Static task
static1
Behavioral task
behavioral1
Sample
57239d363b7189076fb2610c0b3d11247e8553f67ec0dbaa8d8198b61797e3e3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
57239d363b7189076fb2610c0b3d11247e8553f67ec0dbaa8d8198b61797e3e3.exe
Resource
win10v2004-20220812-en
General
-
Target
57239d363b7189076fb2610c0b3d11247e8553f67ec0dbaa8d8198b61797e3e3
-
Size
309KB
-
MD5
16afbf2d2764a9d337771cccd7cef114
-
SHA1
e879f6d54a2b0f0a9beb576de695fda96f484489
-
SHA256
57239d363b7189076fb2610c0b3d11247e8553f67ec0dbaa8d8198b61797e3e3
-
SHA512
49c9577a5f95db4856b0a6498ec6fdd39120daeb42c4ca976ad27a1891744c58f68edd86160401b4cb155f13b1252349ed5b891ab81dcc7bcfc2beb5d471a763
-
SSDEEP
6144:tHPWlkGn6HWdvL1lFppYdGxPU4n86Dk3kNp8mI6FRpQ2UwPmSVVK:lPWyGnoWdvL1l7quP7nqMzI6jpje7
Malware Config
Signatures
Files
-
57239d363b7189076fb2610c0b3d11247e8553f67ec0dbaa8d8198b61797e3e3.exe windows x86
e84e4eb01cc33c3666d12f6b25be0caa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseColorW
PageSetupDlgA
comctl32
ImageList_GetBkColor
ImageList_LoadImageW
ImageList_Destroy
ImageList_SetOverlayImage
ImageList_Read
DrawInsert
_TrackMouseEvent
ImageList_Create
CreatePropertySheetPageW
ImageList_AddIcon
ImageList_EndDrag
ImageList_DragShowNolock
InitCommonControlsEx
ImageList_DragEnter
ImageList_SetDragCursorImage
CreateStatusWindowW
ImageList_Add
kernel32
GetEnvironmentStrings
GetStringTypeA
GetCommandLineA
GetStdHandle
ExitProcess
SetHandleCount
GetStartupInfoW
OpenProcess
SetLastError
GetEnvironmentStringsW
VirtualFree
InterlockedExchange
WriteFile
GetDateFormatA
GetUserDefaultLCID
GetCurrentThreadId
CompareStringA
DeleteCriticalSection
SetStdHandle
IsValidLocale
lstrcatW
GetSystemTimeAsFileTime
GetLocaleInfoW
IsBadWritePtr
GetStringTypeExA
GetTimeZoneInformation
CreateMailslotW
FlushFileBuffers
GetCurrentProcess
GetCurrentThread
GetSystemInfo
EnumSystemLocalesA
EnumTimeFormatsA
GetCommandLineW
HeapFree
GetTimeFormatA
EnumResourceLanguagesA
GetLocaleInfoA
GetFileType
GetACP
EnterCriticalSection
TerminateProcess
RtlZeroMemory
GetPrivateProfileStringA
VirtualQuery
LoadLibraryA
CreateMutexA
GetShortPathNameW
GetProcAddress
GetLastError
QueryPerformanceCounter
CloseHandle
GetModuleFileNameW
LeaveCriticalSection
GetStringTypeW
GetVersionExA
LCMapStringA
HeapReAlloc
HeapAlloc
lstrcatA
MultiByteToWideChar
CompareStringW
GetModuleFileNameA
GetModuleHandleA
HeapDestroy
GetCurrentProcessId
lstrcmpiA
TlsGetValue
HeapCreate
GetStartupInfoA
GetTickCount
FreeEnvironmentStringsA
HeapSize
VirtualAlloc
SetEnvironmentVariableA
GlobalDeleteAtom
VirtualProtect
TlsFree
GetOEMCP
LCMapStringW
ExpandEnvironmentStringsA
UnhandledExceptionFilter
OpenMutexA
TlsSetValue
InitializeCriticalSection
ReadFile
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
GetCPInfo
SetFilePointer
ExpandEnvironmentStringsW
WideCharToMultiByte
RtlUnwind
shell32
SHGetPathFromIDListW
RealShellExecuteA
SHQueryRecycleBinA
RealShellExecuteExW
SHGetSpecialFolderPathA
gdi32
InvertRgn
SetDIBColorTable
CreateFontA
GetStretchBltMode
CreateColorSpaceA
CreatePalette
GetBkMode
EnableEUDC
IntersectClipRect
UpdateColors
ModifyWorldTransform
EnumFontsW
GetObjectA
UnrealizeObject
CreateFontIndirectA
SetTextJustification
wininet
HttpSendRequestExW
GetUrlCacheHeaderData
DeleteIE3Cache
FtpOpenFileW
FtpRenameFileA
InternetOpenA
FtpSetCurrentDirectoryW
FtpFindFirstFileW
GopherCreateLocatorW
user32
DdeCreateDataHandle
CheckMenuRadioItem
UpdateWindow
ToAsciiEx
BroadcastSystemMessage
EnumDisplaySettingsExA
SetDlgItemTextW
DefWindowProcA
GetWindowDC
AppendMenuA
ChildWindowFromPointEx
SwapMouseButton
ShowWindow
PostThreadMessageA
GetProcessDefaultLayout
EndTask
RegisterClassExA
GetWindowTextLengthW
LoadStringW
RegisterClassA
CreateWindowExA
PostQuitMessage
GetThreadDesktop
SetCapture
MessageBoxA
DestroyWindow
OpenWindowStationA
DlgDirListComboBoxW
RedrawWindow
SetMenuContextHelpId
CheckDlgButton
SetClipboardViewer
Sections
.text Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ