Static task
static1
Behavioral task
behavioral1
Sample
daae671fc4844be0315fed3cb071522c4106055d17b63b4f7d92d7eb2eb60ae6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
daae671fc4844be0315fed3cb071522c4106055d17b63b4f7d92d7eb2eb60ae6.exe
Resource
win10v2004-20220812-en
General
-
Target
daae671fc4844be0315fed3cb071522c4106055d17b63b4f7d92d7eb2eb60ae6
-
Size
159KB
-
MD5
825908b64567c3cda1380b337001b2bd
-
SHA1
fe520f46eeeade9c22a586999a80c73b43dfbe6b
-
SHA256
daae671fc4844be0315fed3cb071522c4106055d17b63b4f7d92d7eb2eb60ae6
-
SHA512
9767dc73be89daacfb6bb92affccf6a7286e7f9ce4553c40794985520ddb95a68a23db4f65206838e00f829fd955f60ab2351414b3757dcc8e3f6d9fec125bc8
-
SSDEEP
3072:aq6K1o/+YEZIC2B5ljq/jZ6vnvu7/rlDu6E+MTh4VuamYbZFMJgRajzhmm7b/t:3UvnvQzkNd94VuPgZFMqAR
Malware Config
Signatures
Files
-
daae671fc4844be0315fed3cb071522c4106055d17b63b4f7d92d7eb2eb60ae6.exe windows x86
958f4695525cc87d28ce7928d0943571
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetSysColor
GetFocus
GetDesktopWindow
InsertMenuA
RegisterClassA
GetScrollInfo
SetRect
LoadIconA
LoadCursorA
WaitMessage
ClientToScreen
SetMenu
GetSysColorBrush
UpdateWindow
SystemParametersInfoA
GetSystemMetrics
SetWindowLongA
GetKeyState
SetWindowsHookExA
SendMessageA
CreateWindowExA
FindWindowA
GetIconInfo
GetCursorPos
SetActiveWindow
FillRect
EmptyClipboard
ScreenToClient
EnableWindow
kernel32
WideCharToMultiByte
GetTempPathA
GetEnvironmentStrings
GetUserDefaultLangID
GetACP
GetStdHandle
SetHandleCount
GetSystemDirectoryA
GetVersionExA
VirtualProtect
InterlockedDecrement
GetFileAttributesW
lstrcmpA
IsValidCodePage
WaitForMultipleObjects
GetFileTime
IsDBCSLeadByte
GetModuleHandleW
GetVersion
GetCurrentProcess
GlobalFree
RaiseException
SetLastError
IsBadReadPtr
SystemTimeToFileTime
GetEnvironmentVariableA
GetStringTypeA
LCMapStringA
GetSystemTimeAsFileTime
GetFullPathNameA
GetModuleHandleA
CreateDirectoryA
msvcrt
__getmainargs
signal
strstr
_iob
_write
_exit
memset
atexit
_except_handler3
__p__commode
_errno
_setmode
_initterm
__dllonexit
memmove
__p__fmode
_controlfp
memcpy
_vsnprintf
realloc
strncmp
__set_app_type
_adjust_fdiv
_XcptFilter
fread
__setusermatherr
__p___initenv
advapi32
RegOpenKeyA
EqualSid
AdjustTokenPrivileges
FreeSid
RegCreateKeyA
RegDeleteValueA
CryptGenRandom
SetSecurityDescriptorDacl
AddAccessAllowedAce
RegSetValueExW
RegEnumKeyExA
InitializeSecurityDescriptor
RegCreateKeyExA
CryptAcquireContextA
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExA
RegDeleteValueW
QueryServiceStatus
RegQueryInfoKeyA
GetLengthSid
OpenThreadToken
OpenServiceA
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ