Static task
static1
Behavioral task
behavioral1
Sample
43646b44ebca4c5f6958ef80f2f1603711f84b42bb6f07292a4dd6b11336d72c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
43646b44ebca4c5f6958ef80f2f1603711f84b42bb6f07292a4dd6b11336d72c.exe
Resource
win10v2004-20220812-en
General
-
Target
43646b44ebca4c5f6958ef80f2f1603711f84b42bb6f07292a4dd6b11336d72c
-
Size
580KB
-
MD5
1aeab5865dfed3dba32a2dc9db5b9731
-
SHA1
395b6e04e4b082895f27d4c06bc0bf193815442b
-
SHA256
43646b44ebca4c5f6958ef80f2f1603711f84b42bb6f07292a4dd6b11336d72c
-
SHA512
624e3faa111d7728721c806eb5cd5368fd750ef316e1d51af22091e4315dc8dac8308d7111137836cbc41429998a9be66ea54b0a3afff26479148a57474e8f7d
-
SSDEEP
12288:kOntDZhgrhbwdipFDRzPVViCJEvZdIbi6+Lstf2twvemIcs+ybk:XntDToOipVPaCJ0Zd/6iIWAI5+Ik
Malware Config
Signatures
Files
-
43646b44ebca4c5f6958ef80f2f1603711f84b42bb6f07292a4dd6b11336d72c.exe windows x86
9a00dcc1cf5f32f176e19e1bd62e0973
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
FindResourceW
UnmapViewOfFile
IsValidCodePage
TlsGetValue
SizeofResource
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
GetCPInfo
GetCommandLineW
LockResource
GetEnvironmentStrings
lstrlenW
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
HeapCreate
LCMapStringW
InterlockedIncrement
HeapAlloc
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GlobalLock
FindFirstFileW
CompareStringA
FindFirstFileA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
SetEvent
GetModuleHandleW
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
QueryPerformanceCounter
GetOEMCP
lstrcmpiA
SetHandleCount
Sleep
HeapFree
WriteConsoleW
LeaveCriticalSection
VirtualQuery
WriteConsoleA
SetUnhandledExceptionFilter
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
CreateThread
CreateMutexA
FindNextFileA
MultiByteToWideChar
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
FlushFileBuffers
IsDebuggerPresent
VirtualProtect
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
OutputDebugStringA
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
FreeLibrary
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
GetTempPathA
SetStdHandle
FreeEnvironmentStringsW
SetErrorMode
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
SetEndOfFile
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
ResetEvent
VirtualAlloc
ExitProcess
GetCurrentThread
GetCurrentThreadId
GetModuleHandleA
GetCurrentProcessId
GetTickCount
GetLastError
GetVersion
EnterCriticalSection
GetCommandLineA
user32
GetDlgItem
SetTimer
GetSubMenu
SetWindowTextA
SetWindowLongA
SetCapture
GetWindowRect
GetSystemMetrics
DefWindowProcA
BeginPaint
ReleaseDC
FillRect
CreateWindowExA
GetWindowLongA
EnableMenuItem
SetForegroundWindow
TranslateMessage
PeekMessageA
ShowWindow
UpdateWindow
ScreenToClient
DestroyWindow
ClientToScreen
GetClientRect
GetDC
IsWindow
SetWindowPos
PostQuitMessage
SendMessageA
GetDesktopWindow
EndDialog
MessageBoxA
GetSysColor
PostMessageA
SystemParametersInfoA
InvalidateRect
wsprintfA
DrawTextA
CallWindowProcA
SetCursor
LoadCursorA
LoadIconA
GetParent
TrackPopupMenu
gdi32
DeleteDC
SetTextColor
CreateCompatibleDC
CreateSolidBrush
SelectObject
advapi32
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
msvcrt
_exit
free
exit
Sections
.text Size: 543KB - Virtual size: 865KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ