Static task
static1
Behavioral task
behavioral1
Sample
63b75fc35496c59687a82832bb1ecdea895952314cab1729df8ec1ce1caa6f0b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
63b75fc35496c59687a82832bb1ecdea895952314cab1729df8ec1ce1caa6f0b.exe
Resource
win10v2004-20220901-en
General
-
Target
63b75fc35496c59687a82832bb1ecdea895952314cab1729df8ec1ce1caa6f0b
-
Size
20KB
-
MD5
936fe4d1a5ac471f54f0a3db2f30bbff
-
SHA1
04af252cca6c9faef15e39707fb5f7158f15d588
-
SHA256
63b75fc35496c59687a82832bb1ecdea895952314cab1729df8ec1ce1caa6f0b
-
SHA512
4afee605480421ca602f6d61eb438c83deb508c22938629cb892a024f7f50c5c95ab18b79fa90585dd4c07112f9bdbec8d748a2f2100c735143b3155972f7b30
-
SSDEEP
384:SZruJmJWUo+HLuf7fubkNyaih3zWJvZ8oobpSQzURK:VYJrLufabkcaihivtdQ
Malware Config
Signatures
Files
-
63b75fc35496c59687a82832bb1ecdea895952314cab1729df8ec1ce1caa6f0b.exe windows x86
05db11491da9ac08b7d4edee102ec453
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDlgItem
SendDlgItemMessageA
wsprintfA
FindWindowA
CheckRadioButton
EnableWindow
SetFocus
SetDlgItemTextA
GetDC
DispatchMessageA
ReleaseDC
DefWindowProcA
PostQuitMessage
DialogBoxParamA
MessageBoxA
DestroyWindow
LoadIconA
LoadCursorA
SetForegroundWindow
GetWindow
GetMessageA
TranslateMessage
PostMessageA
IsDlgButtonChecked
LoadStringA
EndDialog
UnregisterClassA
RegisterClassA
CreateWindowExA
gdi32
GetDeviceCaps
CreateFontA
DeleteObject
kernel32
LocalFree
lstrcatA
GetFileAttributesA
CreateProcessA
GetDiskFreeSpaceA
GetWindowsDirectoryA
GetPrivateProfileStringA
lstrlenA
FindResourceA
LoadResource
LockResource
LocalAlloc
MulDiv
DeleteFileA
GetModuleHandleA
GetCommandLineA
InterlockedIncrement
InterlockedDecrement
lstrcmpA
lstrcpyA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
SHGetMalloc
SHGetFileInfoA
SHGetPathFromIDList
SHGetSpecialFolderLocation
moscc
InitCustomControls
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 8B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 265B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ