Static task
static1
Behavioral task
behavioral1
Sample
630f4744f70f38d3a5db7c2894390b5dd4900078058b5a39ece3697da6bf1232.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
630f4744f70f38d3a5db7c2894390b5dd4900078058b5a39ece3697da6bf1232.exe
Resource
win10v2004-20220812-en
General
-
Target
630f4744f70f38d3a5db7c2894390b5dd4900078058b5a39ece3697da6bf1232
-
Size
268KB
-
MD5
a01daedbe6102fa006dd73e7e9a4a841
-
SHA1
78f83a42b5544a6d691adf18d0ad5ea59e3acfb0
-
SHA256
630f4744f70f38d3a5db7c2894390b5dd4900078058b5a39ece3697da6bf1232
-
SHA512
be120042c129b267a0947870ede263d5a06723cde9f595ba59ccc5d10c2bfbb571e7c3cc501f930788be077dcbcb64fd938c208f6d4c11ea6c8b093bedeb12b2
-
SSDEEP
6144:+MGoEqjToIvyzVyM2HwBQtfGNIF7+v0Hp6TcoG7t:+tLqjToIvyzVyM2HiIFivG6Tc
Malware Config
Signatures
Files
-
630f4744f70f38d3a5db7c2894390b5dd4900078058b5a39ece3697da6bf1232.exe windows x86
97c887378b0c66883340efd9b31a175f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameA
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
CreateMutexA
GetCurrentThreadId
GetCommandLineA
InitializeCriticalSection
lstrcpyA
WideCharToMultiByte
SizeofResource
CopyFileA
GetCurrentProcess
lstrlenA
MultiByteToWideChar
lstrlenW
GetWindowsDirectoryA
GetModuleHandleA
GetModuleFileNameA
GetVersionExA
GetSystemDefaultLCID
DeleteCriticalSection
lstrcatA
GetSystemDirectoryA
GetACP
FlushFileBuffers
ReadFile
SetStdHandle
SetFilePointer
IsBadCodePtr
IsBadReadPtr
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
HeapSize
TerminateProcess
LCMapStringW
LCMapStringA
GetOEMCP
GetDateFormatA
GetCPInfo
ExitProcess
GetVersion
GetStartupInfoA
RaiseException
HeapReAlloc
HeapAlloc
HeapFree
InterlockedDecrement
LoadLibraryA
GetProcAddress
FreeLibrary
GetLocaleInfoA
WriteFile
CreateFileA
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
RtlUnwind
LocalFree
InterlockedIncrement
GetUserDefaultLangID
CloseHandle
user32
RegisterClassA
CreateWindowExA
CallWindowProcA
LoadIconA
SetForegroundWindow
FindWindowA
PostQuitMessage
EnableWindow
GetDlgCtrlID
EndDialog
GetDlgItem
SetWindowTextA
WinHelpA
LoadStringA
GetWindowRect
EnableMenuItem
GetSystemMenu
EnumChildWindows
DialogBoxParamA
GetParent
SetWindowLongA
GetMessageA
wsprintfA
DefWindowProcA
SendMessageA
CharNextA
PostThreadMessageA
DispatchMessageA
PostMessageA
EnumDisplaySettingsA
GetSystemMetrics
gdi32
DeleteDC
GetDeviceCaps
CreateDCA
advapi32
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegEnumValueA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
ole32
CoTaskMemFree
CoUninitialize
CoCreateInstance
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemRealloc
CoSuspendClassObjects
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
oleaut32
LoadTypeLi
SysStringByteLen
VariantClear
SysFreeString
SysAllocString
SysAllocStringByteLen
RegisterTypeLi
SysStringLen
VarUI4FromStr
comctl32
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
hccutils
EnumDeviceByClass
GetAttachedMonitorDevice
IsDisplayValid
ReleaseClassDevice
LoadDialogString
FindDeviceByNameAndClass
GetDisplayDevice
GetCUIDriverFromClassDevice
FindResources
LoadSTRING
Sections
.text Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 27KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE