Static task
static1
Behavioral task
behavioral1
Sample
8fbf0af6c786f9917a91873550f4d99d2f70c06695daa693a1d1da00a673ec65.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8fbf0af6c786f9917a91873550f4d99d2f70c06695daa693a1d1da00a673ec65.exe
Resource
win10v2004-20220812-en
General
-
Target
8fbf0af6c786f9917a91873550f4d99d2f70c06695daa693a1d1da00a673ec65
-
Size
200KB
-
MD5
4bea367f99c69244d1556d7f2e473d50
-
SHA1
2d1352b94ce2c5673246020a93649ad2a82db595
-
SHA256
8fbf0af6c786f9917a91873550f4d99d2f70c06695daa693a1d1da00a673ec65
-
SHA512
1c666c09e8fd79beb2cd022723235a2dbba82eaf7364fe8922aa2355e88cd7ef0983030c77edaeb36ad530f315ebac831b82a5fde2023549d05335d8a7373dad
-
SSDEEP
6144:Q1tgwH0RgeoA3XRggHzj50r1uIvns51kn:Q1tgTRgeo2+gHzGs5+n
Malware Config
Signatures
Files
-
8fbf0af6c786f9917a91873550f4d99d2f70c06695daa693a1d1da00a673ec65.exe windows x86
c626779e479bb8232d091b486af390b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreatePropertySheetPageA
DestroyPropertySheetPage
kernel32
IsDBCSLeadByte
InitializeCriticalSection
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
WaitForMultipleObjects
CloseHandle
CreateEventA
WaitForSingleObject
GetLocaleInfoA
GetSystemDefaultLCID
CreateFileA
CopyFileA
GetSystemDirectoryA
GetVersionExA
FlushFileBuffers
SetStdHandle
ReadFile
SetFilePointer
GetStringTypeW
GetStringTypeA
lstrcpynA
IsBadReadPtr
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetCurrentProcess
TerminateProcess
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
ExitProcess
GetVersion
GetStartupInfoA
RaiseException
HeapReAlloc
HeapFree
HeapAlloc
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
WideCharToMultiByte
IsBadCodePtr
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
GetCommandLineA
GetCurrentThreadId
lstrcmpiA
CreateMutexA
GetLastError
CreateThread
CompareFileTime
InterlockedDecrement
InterlockedIncrement
RtlUnwind
LocalFree
user32
SendMessageA
EqualRect
PostQuitMessage
SetTimer
PeekMessageA
ChangeDisplaySettingsExA
EnumDisplaySettingsA
ChangeDisplaySettingsA
KillTimer
DispatchMessageA
GetMessageA
PostMessageA
CreateWindowExA
RegisterClassA
CharNextA
EnableWindow
GetDlgCtrlID
EndDialog
GetDlgItem
SetRectEmpty
DefWindowProcA
BroadcastSystemMessage
FindWindowA
wsprintfA
CallWindowProcA
SetWindowLongA
GetParent
DialogBoxParamA
EnumChildWindows
GetSystemMenu
EnableMenuItem
GetWindowRect
LoadStringA
WinHelpA
SetWindowTextA
advapi32
RegOpenKeyA
RegSetValueExA
RegCloseKey
RegEnumValueA
RegQueryInfoKeyA
RegDeleteValueA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
ole32
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
VariantClear
VarUI4FromStr
SysAllocStringLen
RegisterTypeLi
SysFreeString
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysStringLen
LoadTypeLi
hccutils
FindResources
IsDisplayValid
GetHardwareKey
LoadSTRING
EnumDeviceByClass
ReleaseClassDevice
GetCommonRegKey
EnumDspDev
GetCurrentDisplay
LoadDialogString
Sections
.text Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE