Static task
static1
Behavioral task
behavioral1
Sample
86068edfe1a8841c4078340ab3a34768c7576e694c0b2cde28a90f40a345cc78.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
86068edfe1a8841c4078340ab3a34768c7576e694c0b2cde28a90f40a345cc78.exe
Resource
win10v2004-20220812-en
General
-
Target
86068edfe1a8841c4078340ab3a34768c7576e694c0b2cde28a90f40a345cc78
-
Size
333KB
-
MD5
8310a44abbad02f1a0d653949873e03e
-
SHA1
4fee1116cf11c2f0de78c0671e3fa262555dc35d
-
SHA256
86068edfe1a8841c4078340ab3a34768c7576e694c0b2cde28a90f40a345cc78
-
SHA512
b9bbf42f4edfcfe87842badf7125e2c022a462284eb538fe95cb4ee7c8c7ff4273fca222d8c5387fa74daefa0b8357ede4e2666b5ffb58d51461a3fa9eb20044
-
SSDEEP
6144:zKtEy9uyjy+jLFKg5J6xKkYTHQvzyEw847Hdy68VYzlLh/+Syf1qpU:zKHuoFFTUKlUkbdy64YzlkS8T
Malware Config
Signatures
Files
-
86068edfe1a8841c4078340ab3a34768c7576e694c0b2cde28a90f40a345cc78.exe windows x86
a9907b154071c8744e7550fb1592be14
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetForegroundWindow
PostQuitMessage
IsWindow
GetDC
DestroyWindow
GetParent
UpdateWindow
ShowWindow
EnableWindow
TranslateMessage
LoadStringA
RegisterClassA
GetSubMenu
SetTimer
FillRect
DispatchMessageA
ReleaseDC
EndPaint
SetFocus
DefWindowProcA
GetSystemMetrics
GetWindowRect
PostMessageA
ReleaseCapture
SetWindowLongA
SetWindowTextA
GetDlgItem
ClientToScreen
LoadCursorA
GetDesktopWindow
EndDialog
MoveWindow
MessageBoxA
GetSysColor
GetKeyState
SystemParametersInfoA
IsWindowVisible
GetFocus
wsprintfA
GetClientRect
CallWindowProcA
SetCursor
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
kernel32
GetSystemDefaultLCID
GetSystemDefaultLangID
GetCommandLineW
GetUserDefaultLCID
GetStdHandle
GetConsoleOutputCP
ReleaseMutex
GetFileAttributesA
WaitForSingleObject
LockResource
FindFirstFileW
GetUserDefaultLangID
GetFileAttributesW
GetLocalTime
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetConsoleMode
GetLocaleInfoA
LocalAlloc
SetErrorMode
FreeEnvironmentStringsW
SetStdHandle
WideCharToMultiByte
GetStringTypeA
InterlockedExchange
WriteFile
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
LoadResource
InitializeCriticalSection
LocalFree
GetOEMCP
HeapDestroy
CompareStringW
VirtualAlloc
FindResourceA
Sleep
VirtualFree
UnmapViewOfFile
IsValidCodePage
CreateProcessA
GetVersion
GetACP
CloseHandle
FindFirstFileA
SetEndOfFile
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
GetCommandLineA
HeapSize
GetCPInfo
GetCurrentProcessId
GetEnvironmentStrings
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
LCMapStringA
GetModuleHandleW
GlobalFree
lstrlenA
HeapCreate
LCMapStringW
GetLastError
LeaveCriticalSection
HeapAlloc
CreateFileA
TlsSetValue
GetFileType
CreateFileW
GetTimeZoneInformation
GlobalLock
DuplicateHandle
FindNextFileA
CompareStringA
FindNextFileW
lstrcmpA
FindClose
GetSystemInfo
GetProcAddress
DeleteFileA
GetFileSize
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
GetCurrentThreadId
CreateEventW
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
SetUnhandledExceptionFilter
SetFileAttributesA
CreateThread
GetModuleHandleA
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
GetPrivateProfileStringA
GetModuleFileNameA
FlushFileBuffers
ExitProcess
IsDebuggerPresent
VirtualProtect
GetModuleFileNameW
InterlockedDecrement
SetLastError
GetCurrentThread
FormatMessageA
TlsGetValue
GetFullPathNameA
gdi32
GetDeviceCaps
DeleteDC
SetBkColor
SetTextColor
SelectObject
oleaut32
SysFreeString
VariantInit
SysAllocString
SysAllocStringLen
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ