Static task
static1
Behavioral task
behavioral1
Sample
d35248b9916d22300806e37ffa3450e6374e47baba173d8722b64e97eca998ca.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d35248b9916d22300806e37ffa3450e6374e47baba173d8722b64e97eca998ca.exe
Resource
win10v2004-20220812-en
General
-
Target
d35248b9916d22300806e37ffa3450e6374e47baba173d8722b64e97eca998ca
-
Size
352KB
-
MD5
927880abb699ebb407c37775a0359970
-
SHA1
9e8db4924c6e453c4183ffa5ea4cbbca15c3eb79
-
SHA256
d35248b9916d22300806e37ffa3450e6374e47baba173d8722b64e97eca998ca
-
SHA512
821bee8b984458a082ccd53a7d75d9798019e40a9cca3f384616bb81f6420030cef492ec5f4fb74bbc384400669164b91904df21907d7d08fba1d4a869155396
-
SSDEEP
6144:lmKIgLGMq8/PTxM4F3BatA7DRq84kekmJEZb2I2gOYxE5sWCq6xYOGrz:kKIgLG2PTxM0Ba+XRcPsXnxAsJCOU
Malware Config
Signatures
Files
-
d35248b9916d22300806e37ffa3450e6374e47baba173d8722b64e97eca998ca.exe windows x86
854993a2035be93cb8bc7c8d422533b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_SetFilter
DestroyPropertySheetPage
MakeDragList
ImageList_Duplicate
ImageList_ReplaceIcon
GetEffectiveClientRect
ImageList_GetDragImage
CreateStatusWindow
ImageList_Copy
ImageList_Merge
ImageList_Replace
ImageList_SetImageCount
CreateStatusWindowA
InitCommonControlsEx
CreatePropertySheetPageW
ImageList_LoadImage
ImageList_SetBkColor
ImageList_Remove
ImageList_SetIconSize
DrawStatusTextA
ImageList_SetFlags
ImageList_SetDragCursorImage
kernel32
GetStringTypeA
GlobalAddAtomA
GetSystemTime
QueryPerformanceCounter
LCMapStringA
CreateEventW
GetCurrentThread
SetLastError
SetFileAttributesW
TlsSetValue
WriteProfileStringA
VirtualQuery
GetModuleFileNameA
EnterCriticalSection
IsBadWritePtr
CompareStringW
SetConsoleCtrlHandler
OpenMutexA
SetEnvironmentVariableA
LocalFree
GetProcAddress
ExitProcess
GetStringTypeW
GetLocalTime
GetSystemTimeAsFileTime
WaitNamedPipeW
HeapCreate
ReadFile
MultiByteToWideChar
GetStdHandle
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
GetCurrentProcessId
GetConsoleTitleA
FlushFileBuffers
TlsAlloc
DeleteCriticalSection
WideCharToMultiByte
GetVolumeInformationW
CloseHandle
GetStartupInfoW
LoadLibraryExA
LoadLibraryA
WriteFile
GetThreadSelectorEntry
GetNamedPipeHandleStateA
CommConfigDialogW
InterlockedIncrement
SetPriorityClass
FreeEnvironmentStringsA
ReadConsoleW
GetCommandLineA
GetFileType
SetWaitableTimer
InterlockedDecrement
TlsFree
CreateMutexA
GetACP
SetConsoleActiveScreenBuffer
FreeResource
WaitForMultipleObjectsEx
VirtualFree
CompareStringA
GetUserDefaultLCID
SetHandleCount
GetFileSize
HeapDestroy
MoveFileExA
InterlockedExchange
GetEnvironmentStrings
WaitCommEvent
GetCurrentThreadId
GetLastError
InitializeCriticalSection
SetFilePointer
lstrcpy
RemoveDirectoryA
WritePrivateProfileStringW
LCMapStringW
GetVersion
WriteFileEx
EnumResourceNamesA
EnumResourceTypesW
FreeEnvironmentStringsW
FileTimeToSystemTime
GetTickCount
RtlUnwind
GetConsoleScreenBufferInfo
LoadModule
GetTimeZoneInformation
HeapFree
UnhandledExceptionFilter
GetDriveTypeA
SetStdHandle
GetThreadLocale
GetCPInfo
HeapAlloc
GetCurrentProcess
GetLogicalDrives
TerminateProcess
GetCurrencyFormatW
GetProcessShutdownParameters
EnumResourceNamesW
GetOEMCP
RtlMoveMemory
GetModuleHandleA
TlsGetValue
GetStartupInfoA
GetEnvironmentStringsW
GetCalendarInfoW
ResetEvent
gdi32
GetCharWidthFloatA
DeleteColorSpace
GdiFlush
ExcludeClipRect
GetGraphicsMode
user32
CopyAcceleratorTableW
TranslateAcceleratorW
SwitchDesktop
RegisterClassExA
EnableMenuItem
GetParent
GrayStringW
DdeNameService
GetMenuItemInfoW
GetMessageA
OpenWindowStationA
SetWindowWord
CharToOemBuffA
CharNextA
UnregisterDeviceNotification
EnumPropsExA
IsMenu
ShowScrollBar
GetClassLongA
DestroyWindow
CallMsgFilterW
MapDialogRect
PeekMessageW
EnumDisplaySettingsExA
ExitWindowsEx
SetMessageExtraInfo
SendMessageTimeoutA
DispatchMessageA
SendDlgItemMessageW
IsDlgButtonChecked
DdeGetData
CreateWindowStationA
MessageBoxA
CloseClipboard
GetDlgItemTextW
EnumDisplayMonitors
RegisterClassA
CharNextW
RealChildWindowFromPoint
OffsetRect
UnregisterClassA
GetMenuItemRect
ToUnicode
DrawTextExA
DdeInitializeW
DefFrameProcA
ExcludeUpdateRgn
IsCharUpperA
DialogBoxIndirectParamW
SendMessageW
SystemParametersInfoA
wvsprintfW
GetMenuInfo
GetDlgItem
GrayStringA
SendMessageA
GetPriorityClipboardFormat
DrawAnimatedRects
WINNLSEnableIME
InSendMessage
DefWindowProcW
OpenDesktopW
MessageBoxIndirectA
SetWindowPlacement
LoadAcceleratorsW
CharUpperBuffA
EndDialog
ShowWindow
SetDlgItemTextW
MenuItemFromPoint
ValidateRgn
BeginPaint
IsZoomed
SetWindowTextW
LookupIconIdFromDirectory
LoadKeyboardLayoutW
CreateWindowExW
EnumPropsExW
SetPropW
UnhookWinEvent
ReleaseDC
LoadMenuIndirectA
GetClassInfoA
ModifyMenuW
DdeCreateStringHandleW
DdeConnect
FindWindowW
SendInput
SendDlgItemMessageA
LoadBitmapW
CharPrevExA
SetSysColors
SetShellWindow
FindWindowExA
ActivateKeyboardLayout
DdeFreeDataHandle
Sections
.text Size: 140KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ