Static task
static1
Behavioral task
behavioral1
Sample
420073c833f3da70f9e14ba94c8acb352c15ae20bf0bcf668b4830e7ae3acdad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
420073c833f3da70f9e14ba94c8acb352c15ae20bf0bcf668b4830e7ae3acdad.exe
Resource
win10v2004-20220812-en
General
-
Target
420073c833f3da70f9e14ba94c8acb352c15ae20bf0bcf668b4830e7ae3acdad
-
Size
392KB
-
MD5
69048914e02b218ce87b5ce56d5fcba0
-
SHA1
014069361b8ed27de49524527dc5769a09c1decb
-
SHA256
420073c833f3da70f9e14ba94c8acb352c15ae20bf0bcf668b4830e7ae3acdad
-
SHA512
3559767265deb731af81d6bdfdf09f34deffb25eb7ba90695214457cee89813851f47bb2fc087ab28e41edb98bbe2d11f4070793812e75a89c4eecff4caa42ec
-
SSDEEP
6144:trvWTF+82TNDUvXBVY6a2ntwb8BBbn2IzOZg2fZOSTiiQXmFH89EjbgWpuDASBiu:mV2RDwDPkGbn5SKGOi
Malware Config
Signatures
Files
-
420073c833f3da70f9e14ba94c8acb352c15ae20bf0bcf668b4830e7ae3acdad.exe windows x86
acd2b2bf1c79ee99b3dbe0f3ddc16469
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
ExitProcess
ReadFile
LoadLibraryA
HeapFree
LCMapStringA
GetCPInfo
CompareStringA
TlsGetValue
GetCurrentThread
SetLastError
LCMapStringW
EnumCalendarInfoA
QueryPerformanceCounter
OpenMutexA
GetProcAddress
FillConsoleOutputCharacterA
GetModuleFileNameA
TlsSetValue
LeaveCriticalSection
DuplicateHandle
GetStartupInfoA
HeapDestroy
GetCommandLineA
GetFileType
SetConsoleCP
VirtualProtect
GetEnvironmentStrings
GetLastError
WriteConsoleOutputAttribute
GetEnvironmentStringsW
GetFileTime
WriteFile
FlushFileBuffers
UnhandledExceptionFilter
GetOEMCP
VirtualQuery
SetStdHandle
CreateSemaphoreA
HeapReAlloc
TlsFree
CompareStringW
CreateFileA
FreeEnvironmentStringsW
InterlockedExchange
SetHandleCount
HeapCreate
GetVersion
GetStringTypeW
GetStdHandle
GetStringTypeA
GetLocalTime
SetThreadLocale
DeleteCriticalSection
GetACP
VirtualFree
GetFullPathNameA
OpenProcess
GetModuleHandleA
CloseHandle
CreateMutexA
GetTimeZoneInformation
HeapAlloc
TerminateProcess
MultiByteToWideChar
SetFilePointer
InitializeCriticalSection
InterlockedDecrement
GetTickCount
GetSystemTimeAsFileTime
IsBadWritePtr
GetCurrentProcess
AddAtomW
GlobalUnfix
WriteConsoleA
SetEnvironmentVariableA
RtlUnwind
GetCurrentProcessId
GetCurrentThreadId
GetProfileIntA
ConvertDefaultLocale
WideCharToMultiByte
TlsAlloc
VirtualAlloc
GetSystemDirectoryA
InterlockedIncrement
GetSystemTime
FreeEnvironmentStringsA
user32
ClientToScreen
GetScrollRange
DdeImpersonateClient
BroadcastSystemMessageA
FreeDDElParam
DeleteMenu
wvsprintfW
GetTopWindow
GetUserObjectInformationW
ExcludeUpdateRgn
GetCursorInfo
GetDialogBaseUnits
SetRectEmpty
SetClipboardViewer
RegisterClassA
CreateIcon
CreateDialogIndirectParamA
SetDeskWallpaper
ShowScrollBar
CharLowerBuffW
AppendMenuA
RegisterClassExA
DlgDirSelectExW
SetDoubleClickTime
IsClipboardFormatAvailable
comctl32
ImageList_SetImageCount
ImageList_DragMove
ImageList_Destroy
ImageList_DragEnter
ImageList_Read
CreateStatusWindowW
ImageList_AddIcon
MakeDragList
ImageList_Copy
DrawInsert
CreateToolbar
InitCommonControlsEx
ImageList_SetFlags
ImageList_BeginDrag
ImageList_LoadImageA
ImageList_Write
ImageList_LoadImage
ImageList_SetOverlayImage
CreatePropertySheetPageW
ImageList_Add
ImageList_GetFlags
CreateUpDownControl
CreateStatusWindow
CreatePropertySheetPage
ImageList_SetBkColor
ImageList_DragShowNolock
comdlg32
GetSaveFileNameW
GetFileTitleW
ChooseFontA
FindTextW
gdi32
GdiPlayJournal
CreateICA
CreateHatchBrush
GetRandomRgn
FlattenPath
CreateFontIndirectA
SetBitmapDimensionEx
GetBrushOrgEx
SetICMProfileW
GdiGetBatchLimit
DeviceCapabilitiesExW
SetPixel
CloseMetaFile
CreateDCW
EnableEUDC
OffsetRgn
GetEnhMetaFileHeader
DeleteColorSpace
SetPaletteEntries
GetWindowExtEx
Escape
CreateHalftonePalette
Sections
.text Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ