Static task
static1
Behavioral task
behavioral1
Sample
01d67eb4d2ff159013f87ae485b7e3d08e655f37283b128ad993cac0dfdb1874.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
01d67eb4d2ff159013f87ae485b7e3d08e655f37283b128ad993cac0dfdb1874.exe
Resource
win10v2004-20220901-en
General
-
Target
01d67eb4d2ff159013f87ae485b7e3d08e655f37283b128ad993cac0dfdb1874
-
Size
476KB
-
MD5
826c0ab765793e85829cc0a7edda407c
-
SHA1
09564c05c6a93e711f2cfb36bf58187acd9e4412
-
SHA256
01d67eb4d2ff159013f87ae485b7e3d08e655f37283b128ad993cac0dfdb1874
-
SHA512
856e24a5aa76435822b75c754360fce7d5962a073d9d9a0685e9b9e3048bef44ca2aa4b62c7856d49217ca381015e8038675adbc0a0e39418c023f13c261c737
-
SSDEEP
6144:kMOeJfERBNOHbOxdlhRzMbSGWl2LHdiisGh+tP32x70iNY/st:kMDJf2dlXCCcdiESGoiN
Malware Config
Signatures
Files
-
01d67eb4d2ff159013f87ae485b7e3d08e655f37283b128ad993cac0dfdb1874.exe windows x86
49664d88001335cde3e09cdca91ef3f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
PolyBezierTo
GetClipRgn
DeleteDC
GetDeviceCaps
GetTextMetricsA
GetRgnBox
CreateHalftonePalette
GetPixel
TextOutA
FlattenPath
SelectObject
GetFontData
GetPath
CreateRoundRectRgn
CreateDCA
ExtSelectClipRgn
ExtFloodFill
GetViewportExtEx
GetObjectA
GetBkColor
PlayMetaFile
DeleteObject
SetTextColor
mfc42
ord1576
comctl32
ImageList_Add
_TrackMouseEvent
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_Create
ImageList_LoadImageA
ord17
ImageList_AddMasked
ImageList_GetImageInfo
ImageList_GetIcon
ImageList_GetIconSize
DestroyPropertySheetPage
InitCommonControlsEx
ImageList_Draw
ImageList_Destroy
PropertySheetA
user32
PostQuitMessage
RegisterClassA
wsprintfA
LoadImageA
GetMenuItemInfoA
GetClassNameA
RegisterClassExA
GetCursorPos
DispatchMessageA
EnumChildWindows
ShowWindow
GetParent
FillRect
GetWindowTextA
LoadCursorA
LoadIconA
BeginPaint
GetSystemMetrics
GetForegroundWindow
TrackPopupMenuEx
FrameRect
GetMessageA
DestroyIcon
LoadBitmapA
CreateWindowExA
DestroyWindow
EndPaint
DefWindowProcA
MessageBoxA
kernel32
SetEnvironmentVariableA
FreeEnvironmentStringsW
VirtualQuery
RtlUnwind
TlsGetValue
UnhandledExceptionFilter
GetConsoleCP
VirtualFree
LCMapStringA
Sleep
WriteFile
GetEnvironmentStringsW
CloseHandle
VirtualAlloc
LeaveCriticalSection
GetDateFormatA
ReadFile
GetTimeZoneInformation
GetTickCount
SetLastError
SetUnhandledExceptionFilter
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
ExitProcess
SetStdHandle
HeapAlloc
GetProcAddress
LCMapStringW
SetHandleCount
GetTimeFormatA
RaiseException
GetCurrentProcessId
TlsSetValue
InterlockedExchange
GetStringTypeA
TerminateProcess
GetStartupInfoA
GetACP
QueryPerformanceCounter
CreateMutexA
GetConsoleOutputCP
InterlockedIncrement
CreateFileA
IsDebuggerPresent
GetStdHandle
GetOEMCP
GetStringTypeW
GetLastError
FreeEnvironmentStringsA
HeapFree
HeapCreate
GetModuleHandleA
WriteConsoleA
GetCurrentProcess
IsValidCodePage
SetFilePointer
WriteConsoleW
DeleteCriticalSection
CompareStringW
GetSystemTimeAsFileTime
TlsFree
GetFileType
HeapReAlloc
GetModuleHandleW
WideCharToMultiByte
GetCurrentThreadId
HeapSize
GetModuleFileNameA
GetConsoleMode
TlsAlloc
LoadLibraryA
FlushFileBuffers
MultiByteToWideChar
CompareStringA
GetCPInfo
GetCommandLineA
GetLocaleInfoA
GetEnvironmentStrings
EnterCriticalSection
shell32
SHGetPathFromIDListA
ShellExecuteW
oleaut32
LoadTypeLi
Sections
.text Size: 112KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 268KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ