Static task
static1
Behavioral task
behavioral1
Sample
696bd15d3451ac62ad4b7c0495738c0d09475c26b26d1b3f78f340b4c46f60e6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
696bd15d3451ac62ad4b7c0495738c0d09475c26b26d1b3f78f340b4c46f60e6.exe
Resource
win10v2004-20220812-en
General
-
Target
696bd15d3451ac62ad4b7c0495738c0d09475c26b26d1b3f78f340b4c46f60e6
-
Size
529KB
-
MD5
3b6dc64b3b4a37d1403a3f035422b63b
-
SHA1
06bd95eead94f57edc564078646725791a0ff12b
-
SHA256
696bd15d3451ac62ad4b7c0495738c0d09475c26b26d1b3f78f340b4c46f60e6
-
SHA512
55839b9ce9e615debb07e1f6ecfdc28c0164d8790b2a07533f19d42ee942da83a5b260e7d504cf286c2f3fdc6d01b46d2c7751352654c1ef72a7f1741780e5e6
-
SSDEEP
12288:g0DOV3KjuO78G7JuZ6xYQJk11vWdBrF/ES8BcnZbbz2:g0c3KjukL9JG2BccnZb2
Malware Config
Signatures
Files
-
696bd15d3451ac62ad4b7c0495738c0d09475c26b26d1b3f78f340b4c46f60e6.exe windows x86
67e4d2aa46475782878a5485f4f0de3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageW
CharLowerBuffW
GetClipboardFormatNameA
CreateWindowExA
TranslateAccelerator
RegisterClassExA
MessageBeep
DefWindowProcA
MessageBoxA
DestroyWindow
ShowWindow
RegisterClassA
kernel32
IsValidCodePage
LoadLibraryA
DeleteCriticalSection
TlsSetValue
CreateFileMappingA
GetDateFormatA
GetFileType
EnterCriticalSection
SetConsoleCtrlHandler
lstrcpynW
IsDebuggerPresent
HeapReAlloc
GetCurrentProcessId
CloseHandle
GetACP
GetSystemTimeAsFileTime
TerminateProcess
RtlUnwind
GetCurrentProcess
HeapSize
OpenMutexA
SetFilePointer
VirtualFree
GetConsoleCP
FreeLibrary
GetLastError
CompareStringW
LockFileEx
GetConsoleOutputCP
WriteConsoleA
GetEnvironmentStringsW
SetHandleCount
GetCPInfo
GlobalDeleteAtom
LeaveCriticalSection
LCMapStringW
GetTickCount
SetEnvironmentVariableA
GetLocaleInfoA
EnumSystemLocalesA
MultiByteToWideChar
TlsFree
GetTimeZoneInformation
GetStdHandle
GetCurrentThreadId
GetModuleHandleA
EnumCalendarInfoW
GetSystemDefaultLCID
ExitProcess
GetStartupInfoA
SetStdHandle
Sleep
VirtualQuery
GetProcessHeap
CreateMutexA
FreeEnvironmentStringsW
HeapAlloc
GetTempPathW
GetStringTypeA
GetOEMCP
GetUserDefaultLCID
TlsAlloc
VirtualAlloc
IsValidLocale
InterlockedDecrement
ReadFile
WideCharToMultiByte
GetConsoleMode
UnhandledExceptionFilter
GetVersionExA
HeapCreate
FreeEnvironmentStringsA
GetLocaleInfoW
AddAtomW
GetCommandLineA
LCMapStringA
GetProfileStringA
GetStringTypeW
GetTimeFormatA
GetModuleFileNameA
SetLastError
InterlockedIncrement
TlsGetValue
CreateFileA
GetCurrentThread
InitializeCriticalSection
SetFileAttributesW
WriteFile
LocalFileTimeToFileTime
GetProcAddress
HeapFree
HeapDestroy
InterlockedExchange
QueryPerformanceCounter
WriteConsoleW
CompareStringA
SetUnhandledExceptionFilter
FlushFileBuffers
GetEnvironmentStrings
advapi32
RegOpenKeyW
LookupAccountSidW
CryptExportKey
GetUserNameA
RegSetValueExW
LookupAccountNameW
CryptSetProviderExA
LogonUserA
RegSaveKeyA
comdlg32
LoadAlterBitmap
GetSaveFileNameA
GetFileTitleA
ChooseColorW
gdi32
CreateSolidBrush
GdiFlush
SetPolyFillMode
GetNearestPaletteIndex
GetEnhMetaFilePaletteEntries
UpdateICMRegKeyA
PolyTextOutA
LPtoDP
GetEnhMetaFileDescriptionA
CreateDIBPatternBrushPt
GetObjectW
PlayEnhMetaFile
PatBlt
GetLogColorSpaceW
ColorMatchToTarget
comctl32
ImageList_ReplaceIcon
ImageList_DragMove
InitCommonControlsEx
DrawStatusTextA
ImageList_DrawEx
ImageList_LoadImageA
ImageList_SetOverlayImage
ImageList_Add
ImageList_SetBkColor
ImageList_LoadImage
CreateToolbarEx
DrawStatusTextW
ImageList_GetFlags
ImageList_Draw
_TrackMouseEvent
ImageList_SetDragCursorImage
InitMUILanguage
ImageList_Replace
ImageList_Copy
CreateMappedBitmap
ImageList_EndDrag
CreateToolbar
ImageList_Remove
ImageList_Read
ImageList_SetFilter
Sections
.text Size: 348KB - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 49KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ