Static task
static1
Behavioral task
behavioral1
Sample
04ec72dc2221bc3ecbe30dbe4a32ae5449b694cd9b8feeecaf12b03e232cf298.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
04ec72dc2221bc3ecbe30dbe4a32ae5449b694cd9b8feeecaf12b03e232cf298.exe
Resource
win10v2004-20220901-en
General
-
Target
04ec72dc2221bc3ecbe30dbe4a32ae5449b694cd9b8feeecaf12b03e232cf298
-
Size
863KB
-
MD5
54892f90a599d29e77c5af8456f00e10
-
SHA1
f6037ee7c5bccf1ee7f92fb162c8421e078a6bb7
-
SHA256
04ec72dc2221bc3ecbe30dbe4a32ae5449b694cd9b8feeecaf12b03e232cf298
-
SHA512
1913a5ab5f4e9840ce1371cee7a665dd3955f6dbdfa2abe68f0d7e210cd71f1db4bf84b95329ad8bddac2f12d36f177de73f6594b071aac10708988082ef93b0
-
SSDEEP
24576:rqJ+GjQYTHweeG002OFGZaXR4e+U3s0UqS:rqJ+GjQCHweI02OFGsB4KH1S
Malware Config
Signatures
Files
-
04ec72dc2221bc3ecbe30dbe4a32ae5449b694cd9b8feeecaf12b03e232cf298.exe windows x86
d757645fac9a3c3895270456883c7a40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
VirtualAlloc
GetOEMCP
Sleep
VirtualFree
WriteFile
HeapCreate
CreateProcessA
GetEnvironmentStrings
GetModuleHandleW
GetACP
CloseHandle
ReadFile
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
GetCPInfo
GetCommandLineW
LockResource
SizeofResource
RemoveDirectoryA
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
lstrlenA
UnmapViewOfFile
LCMapStringW
LoadLibraryExW
LeaveCriticalSection
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
ExpandEnvironmentStringsA
DuplicateHandle
FindNextFileA
CreateFileMappingA
CompareStringA
FindFirstFileA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
GetStartupInfoA
LoadLibraryA
GetVersionExA
QueryPerformanceCounter
SetEvent
GetCurrentThread
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
SetEndOfFile
GetConsoleMode
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
SetFileAttributesA
CreateThread
SetFilePointer
MultiByteToWideChar
UnhandledExceptionFilter
GetPrivateProfileStringA
LoadLibraryExA
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentVariableA
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
FreeLibrary
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WideCharToMultiByte
GetTempPathA
SetStdHandle
FreeEnvironmentStringsW
SetErrorMode
LocalAlloc
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
WaitForSingleObject
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetVersion
GetCommandLineA
GetLastError
GetTickCount
GetModuleHandleA
GetCurrentProcessId
LoadLibraryW
GetCurrentThreadId
advapi32
RegCloseKey
RegQueryValueExA
RegQueryInfoKeyA
user32
MessageBoxA
EndDialog
LoadIconA
LoadCursorA
ScreenToClient
GetDlgItem
GetWindowLongA
CheckMenuItem
SetWindowTextA
SetWindowLongA
ReleaseCapture
SetCapture
GetWindowRect
GetSystemMetrics
BeginPaint
SetFocus
CreateWindowExA
GetSubMenu
LoadStringA
PeekMessageA
EnableWindow
UpdateWindow
GetMessageA
DestroyWindow
GetClientRect
GetDC
DispatchMessageA
IsWindow
SetWindowPos
ReleaseDC
InvalidateRect
wsprintfA
CallWindowProcA
SystemParametersInfoA
gdi32
SetBkColor
DeleteDC
SetTextColor
Sections
.text Size: 826KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ