Static task
static1
Behavioral task
behavioral1
Sample
72d84ef9b8c5b28cc0af740c7937da70ad116476f71251ef05835c62b4a6f789.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
72d84ef9b8c5b28cc0af740c7937da70ad116476f71251ef05835c62b4a6f789.exe
Resource
win10v2004-20220901-en
General
-
Target
72d84ef9b8c5b28cc0af740c7937da70ad116476f71251ef05835c62b4a6f789
-
Size
533KB
-
MD5
99454d0f5432f9f99151dec03acda1d6
-
SHA1
23fdec4a0d8816d1385ccddc28cd1d4d3eed6bca
-
SHA256
72d84ef9b8c5b28cc0af740c7937da70ad116476f71251ef05835c62b4a6f789
-
SHA512
b069547a2a86d9d8b02af21d3458dac48b3c2a86b1a9250c39f4b2a7ab5678da7bdff18406011d5f2a876b4c6ce8afe2095960f462b7bbaf5923d72f3288ee17
-
SSDEEP
12288:tzSK1Jagyt4W9t+PlD1AWyAt6kCCqKdXZXtWg7gMqD:tzSWJagyP9UPdZU1CqKdXZx7E
Malware Config
Signatures
Files
-
72d84ef9b8c5b28cc0af740c7937da70ad116476f71251ef05835c62b4a6f789.exe windows x86
50fcdc85f60471bb5f0d3a1ac73a7363
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Duplicate
ImageList_Remove
ImageList_Replace
InitCommonControlsEx
ImageList_SetFilter
ImageList_GetImageInfo
ImageList_GetFlags
ImageList_BeginDrag
ImageList_DragMove
MakeDragList
ImageList_GetDragImage
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetBkColor
ImageList_DragEnter
CreateStatusWindow
ImageList_Merge
ImageList_GetIconSize
ImageList_SetImageCount
CreatePropertySheetPageA
ImageList_SetBkColor
ImageList_GetImageRect
CreateToolbar
ImageList_DragLeave
CreateStatusWindowW
DrawInsert
kernel32
FlushFileBuffers
GetFileTime
GetCurrentProcessId
EnterCriticalSection
GetModuleFileNameA
GetTimeZoneInformation
GetCurrentThreadId
GetModuleHandleA
HeapReAlloc
HeapDestroy
ExitProcess
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentThread
CompareStringA
GetStringTypeA
CloseHandle
IsValidLocale
MultiByteToWideChar
LoadResource
GetUserDefaultLCID
VirtualProtect
GetVersionExA
GetTimeFormatA
SetHandleCount
UnhandledExceptionFilter
QueryPerformanceCounter
FreeEnvironmentStringsW
TlsSetValue
SetFilePointer
GetCurrentProcess
GetLocaleInfoW
CompareStringW
GetSystemInfo
GetLocaleInfoA
RtlUnwind
LCMapStringW
IsBadWritePtr
IsValidCodePage
TerminateProcess
VirtualQuery
TlsAlloc
SetLastError
HeapFree
InitializeCriticalSection
GetDateFormatA
WriteFile
SetEnvironmentVariableA
WideCharToMultiByte
GetFileType
GetACP
VirtualFree
VirtualAlloc
GetEnvironmentStrings
LeaveCriticalSection
InterlockedExchange
ReadFile
InterlockedDecrement
SetStdHandle
OpenMutexA
LCMapStringA
HeapAlloc
GetTickCount
TlsFree
FreeEnvironmentStringsA
GetLastError
HeapCreate
GetCommandLineA
GetCPInfo
GetOEMCP
GetStartupInfoA
GetStringTypeW
TlsGetValue
GetStdHandle
FoldStringA
EnumSystemLocalesA
LoadLibraryA
SetThreadPriority
HeapSize
CreateMutexA
GetProcAddress
DeleteCriticalSection
comdlg32
GetSaveFileNameA
GetOpenFileNameW
shell32
ExtractIconA
InternalExtractIconListA
RealShellExecuteExW
wininet
FreeUrlCacheSpaceA
ReadUrlCacheEntryStream
InternetSetCookieA
gdi32
SetWinMetaFileBits
GetOutlineTextMetricsA
SetStretchBltMode
GetDIBits
GetCharWidthFloatA
GetGlyphOutlineA
SetWorldTransform
SetTextCharacterExtra
SetBitmapBits
EnumICMProfilesA
GetTextCharsetInfo
SetICMMode
CreatePalette
GetCharWidthFloatW
GetEnhMetaFileBits
ResetDCW
GetMetaFileW
GetViewportOrgEx
FillPath
GetTextExtentPoint32A
GetArcDirection
PlayEnhMetaFileRecord
GetROP2
user32
SetWindowLongA
CloseClipboard
GetMenuItemRect
GetNextDlgGroupItem
GetSystemMenu
DdeQueryNextServer
RegisterClipboardFormatA
RegisterClassExA
RegisterClassA
SetKeyboardState
GetUpdateRect
GetMenu
GetKeyboardLayoutNameA
LockWindowUpdate
DdeSetUserHandle
ShowOwnedPopups
GetDlgItemTextW
CreateMDIWindowW
TrackMouseEvent
GetAsyncKeyState
UnloadKeyboardLayout
Sections
.text Size: 373KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ