Static task
static1
Behavioral task
behavioral1
Sample
905dcf01f670b276343f7a9a0bd22541a6a4c931b78f755ee2c831633b770722.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
905dcf01f670b276343f7a9a0bd22541a6a4c931b78f755ee2c831633b770722.exe
Resource
win10v2004-20220812-en
General
-
Target
905dcf01f670b276343f7a9a0bd22541a6a4c931b78f755ee2c831633b770722
-
Size
316KB
-
MD5
81f85e11dc4e3421840b8ac25a13eb40
-
SHA1
b8447176bcefed1f6db2b70298f42044c66bc96e
-
SHA256
905dcf01f670b276343f7a9a0bd22541a6a4c931b78f755ee2c831633b770722
-
SHA512
99f014f496b3007499243c490bf3b94933b38fdff10041484f94bfecab0175d28b7de4c9f05eaf0785238ed12199a4c744d4173ce2872a8952f52eb7f65fe2b7
-
SSDEEP
6144:3GZDU33q5b7HOauKquBekQwi9xmQX5TQLkiXhrLUUz5XW2vZVXcHXLDXeTB8+kPd:3p33q5b7H3qjIykQX5cLkULnNXW2Rgbr
Malware Config
Signatures
Files
-
905dcf01f670b276343f7a9a0bd22541a6a4c931b78f755ee2c831633b770722.exe windows x86
f3c28c664dfce9a2a6a7616732705e4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClipboardData
CreateWindowExA
TranslateMessage
LoadCursorA
DeferWindowPos
SendDlgItemMessageA
EndDeferWindowPos
WindowFromPoint
ShowOwnedPopups
GetSysColor
GetWindowTextLengthA
MessageBoxA
GetWindowRect
DefDlgProcA
DialogBoxParamA
SetForegroundWindow
GetNextDlgTabItem
GetDlgCtrlID
gdi32
EqualRgn
DrawEscape
ExtSelectClipRgn
CopyEnhMetaFileW
FillRgn
GetStockObject
ExcludeClipRect
Arc
AddFontResourceA
GetBkColor
GdiFlush
CreateEllipticRgn
comctl32
ord16
CreatePropertySheetPageW
CreateToolbarEx
ord17
PropertySheetA
ord8
ord5
InitCommonControlsEx
advapi32
BackupEventLogA
OpenBackupEventLogW
RegSetValueA
SetTokenInformation
CloseEventLog
RegCloseKey
GetOldestEventLogRecord
RegQueryInfoKeyA
RegQueryValueA
shlwapi
StrStrA
StrChrW
StrRChrIW
StrCSpnW
StrChrA
kernel32
GlobalUnlock
VirtualLock
GetTimeFormatA
SetThreadLocale
VirtualQuery
LocalHandle
LocalSize
ResetEvent
GlobalHandle
GetSystemDefaultLCID
GetACP
ReleaseSemaphore
WritePrivateProfileStringA
GetStartupInfoA
GetModuleHandleA
GetProcAddress
VirtualAllocEx
IsBadStringPtrA
netapi32
NetGroupAddUser
NetAlertRaiseEx
NetConfigGet
NetConfigSet
NetFileClose
NetGroupAdd
NetConnectionEnum
Netbios
NetGetAnyDCName
NetAuditClear
NetAuditRead
NetErrorLogRead
NetAuditWrite
msvcrt
_pctype
_controlfp
_isctype
__mb_cur_max
perror
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 306KB - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ