Static task
static1
Behavioral task
behavioral1
Sample
63f1f17a7a4b5ee83194e7720aebf54408e270c1c6c073174918271b2c6b3e95.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
63f1f17a7a4b5ee83194e7720aebf54408e270c1c6c073174918271b2c6b3e95.exe
Resource
win10v2004-20220812-en
General
-
Target
63f1f17a7a4b5ee83194e7720aebf54408e270c1c6c073174918271b2c6b3e95
-
Size
328KB
-
MD5
818a30d3a0f24c1bb5407bc290d911dc
-
SHA1
60db632ee9ae6f9aaebc6088b592edc8bf871cf7
-
SHA256
63f1f17a7a4b5ee83194e7720aebf54408e270c1c6c073174918271b2c6b3e95
-
SHA512
a357d40931dbf9d344d34f8a3b41b418198fd51f72d22cc236c11388b7a025b7599bb1b45e9c93d212ab14de97159ee04f7e6a1c61ad52b9082ceb18e16c14d1
-
SSDEEP
6144:SD819V7G9n7p8a61SQCHLQ79ezGTSwdqym9iEK4zDkY8UXnI7wHEOcEyNa:SD819V7G9n7p8a61SQCrQYwdqM8wYfIu
Malware Config
Signatures
Files
-
63f1f17a7a4b5ee83194e7720aebf54408e270c1c6c073174918271b2c6b3e95.exe windows x86
47f0b31daa4e937833bf24d7fb7abda9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ModifyMenuA
InsertMenuA
CallNextHookEx
CheckMenuItem
EnableMenuItem
GetSystemMenu
DispatchMessageA
LoadMenuA
GetSubMenu
SetMenuDefaultItem
SetForegroundWindow
PostQuitMessage
GetMessageA
TranslateMessage
GetWindowTextA
SetWindowTextA
ShowCursor
BeginPaint
SetRect
FillRect
EndPaint
GetClientRect
InvalidateRect
SetCursor
AdjustWindowRect
GetSystemMetrics
GetAsyncKeyState
GetCursorPos
TrackPopupMenu
SetScrollInfo
SetTimer
ScrollWindowEx
GetWindowRect
SetWindowPos
KillTimer
DialogBoxParamA
GetDlgItemTextA
SetDlgItemTextA
EnableWindow
EndDialog
ToAscii
GetKeyboardState
DefWindowProcA
SetClipboardViewer
ChangeClipboardChain
CloseClipboard
GetClipboardData
OpenClipboard
GetClipboardOwner
SetClipboardData
EmptyClipboard
IsWindowVisible
PostMessageA
RemoveMenu
GetForegroundWindow
SetWindowsHookExA
UnhookWindowsHookEx
SystemParametersInfoA
GetDesktopWindow
GetDC
ReleaseDC
PostThreadMessageA
CreateWindowExA
UnregisterClassA
RegisterClassA
LoadImageA
GetDlgItem
SendMessageA
SetWindowLongA
CreateDialogParamA
DestroyWindow
MessageBoxA
AppendMenuA
UpdateWindow
GetUpdateRect
GetWindowLongA
ShowWindow
MessageBeep
MsgWaitForMultipleObjects
PeekMessageA
gdi32
CreateCompatibleDC
DeleteDC
CreateCompatibleBitmap
GetDIBits
CreateDIBSection
GetObjectA
SetDIBColorTable
ResizePalette
UnrealizeObject
SetPaletteEntries
SelectPalette
RealizePalette
GetStockObject
BitBlt
DeleteObject
CreatePalette
SelectObject
ws2_32
closesocket
recv
select
connect
gethostbyname
htons
inet_addr
socket
WSAStartup
getsockname
getpeername
ntohs
shutdown
setsockopt
listen
bind
htonl
accept
send
WSAAsyncSelect
WSAEventSelect
inet_ntoa
WSAGetLastError
comctl32
CreatePropertySheetPageA
PropertySheetA
_TrackMouseEvent
shell32
Shell_NotifyIconA
comdlg32
GetSaveFileNameA
CommDlgExtendedError
kernel32
ReadFile
GetStringTypeW
SetStdHandle
SetFilePointer
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
FlushFileBuffers
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
VirtualFree
HeapCreate
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
InterlockedExchange
GetStringTypeA
HeapDestroy
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
HeapReAlloc
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetFileType
CreateEventA
GetModuleHandleA
CloseHandle
ResetEvent
GetLastError
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetEvent
GetCurrentDirectoryA
AllocConsole
FreeConsole
QueryPerformanceFrequency
QueryPerformanceCounter
FormatMessageA
ExpandEnvironmentStringsA
TlsAlloc
TlsSetValue
CreateThread
ResumeThread
WaitForSingleObject
GetCurrentThread
GetCurrentThreadId
TlsGetValue
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
CreateFileA
GetModuleFileNameA
GetVersionExA
GetProcAddress
LoadLibraryA
FreeLibrary
WaitForMultipleObjects
RtlUnwind
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
GetVersion
InterlockedDecrement
InterlockedIncrement
GetTimeZoneInformation
GetSystemTime
GetLocalTime
MoveFileA
DeleteFileA
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
HeapSize
SetLastError
SetUnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
advapi32
RegQueryValueExA
RegCreateKeyA
RegCloseKey
RegQueryInfoKeyA
RegEnumValueA
RegOpenKeyExA
RegSetValueExA
RegNotifyChangeKeyValue
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 196KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE