Static task
static1
Behavioral task
behavioral1
Sample
00f5729d8f615fdf742017f5c9381209f5e0b11cbddb483f6f836dca05ea8861.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
00f5729d8f615fdf742017f5c9381209f5e0b11cbddb483f6f836dca05ea8861.exe
Resource
win10v2004-20220812-en
General
-
Target
00f5729d8f615fdf742017f5c9381209f5e0b11cbddb483f6f836dca05ea8861
-
Size
3.6MB
-
MD5
d2739c1506a23ed4099531130dcb8297
-
SHA1
ad4ae5e40f0aab2b8298fa4a15698e789de879ea
-
SHA256
00f5729d8f615fdf742017f5c9381209f5e0b11cbddb483f6f836dca05ea8861
-
SHA512
d304a38ae03ba70f907ac76b63370295927070e003b5964f08801200b5074ea4bd6a28e144aed8632d3a2545515805edaf1f0e3df09e79f20eb11c5d8959784b
-
SSDEEP
98304:WZyzSL6E9NkSy38jWLMMMyziqcrX6G5ijWAKJSQktZi+E:W8OWCkPzXeqE3ijWCE
Malware Config
Signatures
Files
-
00f5729d8f615fdf742017f5c9381209f5e0b11cbddb483f6f836dca05ea8861.exe windows x86
5a36a1f8d2ecf51b960e32d735e9ca2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
kernel32
GetExitCodeThread
WaitForSingleObject
CreateThread
GetLastError
SystemTimeToFileTime
GetLocalTime
GetFileAttributesW
CreateDirectoryW
VirtualFree
GetModuleHandleW
GetProcAddress
LoadLibraryA
LockResource
LoadResource
SizeofResource
FindResourceExA
GetSystemDefaultLCID
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
MultiByteToWideChar
GetLocaleInfoW
lstrlenA
lstrcmpiW
GetEnvironmentVariableW
GlobalMemoryStatusEx
VirtualAlloc
WideCharToMultiByte
ExpandEnvironmentStringsW
lstrcmpW
RemoveDirectoryW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
CompareFileTime
GetSystemTimeAsFileTime
Sleep
GetTempPathW
SetEnvironmentVariableW
CloseHandle
WriteFile
CreateFileW
GetDriveTypeW
SetCurrentDirectoryW
GetExitCodeProcess
GetModuleFileNameW
GetCommandLineW
GetVersionExW
CreateEventW
SetEvent
ResetEvent
InitializeCriticalSection
MulDiv
TerminateThread
ResumeThread
SuspendThread
LocalFree
lstrcpyW
FormatMessageW
GetSystemDirectoryW
DeleteCriticalSection
GetFileSize
SetFilePointer
ReadFile
SetFileTime
SetEndOfFile
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
GetModuleHandleA
SetLastError
SetFileAttributesW
GetDiskFreeSpaceExW
lstrcatW
ExitProcess
lstrlenW
GetStartupInfoA
user32
EndDialog
CharUpperW
SetTimer
DestroyWindow
KillTimer
DispatchMessageW
wsprintfW
GetSystemMenu
EnableMenuItem
IsWindow
EnableWindow
MessageBeep
LoadIconW
LoadImageW
wvsprintfW
DefWindowProcW
CallWindowProcW
GetWindowDC
DrawIconEx
DialogBoxIndirectParamW
GetWindow
ClientToScreen
GetDC
DrawTextW
ReleaseDC
ShowWindow
SetWindowPos
SystemParametersInfoW
SetFocus
GetWindowLongW
SetWindowLongW
GetSystemMetrics
GetClientRect
GetDlgItem
GetKeyState
wsprintfA
MessageBoxA
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
GetMessageW
GetWindowRect
ScreenToClient
CreateWindowExW
SendMessageW
GetParent
gdi32
CreateFontIndirectW
SelectObject
GetDeviceCaps
GetObjectW
DeleteObject
shell32
SHGetFileInfoW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
SHGetSpecialFolderPathW
SHGetMalloc
ole32
CoCreateInstance
CoInitialize
oleaut32
VariantClear
SysAllocString
msvcrt
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
_CxxThrowException
_beginthreadex
_EH_prolog
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
memset
_wcsnicmp
memcpy
malloc
memmove
_wtol
free
memcmp
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
_controlfp
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ