Static task
static1
Behavioral task
behavioral1
Sample
1637d209979fb5ec1c4b077890cf926258301e767b449330b48ef6f75f6cbd0b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1637d209979fb5ec1c4b077890cf926258301e767b449330b48ef6f75f6cbd0b.exe
Resource
win10v2004-20220812-en
General
-
Target
1637d209979fb5ec1c4b077890cf926258301e767b449330b48ef6f75f6cbd0b
-
Size
688KB
-
MD5
bf1d153460bc3dbdba5fb08974669773
-
SHA1
d49baf5c429bf43897a928270c519a8887d2fd15
-
SHA256
1637d209979fb5ec1c4b077890cf926258301e767b449330b48ef6f75f6cbd0b
-
SHA512
0bf6e7070d94358c6b1d5f1b2e341c9e32b9307e10748a8a02ef88d78d5d7c6b8f4d0eaf0b1db8602cfd1d13a4814b1be816aff28f38349f0bad6af3e8e00271
-
SSDEEP
12288:PLn2lcU93IDvmqg6AejMlrxIafiPXIpnGz:PL2rYDuqg6crxI6HpnGz
Malware Config
Signatures
Files
-
1637d209979fb5ec1c4b077890cf926258301e767b449330b48ef6f75f6cbd0b.exe windows x86
bd4e3707280d5c655348e13121660854
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetQueueStatus
SetScrollPos
LoadImageW
GetCursor
IsCharAlphaW
DestroyAcceleratorTable
GetShellWindow
GrayStringA
CreateWindowExW
DrawTextExA
CreateIconIndirect
LoadMenuIndirectA
CallMsgFilterW
IsChild
RegisterHotKey
GetClassInfoExW
ToUnicode
PostMessageW
OemToCharBuffA
SetRect
SetClipboardViewer
AdjustWindowRectEx
ShowOwnedPopups
CreateWindowExA
ShowWindow
GetKeyState
DestroyWindow
DrawEdge
MessageBoxIndirectW
GetClipboardData
GetParent
SetScrollInfo
InSendMessage
TranslateMDISysAccel
ActivateKeyboardLayout
LoadMenuW
DefWindowProcW
RegisterClassExA
RegisterClassA
CheckDlgButton
CreateIconFromResource
CreateDialogParamW
MessageBoxA
CopyIcon
ScrollWindowEx
MenuItemFromPoint
UnhookWindowsHookEx
GetWindowModuleFileNameA
SetWindowsHookExA
TabbedTextOutA
CascadeWindows
RegisterDeviceNotificationA
DdeAccessData
comctl32
ImageList_GetImageInfo
ImageList_SetDragCursorImage
ImageList_AddMasked
ImageList_Add
ImageList_Destroy
CreateStatusWindowA
ImageList_Draw
ImageList_Merge
ImageList_DragLeave
ImageList_DragMove
ImageList_GetImageCount
ImageList_AddIcon
ImageList_SetFlags
ImageList_SetOverlayImage
InitMUILanguage
CreateToolbarEx
InitCommonControlsEx
ImageList_LoadImageW
CreateMappedBitmap
shell32
SHGetFileInfo
ShellExecuteExA
kernel32
GetStdHandle
LCMapStringA
WaitCommEvent
FreeLibrary
OpenMutexA
GetConsoleOutputCP
SetUnhandledExceptionFilter
GetCPInfo
HeapSize
TlsGetValue
lstrcmpW
HeapFree
GetEnvironmentStrings
GetConsoleMode
MultiByteToWideChar
FreeEnvironmentStringsA
GetTimeZoneInformation
GetProcAddress
GetCurrentThreadId
EnterCriticalSection
SetConsoleCtrlHandler
SetLastError
SetFilePointer
GetSystemTimeAsFileTime
IsValidLocale
HeapCreate
HeapReAlloc
GetUserDefaultLCID
ReadFile
GetStringTypeA
InterlockedDecrement
GetFileAttributesA
GetLastError
GetEnvironmentStringsW
VirtualFree
CompareStringA
lstrcatA
GetLocaleInfoA
TerminateProcess
GetTimeFormatA
SetHandleCount
GetCurrentProcess
GetCurrentProcessId
HeapDestroy
InterlockedExchange
LCMapStringW
QueryPerformanceCounter
GetProcessHeap
CloseHandle
WriteConsoleW
SetStdHandle
GetCommandLineA
EnumSystemLocalesA
HeapAlloc
InitializeCriticalSection
RtlUnwind
WriteFile
CreateFileA
ExitProcess
GetStringTypeW
GetDateFormatA
InterlockedIncrement
TlsFree
IsValidCodePage
FileTimeToSystemTime
GetACP
FlushFileBuffers
WideCharToMultiByte
VirtualAlloc
GetConsoleCP
GetVersionExA
IsDebuggerPresent
CreateMutexA
CompareStringW
EnumDateFormatsA
LeaveCriticalSection
FileTimeToDosDateTime
WriteConsoleA
GetOEMCP
GetLocaleInfoW
GetModuleHandleA
Sleep
lstrcpynA
GetFileType
GetModuleFileNameA
VirtualQuery
DeleteCriticalSection
GetCurrentThread
WriteProfileSectionA
TlsAlloc
GetTickCount
GetStartupInfoA
SetEnvironmentVariableA
LoadLibraryA
TlsSetValue
UnhandledExceptionFilter
FreeEnvironmentStringsW
Sections
.text Size: 168KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 300KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ