Static task
static1
Behavioral task
behavioral1
Sample
24da8a9e4cd4e7cbd4e6f0c8c418cf1b4c2511e4d866401c8e671e6b5e88aebb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
24da8a9e4cd4e7cbd4e6f0c8c418cf1b4c2511e4d866401c8e671e6b5e88aebb.exe
Resource
win10v2004-20220812-en
General
-
Target
24da8a9e4cd4e7cbd4e6f0c8c418cf1b4c2511e4d866401c8e671e6b5e88aebb
-
Size
187KB
-
MD5
84172e95ddb34b722567fa4dc80b4d65
-
SHA1
e1ea6b154fdc9cea283634f60046c6b3805d0099
-
SHA256
24da8a9e4cd4e7cbd4e6f0c8c418cf1b4c2511e4d866401c8e671e6b5e88aebb
-
SHA512
590455be99a8056471df4c71bc67726690af93b467c5a89bd4521af341655a769f994d15168f1ee755b83bc6a73586ea8c6726e6f93f1ef9363467c4d34aa4cb
-
SSDEEP
3072:9tupgvVV7ipC+QBe+LXJZq+ITnDHOnI5g3yahf+uBKK6JIpAY9l:9tupgvnGpCi+LXJdLcg3zf+uwJdY9
Malware Config
Signatures
Files
-
24da8a9e4cd4e7cbd4e6f0c8c418cf1b4c2511e4d866401c8e671e6b5e88aebb.exe windows x86
650c660d24efce0471cbece80fc52bdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueW
VerQueryValueA
kernel32
GetFileSize
GetLongPathNameW
DisableThreadLibraryCalls
UnmapViewOfFile
LocalAlloc
CreateFileA
ReadFile
GlobalFree
GetProcessHandleCount
Sleep
MapViewOfFile
WideCharToMultiByte
SetFilePointer
EnumResourceTypesA
GetTickCount
GlobalAlloc
CreateFileW
GetFileAttributesA
WriteFile
GlobalSize
LocalFree
CreateFileMappingA
CloseHandle
ole32
CoTaskMemRealloc
CoSetProxyBlanket
StgIsStorageFile
GetRunningObjectTable
CreateItemMoniker
CoGetClassObject
CoTaskMemAlloc
CreateBindCtx
BindMoniker
OleLockRunning
CoTaskMemFree
CreateStreamOnHGlobal
StringFromGUID2
StgCreateDocfile
OleUninitialize
StgOpenStorage
CoInitializeSecurity
CoCreateInstance
CoInitialize
OleInitialize
CLSIDFromProgID
CoUninitialize
CLSIDFromString
gdi32
BitBlt
CreateDIBSection
ExtEscape
CreateDIBitmap
GetDeviceCaps
SelectObject
GetDIBits
SelectPalette
CreateCompatibleBitmap
CreateFontA
DeleteDC
RealizePalette
GetObjectA
CreateSolidBrush
GetStockObject
SetStretchBltMode
CreateCompatibleDC
DeleteObject
StretchDIBits
SetBkMode
setupapi
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
shlwapi
PathFileExistsW
PathCombineW
wininet
InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle
user32
GetQueueStatus
DestroyWindow
PostMessageA
GetWindow
ReleaseCapture
IsWindow
wsprintfA
DispatchMessageA
ReleaseDC
GetWindowTextLengthA
RegisterWindowMessageA
IsChild
GetActiveWindow
GetClientRect
GetClassInfoExA
CharNextA
EqualRect
SendMessageTimeoutA
GetFocus
SetTimer
wvsprintfA
FindWindowA
SendMessageA
EndPaint
RedrawWindow
CreateAcceleratorTableA
GetWindowTextA
SetWindowLongA
GetWindowRect
CreateDialogParamA
FillRect
UnregisterClassA
MoveWindow
GetWindowLongA
EnumDisplayDevicesA
SetRect
GetDC
SendNotifyMessageA
CopyRect
GetDlgItem
InvalidateRect
LoadCursorA
GetClassNameA
GetSysColor
DestroyAcceleratorTable
SetWindowTextA
KillTimer
CreateWindowExA
ShowWindow
InvalidateRgn
DefWindowProcA
SetParent
RegisterClassExA
GetDesktopWindow
GetParent
SetCapture
PeekMessageA
MsgWaitForMultipleObjects
SetFocus
CallWindowProcA
PostThreadMessageA
DrawTextA
BeginPaint
SetWindowPos
shell32
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
advapi32
CryptHashData
RegQueryValueExA
CryptAcquireContextA
CryptGetHashParam
RegDeleteValueA
RegSetValueExA
CryptEncrypt
RegEnumKeyExA
RegCreateKeyExA
CryptDestroyKey
CryptImportKey
CryptDestroyHash
RegEnumValueA
RegOpenKeyExA
RegQueryInfoKeyA
CryptReleaseContext
CryptCreateHash
RegCloseKey
RegDeleteKeyA
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ