Static task
static1
Behavioral task
behavioral1
Sample
23a85c82d1f8c75d2d1ef8d4cb3121da1b1a2a2bd42b7c24d31c9b0da3beda18.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
23a85c82d1f8c75d2d1ef8d4cb3121da1b1a2a2bd42b7c24d31c9b0da3beda18.exe
Resource
win10v2004-20220812-en
General
-
Target
23a85c82d1f8c75d2d1ef8d4cb3121da1b1a2a2bd42b7c24d31c9b0da3beda18
-
Size
300KB
-
MD5
96d7f8b0c493441ab4bc21b70341ac3c
-
SHA1
c678861dbbe4d656730ff3ae633ee564044531ff
-
SHA256
23a85c82d1f8c75d2d1ef8d4cb3121da1b1a2a2bd42b7c24d31c9b0da3beda18
-
SHA512
4bcbc361869b507abff33fa3f54a979579110632a24708a39ee6ca9f5bf8ad5f819b427c94488435bd514b77deacb1b6d89edeaef2bc58c9c777e538dc7112cd
-
SSDEEP
3072:AME/b75+tW0LAYQIIN7p3i29imJMhqQlG0Dk0W3YrcDVkanLi3DC4ye/PN4S1BsM:ib7I23FQGXBka26AZHsHWaj
Malware Config
Signatures
Files
-
23a85c82d1f8c75d2d1ef8d4cb3121da1b1a2a2bd42b7c24d31c9b0da3beda18.exe windows x86
cc1e80162b2a32d1f607ebf5b1a928a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
timeBeginPeriod
timeEndPeriod
msacm32
acmFormatChooseW
acmMetrics
olepro32
ord250
kernel32
CloseHandle
GetFileSize
CreateFileW
GetCurrentProcessId
GetVersionExW
WriteFile
GetSystemTime
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
EnterCriticalSection
LeaveCriticalSection
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
OpenFile
WriteProfileStringW
Sleep
lstrcpyW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
GetProfileIntW
GetProfileStringW
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
HeapSize
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapCreate
HeapDestroy
VirtualAlloc
VirtualFree
FatalAppExitA
GetCurrentThread
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetOEMCP
GetCPInfo
GetModuleHandleA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
GetProcessHeap
GetCommandLineA
HeapReAlloc
HeapFree
HeapAlloc
RtlUnwind
GetVersionExA
GetThreadLocale
GetLocaleInfoA
EnumSystemLocalesA
GetACP
InterlockedExchange
IsValidCodePage
SetConsoleCtrlHandler
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetTimeZoneInformation
GetFullPathNameW
GetProcAddress
FreeLibrary
GetDiskFreeSpaceW
MulDiv
lstrlenW
GetSystemDirectoryW
LoadLibraryW
lstrcpynW
DeleteCriticalSection
lstrcatW
RaiseException
InitializeCriticalSection
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
CompareStringA
CompareStringW
SetEnvironmentVariableA
FreeEnvironmentStringsA
IsValidLocale
FlushFileBuffers
CreateFileA
GetLocaleInfoW
user32
TranslateAcceleratorW
PeekMessageW
DispatchMessageW
WaitMessage
LoadAcceleratorsW
LoadIconW
RegisterClassW
GetDC
ReleaseDC
CreateWindowExW
ShowWindow
PostQuitMessage
GetAsyncKeyState
BeginPaint
EndPaint
MoveWindow
DefWindowProcW
DeleteMenu
PostMessageW
SetTimer
UpdateWindow
CharNextW
IsCharAlphaW
IsCharAlphaNumericW
TranslateMessage
GetDlgItem
SetFocus
MessageBeep
EnableWindow
GetMenuItemCount
EnableMenuItem
KillTimer
InvalidateRect
GetDlgItemInt
GetDlgItemTextW
IsDlgButtonChecked
SetDlgItemTextW
CheckDlgButton
DialogBoxParamW
EndDialog
MessageBoxW
wsprintfW
GetMenu
GetSubMenu
RemoveMenu
AppendMenuW
CreatePopupMenu
CheckMenuItem
GetSystemMetrics
GetWindowRect
GetClientRect
SetWindowPos
SetWindowTextW
UnregisterClassA
GetSysColor
GetWindowTextW
SetDlgItemInt
LoadCursorW
GetWindowLongW
gdi32
SetTextColor
ExtTextOutW
PatBlt
DeleteObject
CreateSolidBrush
CreateFontW
GetStockObject
SelectObject
GetTextMetricsW
SetBkColor
comdlg32
GetOpenFileNameW
advapi32
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
GetUserNameW
RegEnumKeyExW
ole32
MkParseDisplayName
CoTaskMemRealloc
CoTaskMemAlloc
CreateBindCtx
CreateItemMoniker
CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoUninitialize
GetRunningObjectTable
oleaut32
VarUI4FromStr
SysFreeString
Sections
.text Size: 208KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�j���u& Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE