Static task
static1
Behavioral task
behavioral1
Sample
68e8674ea7fa9392076afb01b09e3346d27fb71684ca461b0c406956f7318a9f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
68e8674ea7fa9392076afb01b09e3346d27fb71684ca461b0c406956f7318a9f.exe
Resource
win10v2004-20220901-en
General
-
Target
68e8674ea7fa9392076afb01b09e3346d27fb71684ca461b0c406956f7318a9f
-
Size
737KB
-
MD5
96d6e93cac483a49d409d287d82bba00
-
SHA1
b1d37f4efeeb08988db178a1e8f49d6f176618dc
-
SHA256
68e8674ea7fa9392076afb01b09e3346d27fb71684ca461b0c406956f7318a9f
-
SHA512
cde49b9314b0d5e005267840a49a374cc0da72ef59b1b88e4b293152e1c8a2254f219e38b449bc8d401310f30d2eee8517e4b73d876a45016630283ebf5dba66
-
SSDEEP
12288:zLDhJ1Cgf2s4h308lruBAc4Vo/O9SSfphdNpjNbOS37y+BrpS22suIHMTKlo7JTV:v/tJAkuYNWo/OcCNJnL5r12suQMTioN
Malware Config
Signatures
Files
-
68e8674ea7fa9392076afb01b09e3346d27fb71684ca461b0c406956f7318a9f.exe windows x86
2e5f10fb048c4799cc54091b7e1975e5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLongPathNameW
lstrcpynA
GetMailslotInfo
IsDebuggerPresent
_hread
CreateHardLinkA
WritePrivateProfileSectionA
SetCalendarInfoA
CreateSemaphoreA
IsBadStringPtrA
GetSystemTimeAsFileTime
GetPrivateProfileSectionNamesA
CommConfigDialogW
GetComputerNameExA
ReadFileScatter
FindVolumeClose
SetFilePointerEx
FindNextVolumeA
CreateMailslotW
SizeofResource
OpenSemaphoreA
TlsAlloc
GetCommState
GetCurrentProcess
GlobalUnfix
lstrcmpA
ExpandEnvironmentStringsW
SetProcessWorkingSetSize
SetDefaultCommConfigA
MoveFileA
GetPrivateProfileSectionNamesW
FindFirstVolumeMountPointW
LocalLock
GetLocalTime
DefineDosDeviceA
lstrcpyA
GetComputerNameExW
GetProcessTimes
FindNextVolumeMountPointW
GlobalUnlock
CompareFileTime
GetExitCodeThread
LockFileEx
SetVolumeMountPointW
FlushFileBuffers
GetCPInfo
GetHandleInformation
CreateEventA
CreateJobObjectA
ReleaseSemaphore
GetUserDefaultUILanguage
InitAtomTable
OpenFileMappingA
TlsGetValue
GetProcessAffinityMask
GetDefaultCommConfigW
GetFileType
IsProcessorFeaturePresent
CreateMailslotA
SetSystemTimeAdjustment
GetProfileIntW
MoveFileExA
EnumResourceLanguagesA
GetProcessPriorityBoost
GetLogicalDrives
SetLocaleInfoW
GetSystemDefaultLCID
FindResourceExA
SetEnvironmentVariableA
FindNextChangeNotification
QueueUserAPC
CreateFileA
GlobalFree
GlobalSize
WaitNamedPipeW
GetThreadLocale
GetSystemTimeAdjustment
SetThreadLocale
GetProfileStringW
lstrcpyW
GetCommandLineW
RtlUnwind
ExitProcess
IsBadCodePtr
CreateMutexW
GetUserDefaultLCID
RemoveDirectoryA
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCompressedFileSizeW
GetDevicePowerState
OpenFileMappingW
GetLastError
GetEnvironmentVariableA
GetComputerNameA
FlushViewOfFile
SetStdHandle
shlwapi
PathAppendA
PathCombineA
comctl32
InitCommonControlsEx
user32
GetKeyState
LoadCursorW
GetParent
DrawTextW
SetDlgItemTextW
PtInRect
MoveWindow
PostMessageW
DialogBoxParamW
EndDialog
SetTimer
LoadBitmapW
DrawMenuBar
DispatchMessageW
CheckRadioButton
GetDesktopWindow
LoadStringA
GetWindowPlacement
FrameRect
EnableMenuItem
DefWindowProcW
InvertRect
EndPaint
SetRect
RegisterClassW
LoadStringW
DestroyWindow
InvalidateRect
CreateWindowExW
LoadIconW
GetMessageW
PostQuitMessage
GetSubMenu
FillRect
TranslateAcceleratorW
BeginPaint
GetDlgItemTextW
WaitMessage
MessageBoxA
GetClientRect
ReleaseDC
GetDlgItem
WinHelpW
OffsetRect
SendMessageW
GetWindowRect
GetMenu
UnionRect
IsZoomed
IsDlgButtonChecked
LoadAcceleratorsW
ShowWindow
TranslateMessage
CheckDlgButton
SetCapture
GetForegroundWindow
GetSystemMetrics
IsIconic
UpdateWindow
IntersectRect
MessageBoxW
ReleaseCapture
wsprintfW
GetDC
PeekMessageW
advapi32
RegQueryValueExA
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExA
RegQueryValueExW
Sections
.text Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 244KB - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ