Static task
static1
Behavioral task
behavioral1
Sample
d4afd63beaf6be2c1e5c4bd0d99cd1ccb5f6698d81e53e9c47dff96406e1d28e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4afd63beaf6be2c1e5c4bd0d99cd1ccb5f6698d81e53e9c47dff96406e1d28e.exe
Resource
win10v2004-20220812-en
General
-
Target
d4afd63beaf6be2c1e5c4bd0d99cd1ccb5f6698d81e53e9c47dff96406e1d28e
-
Size
156KB
-
MD5
82da3096902b16cbbf15e19322debfd2
-
SHA1
2dfba03afd4e1c70c8b4f1b17b9ff113e8ed97a4
-
SHA256
d4afd63beaf6be2c1e5c4bd0d99cd1ccb5f6698d81e53e9c47dff96406e1d28e
-
SHA512
da47e78aa2bcfe432d419752faa2dc4723768d2312cc64f096523a6110eb235cfb03eaf178cd9872df66cd2a04a0e264ee4ae3c8bdfa0b05e9142c4c48855412
-
SSDEEP
3072:EkbIodF7C5/KJKg75u4EhH0KfpP6n+cT:EaIodFedSolhH7y
Malware Config
Signatures
Files
-
d4afd63beaf6be2c1e5c4bd0d99cd1ccb5f6698d81e53e9c47dff96406e1d28e.exe windows x86
8e97d5f1a39de734c6ec6b5800e848a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
GetVersionExA
GetLastError
CloseHandle
FindFirstFileA
lstrcpyA
GetShortPathNameA
GetModuleFileNameA
LocalFree
LocalAlloc
MulDiv
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FindResourceA
LoadResource
LockResource
FreeResource
FindClose
CreateFileMappingA
lstrcatA
lstrlenA
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
RtlUnwind
GetStringTypeA
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
lstrcmpiA
FreeEnvironmentStringsA
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
UnhandledExceptionFilter
GetStringTypeW
HeapFree
HeapAlloc
VirtualAlloc
LoadLibraryA
LCMapStringA
LCMapStringW
user32
PostQuitMessage
FindWindowA
SetForegroundWindow
MessageBoxA
LoadCursorA
PostMessageA
DestroyIcon
DefWindowProcA
TrackPopupMenu
AppendMenuA
TranslateMessage
DispatchMessageA
DialogBoxParamA
LoadStringA
KillTimer
LoadImageA
RegisterClassA
GetCursorPos
DestroyWindow
LoadIconA
ReleaseDC
GetDC
GetWindowRect
GetDlgItem
PeekMessageA
CreatePopupMenu
SetFocus
SendMessageA
SetTimer
SetDlgItemTextA
EndDialog
GetSystemMetrics
SystemParametersInfoA
GetMessageA
FillRect
DrawTextExA
LoadBitmapA
InvalidateRect
BeginPaint
EndPaint
GetSystemMenu
EnableWindow
CheckDlgButton
SetCursor
SetWindowPos
ChangeDisplaySettingsA
CreateWindowExA
ShowWindow
SendDlgItemMessageA
GetDlgItemTextA
gdi32
GetStockObject
SelectPalette
CreatePalette
DeleteDC
DeleteObject
StretchBlt
SetStretchBltMode
SelectObject
CreateCompatibleDC
GetObjectA
GetDeviceCaps
CreateDCA
SetTextAlign
SetBkColor
SetTextColor
RealizePalette
CreateDIBitmap
CreateSolidBrush
CreateFontIndirectA
advapi32
RegDeleteValueA
RegSetValueExA
RegEnumKeyA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
shell32
Shell_NotifyIconA
ShellExecuteA
comctl32
ord17
winmm
mciSendStringA
midiOutGetNumDevs
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
hhctrl.ocx
ord14
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 947B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hqqtyzc Size: 4KB - Virtual size: 72KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE