Static task
static1
Behavioral task
behavioral1
Sample
b285c40c168901121282cdc1a57610200c7bb68e5905854e0abaab0901b6e8ef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b285c40c168901121282cdc1a57610200c7bb68e5905854e0abaab0901b6e8ef.exe
Resource
win10v2004-20220812-en
General
-
Target
b285c40c168901121282cdc1a57610200c7bb68e5905854e0abaab0901b6e8ef
-
Size
497KB
-
MD5
941114f22ef7791082756415b9b1efdf
-
SHA1
289e90f6909b686ac38a6f527c7ce8f12f19bb27
-
SHA256
b285c40c168901121282cdc1a57610200c7bb68e5905854e0abaab0901b6e8ef
-
SHA512
206a66552c1251f228dc52e643f2939658e292cc5d16478dcd5c3e9f2c928c1dbad4f0a79441de312fe044661da7d7ed2a949a54daab787e965b4bb60bd8738b
-
SSDEEP
12288:1elHoyD2QWTTkXTHdCWNXaKfuF1ov1Xl4n:1e/D5XTAWNFuFqvUn
Malware Config
Signatures
Files
-
b285c40c168901121282cdc1a57610200c7bb68e5905854e0abaab0901b6e8ef.exe windows x86
b488fa4222068c9bb6a43f7c7eecf029
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Draw
ImageList_Remove
ImageList_DragEnter
ImageList_SetFilter
CreatePropertySheetPageA
ImageList_SetOverlayImage
CreateToolbar
ImageList_GetIconSize
ImageList_Write
ImageList_LoadImageA
ImageList_LoadImageW
CreateToolbarEx
ImageList_DragShowNolock
_TrackMouseEvent
InitCommonControlsEx
ImageList_DrawEx
ImageList_Duplicate
ImageList_GetIcon
ImageList_GetBkColor
GetEffectiveClientRect
ImageList_GetImageCount
InitMUILanguage
ImageList_DragLeave
ImageList_GetDragImage
ImageList_Read
kernel32
GetTimeZoneInformation
HeapReAlloc
CreateNamedPipeA
GetStdHandle
MoveFileExA
RtlUnwind
GetCommandLineA
GetUserDefaultLCID
WriteProfileStringA
ReadFile
GetVersionExA
GetLocaleInfoA
GetCurrentProcess
SetStdHandle
GetStringTypeExA
SetFilePointer
GetOEMCP
IsBadWritePtr
OpenEventA
GetCurrentThread
GetEnvironmentStringsA
GetEnvironmentStringsW
HeapAlloc
UnhandledExceptionFilter
SetSystemTime
TlsFree
GetTimeFormatA
GetCPInfo
LeaveCriticalSection
WriteFile
SetHandleCount
TlsSetValue
HeapSize
GetStringTypeW
FlushFileBuffers
VirtualAlloc
GetSystemInfo
EnterCriticalSection
GetACP
GetLastError
VirtualQuery
CloseHandle
CreateMutexA
CreateRemoteThread
GetEnvironmentStrings
InitializeCriticalSection
VirtualFree
ExitProcess
IsValidLocale
LocalSize
IsValidCodePage
DeleteCriticalSection
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
WideCharToMultiByte
HeapFree
GetModuleHandleA
WriteProfileSectionA
GetFileAttributesExW
InterlockedExchange
GetProcAddress
GetTickCount
MultiByteToWideChar
GetCurrentThreadId
GetFileType
TerminateProcess
HeapCreate
CompareStringW
HeapDestroy
SetEnvironmentVariableA
CompareStringA
GetModuleFileNameA
WriteProfileSectionW
TlsGetValue
FreeEnvironmentStringsA
LCMapStringW
GetStringTypeA
QueryPerformanceCounter
OpenMutexA
LoadLibraryA
TlsAlloc
FreeEnvironmentStringsW
LCMapStringA
GetLocaleInfoW
GetCurrentProcessId
GetDateFormatA
VirtualProtect
SetLastError
EnumSystemLocalesA
GetStartupInfoA
comdlg32
FindTextA
GetSaveFileNameW
shell32
SHGetDataFromIDListW
SheChangeDirA
SHGetSpecialFolderLocation
SHFormatDrive
gdi32
GetGlyphOutlineA
GetBoundsRect
SetViewportExtEx
GetNearestColor
StartPage
GetNearestPaletteIndex
PolyPolygon
SetLayout
GetMetaFileBitsEx
GetICMProfileA
PathToRegion
SetBitmapDimensionEx
wininet
FtpPutFileW
FtpDeleteFileW
FtpGetFileSize
InternetSetFilePointer
user32
RegisterClassA
IntersectRect
ShowWindow
DefMDIChildProcA
CallMsgFilterA
GetCapture
IsClipboardFormatAvailable
GetClassInfoExW
RegisterClassExA
GetClientRect
DestroyWindow
CreateWindowExA
CharPrevA
DrawStateW
MonitorFromRect
DefWindowProcA
MessageBoxW
Sections
.text Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 213KB - Virtual size: 239KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ