Static task
static1
Behavioral task
behavioral1
Sample
f0d26d73b326478c0805de8f1c46da495ddd13d9de0dab8ca865b969032d2345.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f0d26d73b326478c0805de8f1c46da495ddd13d9de0dab8ca865b969032d2345.exe
Resource
win10v2004-20220812-en
General
-
Target
f0d26d73b326478c0805de8f1c46da495ddd13d9de0dab8ca865b969032d2345
-
Size
500KB
-
MD5
b625b87a9dfdc345d226e913f9f95d77
-
SHA1
6a46bf2364024c654a0a7ee5108a0b58414df2bf
-
SHA256
f0d26d73b326478c0805de8f1c46da495ddd13d9de0dab8ca865b969032d2345
-
SHA512
855f4c682f37dd9ff9395d699410d14528971795caeb9af80015ceb5948eee19c00ab6dd5d6d92be664197a4cf8f8310fab7966be15f2a791e357abb70c1cbd0
-
SSDEEP
6144:qa+tnVAIV+k9xHJyfJ4+dIE4n9xrH/vlWBRdLbyx68pjdVym/OyIOSbCCCCCC:q5tnGIV+kO1dIE4n3rlYFGx68NdV5Id
Malware Config
Signatures
Files
-
f0d26d73b326478c0805de8f1c46da495ddd13d9de0dab8ca865b969032d2345.exe windows x86
817255b15f07dfffe135a5a2a2d21c88
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDeferWindowPos
ExitWindowsEx
IntersectRect
GetClientRect
GetDesktopWindow
CreateDialogIndirectParamW
GetForegroundWindow
IsDialogMessageW
LoadBitmapW
CheckDlgButton
SendMessageW
SetWindowTextW
GetIconInfo
GetMessagePos
UpdateWindow
GetClassNameW
GetDC
GetAsyncKeyState
EnumChildWindows
GetWindowTextW
FindWindowW
GetWindowRect
DialogBoxIndirectParamW
CreatePopupMenu
GetSysColorBrush
DispatchMessageW
InflateRect
gdi32
CreateRectRgn
GetPixel
PtVisible
CreateFontW
GetStockObject
SetBkMode
MoveToEx
LineTo
ExcludeClipRect
SelectClipRgn
ole32
OleInitialize
CoCreateInstance
CoUninitialize
CoInitialize
OleSetContainedObject
OleUninitialize
advapi32
RegCloseKey
RegCreateKeyW
RegOpenKeyExW
RegQueryValueExW
lz32
LZStart
GetExpandedNameW
LZOpenFileW
LZRead
LZClose
LZDone
LZInit
LZSeek
kernel32
GetConsoleMode
GetConsoleCP
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
FlushFileBuffers
GetUserDefaultLCID
GetOEMCP
GetACP
CreateFileA
HeapReAlloc
SetFilePointer
LoadLibraryA
GetLocaleInfoW
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoA
SetStdHandle
VirtualAlloc
HeapSize
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetTickCount
WideCharToMultiByte
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
QueryPerformanceCounter
GetWindowsDirectoryW
GetSystemTime
OpenProcess
GetVersionExW
GetModuleHandleW
GetDateFormatW
SizeofResource
GetLocalTime
GetCurrentProcessId
GetFileTime
GetDiskFreeSpaceW
GetTimeFormatW
CloseHandle
WriteFile
GetFileSize
CreateFileW
DeleteCriticalSection
Sleep
FreeLibrary
LoadLibraryW
GetProcAddress
WaitNamedPipeA
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetCPInfo
GetLastError
LCMapStringA
LCMapStringW
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
Sections
.text Size: 280KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ