Static task
static1
Behavioral task
behavioral1
Sample
1464ba81853efc9a9f4331e278c5dd85d67016f8b436253afff58ff1c1f0b195.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1464ba81853efc9a9f4331e278c5dd85d67016f8b436253afff58ff1c1f0b195.exe
Resource
win10v2004-20220812-en
General
-
Target
1464ba81853efc9a9f4331e278c5dd85d67016f8b436253afff58ff1c1f0b195
-
Size
160KB
-
MD5
1151d92f3e85ca1b70e2e53a4f869648
-
SHA1
384830030650599a69349bea87ca8a354967a6bc
-
SHA256
1464ba81853efc9a9f4331e278c5dd85d67016f8b436253afff58ff1c1f0b195
-
SHA512
593a38c9d44422e3c28fb3181617b3b65bcc3141bf98c9fa1bf6abd3e99a51f7fd7c1cb6f3684842a55094d52f5b6507b00800e1dee768b2fbfd3da64b5b44b9
-
SSDEEP
3072:IuGUqO+e72GgeONo0ypAxHUugTcKWmisKCwFNLK/ycTHdEbQoD3EX38jaF:uO6Gc3yKHUug5ADHYNHdo3EX38j
Malware Config
Signatures
Files
-
1464ba81853efc9a9f4331e278c5dd85d67016f8b436253afff58ff1c1f0b195.exe windows x86
6932beaac6362f4332911c2a4479a514
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsSystemResumeAutomatic
CompareStringW
GetLocalTime
LeaveCriticalSection
RaiseException
GetNumberFormatW
GetWriteWatch
FindResourceA
GetStringTypeA
DefineDosDeviceA
FindFirstVolumeMountPointA
CommConfigDialogW
IsProcessorFeaturePresent
lstrcatW
lstrcatA
QueueUserWorkItem
_lwrite
SetProcessAffinityMask
BackupRead
SystemTimeToTzSpecificLocalTime
Sleep
WaitCommEvent
FoldStringW
GetVolumeNameForVolumeMountPointA
EnumResourceLanguagesW
OutputDebugStringA
ConvertDefaultLocale
lstrcmpA
CreateHardLinkA
PostQueuedCompletionStatus
GetVolumeNameForVolumeMountPointW
GetProfileStringW
GetTempFileNameA
CreateDirectoryA
WritePrivateProfileStringW
GetCalendarInfoA
SearchPathA
WaitForSingleObjectEx
FileTimeToLocalFileTime
GetStringTypeW
EnterCriticalSection
InitializeCriticalSection
FreeEnvironmentStringsA
ExitProcess
GetExitCodeProcess
CreateMutexW
InterlockedExchangeAdd
CreateMailslotW
InterlockedDecrement
user32
GetMessageTime
GetWindow
SetWindowPos
OpenDesktopW
IsWindowEnabled
GetMenu
GetSysColorBrush
MessageBoxIndirectA
FrameRect
GetThreadDesktop
DdeFreeDataHandle
GetIconInfo
SetCursor
GetDlgItemTextA
EnumDisplayMonitors
SetMenuItemBitmaps
IsDialogMessageW
TrackMouseEvent
DdeConnect
SetPropW
CharUpperBuffW
WaitForInputIdle
DlgDirListW
DestroyIcon
CopyIcon
GetClientRect
DdeAbandonTransaction
DdeNameService
SendIMEMessageExA
SetSystemCursor
DialogBoxIndirectParamW
GetProcessWindowStation
CharPrevA
UnionRect
GetUserObjectInformationW
GetUserObjectInformationA
SetDeskWallpaper
DispatchMessageW
GetWindowModuleFileNameA
FindWindowW
DdeUnaccessData
RegisterWindowMessageW
LoadBitmapW
IsClipboardFormatAvailable
MessageBoxA
ChangeClipboardChain
DeregisterShellHookWindow
CharPrevW
IMPSetIMEA
GetQueueStatus
ExitWindowsEx
AdjustWindowRect
LoadCursorA
PostMessageA
SwapMouseButton
OemToCharA
GetKeyboardLayoutList
OemToCharBuffA
DefDlgProcW
CreateIconIndirect
UpdateWindow
SendMessageW
LoadAcceleratorsW
GetPropW
GetClassInfoExW
GetWindowRgn
MonitorFromPoint
RedrawWindow
BroadcastSystemMessageW
ChangeMenuW
GetNextDlgGroupItem
IsCharAlphaNumericW
GetKeyboardLayout
GetClassLongA
UnpackDDElParam
TrackPopupMenuEx
GetCaretBlinkTime
ReplyMessage
PostThreadMessageW
ShowCaret
GetMenuItemID
CharNextExA
GetDlgItemTextW
RegisterDeviceNotificationW
shell32
SHGetSettings
SHGetFolderLocation
SHGetIconOverlayIndexA
SheChangeDirExW
ExtractIconW
InternalExtractIconListW
winspool.drv
AddPrintProcessorA
Sections
.text Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE