Static task
static1
Behavioral task
behavioral1
Sample
ed7df114b37503e89fad3d5d24c39157988665ff5576884935c3404570c2cd42.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ed7df114b37503e89fad3d5d24c39157988665ff5576884935c3404570c2cd42.exe
Resource
win10v2004-20220812-en
General
-
Target
ed7df114b37503e89fad3d5d24c39157988665ff5576884935c3404570c2cd42
-
Size
12.3MB
-
MD5
4a7f5152c1451d7f7e59a21b4f8693a5
-
SHA1
298e7d67916c7b2f39bd69a2ec63823518462bb8
-
SHA256
ed7df114b37503e89fad3d5d24c39157988665ff5576884935c3404570c2cd42
-
SHA512
99b424ec5a514f279a67f6d1ab76a50fe5cbd4b49754a7631e5c2115571b2a8477028afcd12349e6642dd1693187d344cf7c207f1884df96c1caf119ebf8e75b
-
SSDEEP
393216:TkGz9FCMpvslxUMHE+4A0U8qTpV6isoUU03E:JJ0lt0A5p8PRE
Malware Config
Signatures
Files
-
ed7df114b37503e89fad3d5d24c39157988665ff5576884935c3404570c2cd42.exe windows x86
647edf31f4d37533dc3c43e2621f4e03
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
shell32
SHBrowseForFolderW
SHGetSpecialFolderLocation
CommandLineToArgvW
ShellExecuteW
ShellExecuteExW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetMalloc
kernel32
FlushFileBuffers
CreateFileA
GetModuleFileNameW
LoadLibraryW
FreeLibrary
GetProcAddress
WaitForSingleObject
SetCurrentDirectoryW
CreateProcessW
CloseHandle
GetCurrentDirectoryW
LocalFree
SetFileApisToOEM
SetPriorityClass
GetCurrentThread
SetThreadPriority
GetEnvironmentVariableW
GetCurrentProcess
GetLastError
GetModuleHandleW
GetVersionExW
ExpandEnvironmentStringsW
GetCommandLineW
GetFileAttributesW
DeleteFileW
RemoveDirectoryW
CreateDirectoryW
FormatMessageW
InterlockedExchangeAdd
FindFirstFileW
FindClose
FindNextFileW
SetEndOfFile
SetFileTime
WriteFile
ReadFile
GetFileSize
CreateFileW
SetFilePointer
ResumeThread
GetCurrentThreadId
WaitForMultipleObjects
WideCharToMultiByte
GetACP
MultiByteToWideChar
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetWindowsDirectoryW
GetFullPathNameW
SetFileAttributesW
GetTempFileNameW
GetLongPathNameW
MoveFileW
lstrlenW
GetTempPathW
CreateEventW
SetEvent
ResetEvent
FindResourceW
FileTimeToSystemTime
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
HeapReAlloc
VirtualAlloc
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
Sleep
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
ExitThread
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
user32
DispatchMessageW
IsDialogMessageW
PostQuitMessage
CreateDialogParamW
LoadIconW
TranslateMessage
ScreenToClient
GetMessageW
DestroyIcon
SendMessageW
IsWindow
MessageBoxW
ShowWindow
PostMessageW
DialogBoxParamW
GetSystemMetrics
GetWindowRect
SetWindowPos
GetDlgItem
EndDialog
GetWindowTextW
SetWindowTextW
KillTimer
EnableWindow
GetActiveWindow
GetDesktopWindow
LoadStringW
IsWindowVisible
SetTimer
gdi32
DeleteObject
CreateSolidBrush
ole32
CoCreateInstance
CoTaskMemFree
CoInitializeEx
CoUninitialize
CoInitialize
Sections
.text Size: 270KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ