Static task
static1
Behavioral task
behavioral1
Sample
0b451cfc1deb4ff9013ce36aec4bf0339858be8627847ea2d43f62e02adcebe0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0b451cfc1deb4ff9013ce36aec4bf0339858be8627847ea2d43f62e02adcebe0.exe
Resource
win10v2004-20220812-en
General
-
Target
0b451cfc1deb4ff9013ce36aec4bf0339858be8627847ea2d43f62e02adcebe0
-
Size
275KB
-
MD5
0c367d4213e3465fcaa2a352d6483561
-
SHA1
16b680a3389f62ab50d42a34ae5de053884a9ff5
-
SHA256
0b451cfc1deb4ff9013ce36aec4bf0339858be8627847ea2d43f62e02adcebe0
-
SHA512
01729032737385f0b0bca6c46b3d31b51df3c3b0c2c0afb9bb063ac44b19a4456a2d6eb98d3d70e57f0a31e21e3fdaae948e34ca9cbfc8c316fa6de384456448
-
SSDEEP
6144:629nWcBngmGaShDnwCS/9mH6aCdaU34SRE8+:62tWF1wHgC00P2
Malware Config
Signatures
Files
-
0b451cfc1deb4ff9013ce36aec4bf0339858be8627847ea2d43f62e02adcebe0.exe windows x86
773890b124566e899fbadcdbf71f72c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
DrawInsert
ImageList_EndDrag
CreateStatusWindow
CreatePropertySheetPage
ImageList_SetIconSize
DestroyPropertySheetPage
ImageList_GetBkColor
GetEffectiveClientRect
InitCommonControlsEx
DrawStatusTextA
ImageList_SetDragCursorImage
ImageList_GetImageInfo
ImageList_LoadImageA
ImageList_GetImageRect
ImageList_Duplicate
ImageList_LoadImageW
kernel32
LCMapStringA
HeapReAlloc
TerminateProcess
PulseEvent
GetTickCount
GetModuleHandleA
TlsFree
LoadLibraryA
GetLogicalDrives
SetEnvironmentVariableA
GetACP
CompareStringW
RtlUnwind
TlsAlloc
GetCurrentDirectoryW
LCMapStringW
GetCurrentThread
MultiByteToWideChar
GetStringTypeW
InitializeCriticalSection
RaiseException
GetTimeZoneInformation
ReadFile
GetSystemTime
SetFilePointer
GetVersion
InterlockedExchange
InterlockedIncrement
UnhandledExceptionFilter
TlsSetValue
GetCurrentProcess
HeapCreate
DeleteCriticalSection
OpenMutexA
SetStdHandle
HeapAlloc
CompareFileTime
VirtualQuery
UnmapViewOfFile
FreeEnvironmentStringsA
WideCharToMultiByte
CompareStringA
GetCurrentThreadId
GetThreadTimes
EnterCriticalSection
InterlockedDecrement
LeaveCriticalSection
GetStartupInfoA
VirtualAlloc
GetCommandLineA
SetHandleCount
HeapFree
GetOEMCP
FreeEnvironmentStringsW
GetEnvironmentStringsW
FindFirstFileExW
GetLastError
GetModuleFileNameA
GetCurrentProcessId
CreateFileA
GetSystemTimeAsFileTime
GetEnvironmentStrings
SetLastError
GetCPInfo
FindResourceW
TlsGetValue
ExitProcess
CloseHandle
GetStdHandle
VirtualFree
HeapDestroy
FlushFileBuffers
WriteFile
IsBadWritePtr
GetStringTypeA
CreateMutexA
WritePrivateProfileStringA
GetProcAddress
QueryPerformanceCounter
GetLocalTime
GetFileType
wininet
GopherGetLocatorTypeA
CreateUrlCacheEntryA
InternetTimeToSystemTime
InternetCloseHandle
InternetShowSecurityInfoByURLA
IsUrlCacheEntryExpiredW
FtpCreateDirectoryA
user32
IsIconic
ShowWindow
CreateWindowExA
RegisterClassA
MessageBoxA
IsDialogMessageW
DefDlgProcA
ChangeMenuA
CreateCaret
SetCaretPos
EnumDesktopsA
IntersectRect
GetDlgItem
PostMessageW
MapDialogRect
GetMonitorInfoW
RegisterClassExA
Sections
.text Size: 151KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ