Static task
static1
Behavioral task
behavioral1
Sample
79ab4a8ee7a18a60f48dab14701bd845356c4003cf14df93ed98f2daf5de922f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
79ab4a8ee7a18a60f48dab14701bd845356c4003cf14df93ed98f2daf5de922f.exe
Resource
win10v2004-20220812-en
General
-
Target
79ab4a8ee7a18a60f48dab14701bd845356c4003cf14df93ed98f2daf5de922f
-
Size
211KB
-
MD5
0b60d0154bbe8a324b5f50ac05d05d0e
-
SHA1
c0fd03bd478224691a866e0e644aeec2979d5336
-
SHA256
79ab4a8ee7a18a60f48dab14701bd845356c4003cf14df93ed98f2daf5de922f
-
SHA512
1f5e34604a53dd48e5bc69459b56668f961738d6c9f646ba025f6055126263ede2679a781a7fdef319e317dc2813c23fffcdc2ec4ada05a8860d902b854885c3
-
SSDEEP
6144:MV9ToZbApClEYtc2//OofwB+LVWGkphqvEmc:MibgYtb/PF3cKEv
Malware Config
Signatures
Files
-
79ab4a8ee7a18a60f48dab14701bd845356c4003cf14df93ed98f2daf5de922f.exe windows x86
7b370f1c21a587bf21fdeddd796759a3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetCursor
GetDlgItem
CheckDlgButton
LoadStringW
DefWindowProcW
IsRectEmpty
IsWindowVisible
SetDlgItemInt
DispatchMessageW
MoveWindow
DestroyWindow
ClientToScreen
TranslateMessage
InvalidateRect
GetDesktopWindow
SetWindowLongW
GetClientRect
GetWindowRect
SetDlgItemTextW
CreateDialogParamW
GetWindowLongW
CheckRadioButton
ReleaseDC
EnableWindow
GetAsyncKeyState
GetDlgItemInt
SendMessageW
IsWindow
LoadCursorW
PeekMessageW
GetDC
ShowWindow
oleaut32
VarBstrFromDisp
VarBstrFromUI4
VarBstrFromI4
VarBstrFromR8
VarBstrFromDate
VarBstrFromCy
VarBstrFromUI2
VarBstrFromUI8
VarBstrFromI8
VarBstrFromDec
VarBstrFromI2
VarBstrFromUI1
VarBstrFromI1
VarBstrFromR4
kernel32
IsBadWritePtr
WriteFile
CreateEventW
HeapFree
GlobalFindAtomA
GetCurrentThread
EnterCriticalSection
GetTickCount
GetCurrentProcess
GetQueuedCompletionStatus
GetProcAddress
SetLastError
SetThreadPriority
WideCharToMultiByte
lstrcpyW
SetFilePointer
LeaveCriticalSection
lstrcmpW
InitializeCriticalSection
InterlockedExchange
GlobalUnlock
ReleaseSemaphore
GetSystemTimeAsFileTime
MultiByteToWideChar
GetFileAttributesW
GetLocaleInfoA
GetACP
WaitForSingleObject
SetEvent
IsBadReadPtr
CreateThread
GlobalLock
LoadLibraryW
QueryPerformanceCounter
GlobalAlloc
WaitForMultipleObjects
CreateFileW
ReadFile
SetUnhandledExceptionFilter
IsBadCodePtr
SetEndOfFile
lstrcmpiW
GetFileSize
GlobalHandle
GetCurrentProcessId
GetFullPathNameW
GetProfileIntA
FreeLibrary
GetPrivateProfileStringW
DeleteCriticalSection
InterlockedDecrement
GetLastError
GetDiskFreeSpaceW
GetProcessHeap
ResetEvent
GetModuleFileNameA
GetVersionExW
lstrcpynW
GlobalMemoryStatus
CreateSemaphoreW
lstrlenW
HeapAlloc
InterlockedIncrement
VirtualFree
MulDiv
lstrlenA
lstrcpyA
GlobalFree
CloseHandle
GetThreadPriority
msoeacct
HrCreateAccountManager
DllCanUnloadNow
ValidEmailAddress
DllGetClassObject
GetDllMajorVersion
msls31
LssbGetObjDimSubline
LssbGetDurTrailWithPensInSubline
LssbGetNumberDnodesInSubline
LssbGetPlsrunsFromSubline
LsCompressSubline
LssbGetVisibleDcpInSubline
msnetobj
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ