Static task
static1
Behavioral task
behavioral1
Sample
631e9e7eb03b0ea42924f97872e3aa80acc7dd2bb1038693ac39458515c17b5c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
631e9e7eb03b0ea42924f97872e3aa80acc7dd2bb1038693ac39458515c17b5c.exe
Resource
win10v2004-20220812-en
General
-
Target
631e9e7eb03b0ea42924f97872e3aa80acc7dd2bb1038693ac39458515c17b5c
-
Size
635KB
-
MD5
826d2fa1e84e80cf16d989ce27b1c880
-
SHA1
5822e4feeee3aac38adca5eb9001c0d26eec1b36
-
SHA256
631e9e7eb03b0ea42924f97872e3aa80acc7dd2bb1038693ac39458515c17b5c
-
SHA512
197a66c8d27c4f3e7801199ef077e47c340b0c142ed2932b755396f59c65796acb0c9630f6e223ee05f8663a135c3b0928fc7c83b6249d446560ce638503784d
-
SSDEEP
12288:56gKYC4fbORPRQjlbnHdoqKsYl9uvRu66SDy+v5omf3am23p2ZMslZ:56gKYC4qRPRQjZn2qkvEA66sX5omfduE
Malware Config
Signatures
Files
-
631e9e7eb03b0ea42924f97872e3aa80acc7dd2bb1038693ac39458515c17b5c.exe windows x86
3cac3e1569bb9c532386e51d7854af1c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
FindExecutableA
user32
DefWindowProcA
GetWindowWord
SetWindowWord
BeginPaint
GetSysColor
GetClientRect
SetRect
EndPaint
RegisterClassA
OemToCharBuffA
LoadCursorA
CharUpperBuffA
GetLastActivePopup
ShowWindow
PostMessageA
EnableWindow
DestroyWindow
SetWindowTextA
SetForegroundWindow
SetActiveWindow
SetTimer
KillTimer
DialogBoxIndirectParamA
GetDlgItemTextA
EndDialog
GetSystemMetrics
SetWindowPos
GetKeyState
PeekMessageA
TranslateMessage
DispatchMessageA
GetParent
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItem
InvalidateRect
UpdateWindow
wsprintfA
MessageBoxA
SetCursor
CharNextA
SendMessageA
GetWindowRect
kernel32
CreateDirectoryA
GetVolumeInformationA
_lwrite
SetFileTime
LocalFileTimeToFileTime
RtlUnwind
GetCommandLineA
GetModuleHandleA
ExitProcess
GetACP
GetModuleFileNameA
SetErrorMode
GetVersion
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcmpiA
GetWindowsDirectoryA
GetEnvironmentVariableA
LocalAlloc
LocalFree
GlobalHandle
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
WinExec
_llseek
GetDriveTypeA
_lread
lstrcatA
FindClose
FindFirstFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
_lcreat
lstrlenA
DosDateTimeToFileTime
_lopen
lstrcpyA
_lclose
gdi32
SetTextAlign
SetBkColor
SetTextColor
DeleteObject
GetBkColor
GetTextExtentPoint32A
ExtTextOutA
CreateDCA
GetDeviceCaps
CreateFontIndirectA
DeleteDC
SelectObject
advapi32
RegQueryValueA
comctl32
ord17
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_winzip_ Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ