Static task
static1
Behavioral task
behavioral1
Sample
186632f2bd380d2e1fa44ac8d860b7a7e477326184e6a0a23394b2a3c383da7a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
186632f2bd380d2e1fa44ac8d860b7a7e477326184e6a0a23394b2a3c383da7a.exe
Resource
win10v2004-20220901-en
General
-
Target
186632f2bd380d2e1fa44ac8d860b7a7e477326184e6a0a23394b2a3c383da7a
-
Size
406KB
-
MD5
311a05d2bcb00939f401c7df26724e57
-
SHA1
8e708d57886f6a0d0232528f86363e134fa3a05b
-
SHA256
186632f2bd380d2e1fa44ac8d860b7a7e477326184e6a0a23394b2a3c383da7a
-
SHA512
36a11988a01adf6cb2264a254caf45058bb55dd19d6ce9c15cb924485cc21d6abf8f52f7ec323c7e9d268f79f07e607f1f1937922822ddec57f9b9b9f0adef45
-
SSDEEP
6144:w1LEoGyhesAF+jl9hwBuTxjnuqpkG1U8cC6yfx0dOLXM9nTZq8rX/ViRWVQg:Eg/tg9hwo9jnuNEDf6VdOL8bLQI
Malware Config
Signatures
Files
-
186632f2bd380d2e1fa44ac8d860b7a7e477326184e6a0a23394b2a3c383da7a.exe windows x86
ae66daadb7a25a5a21d507d5d39fd925
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msimg32
AlphaBlend
GradientFill
comdlg32
ChooseColorA
ChooseFontA
GetOpenFileNameA
GetSaveFileNameA
user32
CreateWindowExW
CreateWindowExA
keybd_event
WindowFromPoint
WindowFromDC
WinHelpA
WaitMessage
VkKeyScanW
ValidateRect
UpdateLayeredWindow
UpdateWindow
UnregisterHotKey
UnregisterDeviceNotification
UnregisterClassW
UnregisterClassA
UnionRect
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenuEx
TrackPopupMenu
TrackMouseEvent
ToUnicode
ToAscii
SystemParametersInfoW
SystemParametersInfoA
SubtractRect
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCursor
ShowCaret
SetWindowRgn
SetWindowsHookExW
SetWindowsHookExA
SetWindowTextW
SetWindowTextA
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
msasn1
ASN1BERDecBitString
ASN1BERDecBitString2
ASN1BERDecBool
ASN1BERDecChar16String
ASN1BERDecChar32String
glu32
gluBeginCurve
gluBeginPolygon
gluBeginSurface
msdart
??0CCritSec@@QAE@XZ
mapi32
BMAPIAddress
kernel32
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapSize
SetEndOfFile
InterlockedExchange
RtlUnwind
SetFilePointer
SetStdHandle
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapSize
SetEndOfFile
InterlockedExchange
RtlUnwind
SetFilePointer
SetStdHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetTimeZoneInformation
FlushFileBuffers
GetStringTypeW
GetStringTypeA
GetCommandLineA
GetStartupInfoA
GetSystemTimeAsFileTime
DeleteFileA
TerminateProcess
ExitProcess
HeapFree
HeapReAlloc
HeapAlloc
GetDateFormatA
GetTimeFormatA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetLastError
GetLocalTime
GetEnvironmentVariableA
SetCommBreak
_lopen
GetCommState
SetCommState
SetCommTimeouts
ClearCommBreak
CreatePipe
SetHandleInformation
GetCurrentThreadId
OpenProcess
LocalAlloc
LocalFree
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetCurrentProcessId
QueryPerformanceCounter
GlobalMemoryStatus
GetCurrentThread
GetThreadTimes
GetCurrentProcess
GetProcessTimes
GetSystemTime
GetSystemTimeAdjustment
GetSystemDirectoryA
WriteFile
CreateEventA
_lread
WaitForSingleObject
GetOverlappedResult
SetEvent
LoadLibraryA
Sections
.text Size: 512B - Virtual size: 470B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 502KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 396KB - Virtual size: 394KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE