Static task
static1
Behavioral task
behavioral1
Sample
7d6c8b71d8c30faaa6d62834417f3d42547aa73618d58c2870ef3faae0469ec9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7d6c8b71d8c30faaa6d62834417f3d42547aa73618d58c2870ef3faae0469ec9.exe
Resource
win10v2004-20220812-en
General
-
Target
7d6c8b71d8c30faaa6d62834417f3d42547aa73618d58c2870ef3faae0469ec9
-
Size
159KB
-
MD5
0c888933fb97dd16248beaee2b7430f0
-
SHA1
b6778b0af17d7089f2d047ec0dbec4ada1c14090
-
SHA256
7d6c8b71d8c30faaa6d62834417f3d42547aa73618d58c2870ef3faae0469ec9
-
SHA512
52f81a3bb654058a5b87e28616f3dffa5d923ffd10a08aca15e4dc1a4681628f6c86072f061d080649c5ffa18e50865a6f378f13558d7de3c7d95f845d32b9a3
-
SSDEEP
3072:Z4BhIMcwhDfr1epzvlMw4d45Z7Iw1lY9v+v/GCIbK/SDADeak7dJHB/AC:oYwhDfivTxrThem/SsQLH5AC
Malware Config
Signatures
Files
-
7d6c8b71d8c30faaa6d62834417f3d42547aa73618d58c2870ef3faae0469ec9.exe windows x86
2168924e42703f48f13006228d84cfc2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
LoadResource
SizeofResource
FreeResource
FindResourceA
lstrcatA
lstrlenA
CreateFileA
RtlMoveMemory
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GlobalAlloc
GlobalFree
SetFileAttributesA
DeleteFileA
GetCurrentProcess
GetTempFileNameA
GetWindowsDirectoryA
GetDriveTypeA
GetModuleFileNameA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GetCurrentDirectoryA
CreateProcessA
GetPrivateProfileStringA
GetPrivateProfileIntA
FindClose
FindNextFileA
FindFirstFileA
_lclose
_llseek
_lopen
WaitForSingleObject
GetExitCodeProcess
CloseHandle
lstrcpyA
lstrcmpiA
LoadLibraryA
GetProcAddress
FreeLibrary
GetLastError
FormatMessageA
LocalAlloc
lstrcmpA
LocalFree
GetVersionExA
CreateThread
TerminateThread
FlushFileBuffers
SetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
RemoveDirectoryA
WideCharToMultiByte
GetStringTypeA
SetStdHandle
HeapAlloc
HeapFree
HeapCreate
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetStdHandle
GetFileType
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
LCMapStringW
LCMapStringA
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
LeaveCriticalSection
GetStringTypeW
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
user32
DialogBoxParamA
SetWindowLongA
GetWindowLongA
CallWindowProcA
EndDialog
GetDlgItem
SetForegroundWindow
SetWindowTextA
SetDlgItemTextA
GetDesktopWindow
SendDlgItemMessageA
LoadStringA
GetDlgItemTextA
EnableWindow
MsgWaitForMultipleObjects
PeekMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
CharPrevA
ExitWindowsEx
wsprintfA
CharNextA
ShowWindow
MessageBeep
MessageBoxA
DispatchMessageA
SendMessageA
gdi32
GetDeviceCaps
advapi32
RegDeleteValueA
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegQueryInfoKeyA
comctl32
ord17
Sections
.text Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 213B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ