Static task
static1
Behavioral task
behavioral1
Sample
7fad3b5e1ed2b992832be9e3e9e576966f5efdbcce302b2cd89b19b0ca2c449c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7fad3b5e1ed2b992832be9e3e9e576966f5efdbcce302b2cd89b19b0ca2c449c.exe
Resource
win10v2004-20220812-en
General
-
Target
7fad3b5e1ed2b992832be9e3e9e576966f5efdbcce302b2cd89b19b0ca2c449c
-
Size
122KB
-
MD5
de36dbe9346d90d06b59c1cf9f5e0f76
-
SHA1
ada82178711735d1ef562b01b53e7144c7838188
-
SHA256
7fad3b5e1ed2b992832be9e3e9e576966f5efdbcce302b2cd89b19b0ca2c449c
-
SHA512
5215c0afe70ccd2386e9bf4447146add5a37147cf985d793ad2a9dfbe91dcb71996be9b53a0a58533d849bd78c361767ab42e3a483422acd846183a2d9ec3de4
-
SSDEEP
3072:dGlvLZVjMUOupdZanrL8dDyRhl0XTXxFQuoFz++GAScQ:2jr7K8R4hl0DfoFz
Malware Config
Signatures
Files
-
7fad3b5e1ed2b992832be9e3e9e576966f5efdbcce302b2cd89b19b0ca2c449c.exe windows x86
0b5959b426821f0a7ae132e874627f76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetCapture
CharUpperBuffA
LoadKeyboardLayoutA
SetTimer
GetMenuState
SetFocus
GetKeyboardState
EndPaint
DrawMenuBar
UpdateWindow
GetSysColor
GetForegroundWindow
IsRectEmpty
LoadCursorA
DestroyCursor
DefWindowProcA
GetActiveWindow
SetWindowPos
GetLastActivePopup
ScrollWindow
SetWindowLongA
GetDesktopWindow
OffsetRect
FindWindowA
CreateIcon
GetKeyboardLayoutNameA
MoveWindow
GetWindowThreadProcessId
DrawAnimatedRects
SetWindowLongW
SetWindowPlacement
LoadBitmapA
GetDCEx
GetKeyboardType
DeleteMenu
ReleaseDC
GetWindowPlacement
SetScrollRange
SetMenuItemInfoA
SendMessageW
SetClipboardData
GetSystemMetrics
OpenClipboard
GetKeyState
DispatchMessageW
PtInRect
CharToOemA
RemovePropA
UnhookWindowsHookEx
TrackPopupMenu
ChildWindowFromPoint
SetWindowsHookExA
ActivateKeyboardLayout
RemoveMenu
DefFrameProcA
FillRect
GetClassNameA
wsprintfA
IsWindow
IsWindowUnicode
IsIconic
BeginPaint
DefMDIChildProcA
IsChild
EnableWindow
CheckMenuItem
EnumThreadWindows
GetClassLongA
GetTopWindow
ole32
CLSIDFromProgID
CoCreateFreeThreadedMarshaler
CoReleaseMarshalData
CoGetContextToken
CreateStreamOnHGlobal
CoUnmarshalInterface
CoGetMalloc
CoCreateGuid
StgCreateDocfileOnILockBytes
WriteClassStm
GetHGlobalFromStream
CLSIDFromProgID
CoCreateInstanceEx
CoGetObjectContext
OleCreateStaticFromData
PropVariantClear
CoUninitialize
CoTaskMemFree
CoRegisterClassObject
kernel32
GetCommandLineA
lstrlenA
VirtualAlloc
LoadLibraryA
GetProcAddress
ExitProcess
GetModuleHandleA
VirtualAllocEx
version
VerFindFileA
VerInstallFileA
comdlg32
ChooseColorA
FindTextA
GetOpenFileNameA
GetSaveFileNameA
FindTextA
oleaut32
RegisterTypeLib
SafeArrayGetUBound
SafeArrayCreate
OleLoadPicture
SysFreeString
RegisterTypeLib
SysAllocStringLen
SysStringLen
VariantCopyInd
shlwapi
SHDeleteKeyA
PathIsDirectoryA
SHGetValueA
shell32
Shell_NotifyIconA
SHGetFolderPathA
SHGetSpecialFolderLocation
SHGetFileInfoA
SHGetDesktopFolder
advapi32
RegDeleteKeyA
comctl32
ImageList_Add
gdi32
GetDCOrgEx
SelectPalette
CreatePalette
CreateDIBSection
SaveDC
GetRgnBox
CreateCompatibleBitmap
CreateDIBitmap
SelectPalette
GetBitmapBits
GetDIBColorTable
SetTextColor
BitBlt
GetDIBits
GetPaletteEntries
Sections
CODE Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ