71c78cf932f18835cb8f17e5f770
-
SHA1
c8078dae53ae051f8fb3f4ee85a068c3a3dd3662
-
SHA256
d668d66e59c9f035dde01af1e9f168876e8a8e68dc9e4d4cbde4d426e2580322
-
SHA512
933d360a112d8ccfcb6a82bf486c4dd5296ea0653f900871dff76495d2a9c6787346de7db59f51c46503350cf31eb42feed2635f6a05aed14bdba0ecd9aa0066
-
SSDEEP
12288:p5KR7XMLhBfUGOzpHf8PQNnT41srWc89t8BEQ7:p5KGLhJUVNHfzB41srdU297
Malware Config
Signatures
Files
-
d668d66e59c9f035dde01af1e9f168876e8a8e68dc9e4d4cbde4d426e2580322.exe windows x86
9aba7b13afb411c2439bf3914e29df96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitialize
kernel32
SetConsoleCtrlHandler
IsBadReadPtr
VirtualFree
HeapCreate
IsValidCodePage
SizeofResource
SetStdHandle
InterlockedExchange
GetVersion
GetModuleHandleW
GetACP
CloseHandle
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
lstrlenW
LockResource
GetCurrentProcessId
GetEnvironmentStrings
Sleep
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
HeapReAlloc
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
LCMapStringW
LoadLibraryExW
GetLastError
InterlockedIncrement
ExitProcess
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
RemoveDirectoryA
GlobalLock
DuplicateHandle
FindFirstFileW
CreateFileMappingA
CompareStringA
FindFirstFileA
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileW
SetEvent
SetErrorMode
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
FindResourceA
GetTickCount
QueryPerformanceCounter
FreeLibrary
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
LeaveCriticalSection
GetCurrentThreadId
GetLocaleInfoA
SetEndOfFile
GetConsoleMode
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
MulDiv
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
CreateMutexA
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
GetExitCodeProcess
LocalFree
GetOEMCP
SetFileAttributesA
GetStringTypeW
GetDiskFreeSpaceA
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
LoadLibraryW
WideCharToMultiByte
GetTempPathA
FreeEnvironmentStringsW
LocalAlloc
GetCurrentDirectoryA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetCommandLineW
GetFileAttributesW
HeapDestroy
FindNextFileA
WaitForSingleObject
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetSystemDefaultLangID
GetUserDefaultLCID
GetUserDefaultLangID
GetSystemDefaultLCID
FatalAppExitA
RtlUnwind
IsValidLocale
EnumSystemLocalesA
GetTimeZoneInformation
GetLocaleInfoW
VirtualAlloc
IsBadWritePtr
user32
CallWindowProcA
GetClientRect
InvalidateRect
GetSysColor
MessageBoxA
GetDesktopWindow
LoadCursorA
ScreenToClient
GetDlgItem
SetTimer
EndDialog
SetWindowLongA
ReleaseCapture
GetWindowRect
GetSystemMetrics
DefWindowProcA
KillTimer
SetFocus
BeginPaint
MapWindowPoints
FillRect
CreateWindowExA
GetWindowLongA
RegisterClassA
IsIconic
GetWindow
IsWindowEnabled
TranslateMessage
EnableWindow
ShowWindow
UpdateWindow
GetParent
GetMessageA
DestroyWindow
SendMessageA
ReleaseDC
GetCursorPos
GetDC
PeekMessageA
EndPaint
DispatchMessageA
IsWindow
SetWindowPos
PostQuitMessage
DestroyMenu
SetForegroundWindow
GetFocus
SetCursor
gdi32
BitBlt
GetDeviceCaps
DeleteObject
SetTextColor
SelectObject
CreateSolidBrush
Sections
.text Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 308KB - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ