Static task
static1
Behavioral task
behavioral1
Sample
7807366a0a33259e276780e32b82d1b55c7636053c0ebd09317a91b395c36c4c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7807366a0a33259e276780e32b82d1b55c7636053c0ebd09317a91b395c36c4c.exe
Resource
win10v2004-20220812-en
General
-
Target
7807366a0a33259e276780e32b82d1b55c7636053c0ebd09317a91b395c36c4c
-
Size
748KB
-
MD5
d36ee7b40a5f8b30a70a6471a43aefd3
-
SHA1
3a7c9c8030f373dd6c75fdf77c5a04cbffa444cd
-
SHA256
7807366a0a33259e276780e32b82d1b55c7636053c0ebd09317a91b395c36c4c
-
SHA512
65baadfc68b120cd40c4461852895c5f7015c6c693561d14990c8be29630acebf51096fca319c718504fbc8c9f95d489f8d5cec578b86cc1f35c9b52703f34df
-
SSDEEP
12288:1rJRms3mWTeMq9sheBapywdMj4XXhok4LaTGrowCYWRuWdLUdCZNxxm:zR3mqeMPeBapy4y4Bok4L6vwUBTjxm
Malware Config
Signatures
Files
-
7807366a0a33259e276780e32b82d1b55c7636053c0ebd09317a91b395c36c4c.exe windows x86
adedd6cf3191d00e164d995908921f6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterWindowMessageW
GetMessageExtraInfo
GetDesktopWindow
TranslateMDISysAccel
IsDialogMessage
GetDoubleClickTime
DdeCreateStringHandleW
GetTitleBarInfo
CreateAcceleratorTableW
VkKeyScanA
RedrawWindow
CharPrevW
InsertMenuA
CharLowerBuffA
SetMessageExtraInfo
LoadMenuIndirectW
WindowFromDC
GetUserObjectSecurity
DefWindowProcA
GetLastActivePopup
CreateWindowExW
CreateIconFromResourceEx
CharLowerBuffW
MessageBoxW
PeekMessageA
GetWindowRect
DdeConnectList
RegisterClassExA
ShowWindow
GetClassNameA
InsertMenuW
RegisterClassA
OpenInputDesktop
DestroyWindow
SetCaretPos
UnregisterClassW
DdeClientTransaction
BroadcastSystemMessageA
GetCursor
kernel32
LeaveCriticalSection
HeapSize
GlobalUnfix
GetLocaleInfoW
GetOEMCP
ReadFile
DeleteCriticalSection
GetConsoleCP
SetStdHandle
FreeResource
GetEnvironmentStringsW
SetConsoleCP
GetStartupInfoW
GetLogicalDrives
GetCurrentProcess
VirtualQuery
GetModuleFileNameA
GetUserDefaultLCID
LCMapStringW
SetUnhandledExceptionFilter
GetCurrentThread
FreeEnvironmentStringsW
GetCPInfo
ResetEvent
LCMapStringA
EnterCriticalSection
LoadLibraryA
SetThreadLocale
GetStringTypeW
CreateFileA
GetStdHandle
OpenMutexA
VirtualFree
CreateNamedPipeW
HeapFree
GetLocaleInfoA
VirtualAlloc
GetCurrentThreadId
SetCriticalSectionSpinCount
GetConsoleOutputCP
GetSystemTimeAsFileTime
Sleep
UnhandledExceptionFilter
GetFileType
OpenEventW
GetCurrentProcessId
EnumSystemLocalesA
InterlockedExchange
IsValidCodePage
GetModuleHandleA
GetVersionExW
SetEnvironmentVariableA
IsDebuggerPresent
WriteConsoleW
InterlockedDecrement
FlushFileBuffers
GetCommandLineW
HeapCreate
SetHandleCount
FreeLibrary
IsValidLocale
GetTickCount
GetTimeZoneInformation
HeapAlloc
GetStringTypeA
SetConsoleCtrlHandler
SetTimeZoneInformation
TerminateProcess
SetLastError
HeapReAlloc
WriteConsoleA
lstrcat
HeapDestroy
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
TlsAlloc
CompareStringA
CompareStringW
RtlUnwind
GetLastError
GetTimeFormatA
SetFilePointer
WriteProfileStringW
CloseHandle
GetCommandLineA
MultiByteToWideChar
GetConsoleMode
GetStartupInfoA
InterlockedIncrement
GetModuleHandleW
WideCharToMultiByte
ReadConsoleW
GetACP
ExitProcess
WriteFile
CreateRemoteThread
GetVolumeInformationA
GetModuleFileNameW
TlsSetValue
GetDateFormatA
CreateMutexA
TlsGetValue
TlsFree
GetProcAddress
comctl32
ImageList_SetFlags
ImageList_Add
ImageList_Remove
DestroyPropertySheetPage
MakeDragList
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_DragEnter
ImageList_GetDragImage
ImageList_LoadImageW
DrawInsert
ImageList_Duplicate
CreatePropertySheetPage
CreatePropertySheetPageA
ImageList_EndDrag
InitCommonControlsEx
ImageList_AddMasked
ImageList_DrawEx
CreateMappedBitmap
ImageList_DragLeave
ImageList_SetFilter
ImageList_ReplaceIcon
comdlg32
ChooseColorA
ReplaceTextW
PrintDlgA
GetOpenFileNameW
advapi32
RegEnumValueA
RegQueryInfoKeyA
LookupPrivilegeValueA
RegDeleteValueW
RegQueryValueA
RegCreateKeyExW
RegQueryMultipleValuesW
wininet
FtpOpenFileA
FindFirstUrlCacheEntryW
FtpCommandA
SetUrlCacheHeaderData
InternetSetCookieW
Sections
.text Size: 172KB - Virtual size: 170KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 412KB - Virtual size: 410KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ