Static task
static1
Behavioral task
behavioral1
Sample
252d5e9fdfb615a02bdeaac2e1552df9b4e1a0fc67e6ad3a3f8bcd6013c2e823.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
252d5e9fdfb615a02bdeaac2e1552df9b4e1a0fc67e6ad3a3f8bcd6013c2e823.exe
Resource
win10v2004-20220812-en
General
-
Target
252d5e9fdfb615a02bdeaac2e1552df9b4e1a0fc67e6ad3a3f8bcd6013c2e823
-
Size
276KB
-
MD5
60e85c6edbcde0fa8827d54e7f773f70
-
SHA1
bcef17beedc4d8ff486032a6a33ad67ee2650db7
-
SHA256
252d5e9fdfb615a02bdeaac2e1552df9b4e1a0fc67e6ad3a3f8bcd6013c2e823
-
SHA512
d542726191697d71e6229cda884a138c7fd2ff4ea02c561a314d929b5c655946b55b23a02180cf3ebb56f13e21119c34b411052815dfddaa3e5c6667cb0aa4e5
-
SSDEEP
3072:OJP+egkgPHRuKBrOMFYY/xgWv3qlyslqII+UD2ogEIVxlwSvzAOybJ+xedVSCGmF:CqkgPkKoMFkQX2VxlcOUdFabA
Malware Config
Signatures
Files
-
252d5e9fdfb615a02bdeaac2e1552df9b4e1a0fc67e6ad3a3f8bcd6013c2e823.exe windows x86
e72bb0941148746f5ae0fc12879c2b09
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
3csr
GetRegistryLocation
kernel32
HeapFree
TerminateProcess
ExitProcess
HeapAlloc
GetCommandLineA
HeapReAlloc
HeapSize
RaiseException
UnhandledExceptionFilter
GetACP
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetTimeZoneInformation
GetEnvironmentVariableA
FreeEnvironmentStringsA
ReadFile
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
SetErrorMode
GetFileType
SizeofResource
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetStartupInfoA
CompareStringA
CompareStringW
SetEnvironmentVariableA
RtlUnwind
FormatMessageA
GetFileAttributesA
GetFileTime
GetFileSize
FileTimeToSystemTime
GetTickCount
FileTimeToLocalFileTime
FindFirstFileA
GetFullPathNameA
GetVolumeInformationA
FindClose
LockFile
SetEndOfFile
UnlockFile
WriteFile
FlushFileBuffers
SetFilePointer
GetVersionExA
CreateFileA
HeapCreate
GetCurrentProcess
CloseHandle
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
Sleep
DuplicateHandle
LCMapStringW
GetThreadLocale
GetProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
GetLastError
WritePrivateProfileStringA
GlobalFlags
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
MulDiv
SetLastError
GlobalUnlock
GlobalFree
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
SetUnhandledExceptionFilter
GetStringTypeA
HeapDestroy
SetStdHandle
user32
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
InvalidateRect
CharUpperA
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
PtInRect
GetClassNameA
GetDesktopWindow
LoadCursorA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
DestroyMenu
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
EndDialog
MapDialogRect
SetWindowContextHelpId
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetActiveWindow
CharNextA
SetRect
AdjustWindowRectEx
ScreenToClient
CopyRect
GetTopWindow
GetCapture
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
LoadStringA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
GetSysColorBrush
IsWindow
SetFocus
WinHelpA
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
PostQuitMessage
PostMessageA
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
LoadIconA
FindWindowA
MessageBoxA
ExitWindowsEx
IsChild
CreateDialogIndirectParamA
DrawFocusRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
gdi32
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
CreateDIBitmap
CreateCompatibleDC
BitBlt
GetTextExtentPointA
IntersectClipRect
SetWindowExtEx
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
SetViewportOrgEx
SetMapMode
OffsetViewportOrgEx
GetStockObject
SetBkMode
RestoreDC
SaveDC
SelectObject
DeleteDC
GetObjectA
SetTextColor
GetClipBox
SetBkColor
CreateBitmap
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
comctl32
ord17
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc
olepro32
ord253
oleaut32
SysStringLen
SysAllocStringByteLen
VariantCopy
SysAllocString
VariantChangeType
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE