Static task
static1
Behavioral task
behavioral1
Sample
d453c0e207b2bb88ad50bdf0b86c5ca6a5784cf731371b45edd70a4e4f177298.exe
Resource
win7-20220901-en
General
-
Target
d453c0e207b2bb88ad50bdf0b86c5ca6a5784cf731371b45edd70a4e4f177298
-
Size
192KB
-
MD5
0cf55c96ca69e99454b63b7324462a81
-
SHA1
341ac7191f435e8c497030e0a2a47a9348c55c8e
-
SHA256
d453c0e207b2bb88ad50bdf0b86c5ca6a5784cf731371b45edd70a4e4f177298
-
SHA512
d9dd54e83cb50a3fdad8ef5576e0019ad9563787abf471ca1a4951c2e2d82b899fa0a63dd1c8b58b7f19a65050e2cf18c5e5c858c82e04536be2e742c59e081e
-
SSDEEP
3072:gO8o6tUhbYFbbkOf1S8ZcXJJyIVAM4faWDIlHR2YYh8XEpq4zSHSIf:gOPhMxkq8X/efaaex2BWXuq4eN
Malware Config
Signatures
Files
-
d453c0e207b2bb88ad50bdf0b86c5ca6a5784cf731371b45edd70a4e4f177298.exe windows x86
7d6a0c86bb789c54a52eae9312277938
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
GetOEMCP
IsBadCodePtr
IsBadReadPtr
SetFilePointer
IsBadWritePtr
HeapReAlloc
VirtualAlloc
LCMapStringW
MultiByteToWideChar
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualFree
HeapCreate
HeapDestroy
SetEndOfFile
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
ExitProcess
SetUnhandledExceptionFilter
DeleteCriticalSection
WriteFile
ReadFile
GetStringTypeA
GetStringTypeW
InterlockedExchange
SetStdHandle
FlushFileBuffers
CreateFileA
InitializeCriticalSection
GetTimeZoneInformation
VirtualProtect
CompareStringA
CompareStringW
lstrcatA
lstrlenA
lstrcmpA
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
GetPrivateProfileStringA
lstrcpynA
CloseHandle
LoadLibraryA
GetModuleFileNameA
GetSystemDirectoryA
GetTickCount
WinExec
GetModuleHandleA
GetProcAddress
Sleep
CreateMutexA
GetLastError
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
FreeLibrary
GetFileType
SetLastError
TlsAlloc
GetACP
GetVersionExA
GetLocaleInfoA
RtlUnwind
WideCharToMultiByte
RaiseException
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
SetEnvironmentVariableA
user32
WinHelpA
MessageBoxA
MapWindowPoints
ChangeDisplaySettingsExA
EnumDisplaySettingsExA
ReleaseDC
KillTimer
PtInRect
GetDlgCtrlID
wsprintfA
GetWindowTextA
EnumWindows
IsWindowVisible
GetWindow
FindWindowExA
LockWindowUpdate
GetClientRect
ShowWindow
EnumChildWindows
PostMessageA
GetClassNameA
GetParent
SetWindowLongA
GetSystemMetrics
FindWindowA
ExitWindowsEx
EnumDisplaySettingsA
EnableWindow
GetDC
BeginPaint
FillRect
EndPaint
DialogBoxParamA
SetTimer
GetDesktopWindow
GetWindowRect
EndDialog
GetDlgItem
SendMessageA
SetWindowPos
SetForegroundWindow
LoadIconA
SendDlgItemMessageA
LoadStringA
SetDlgItemTextA
GetWindowLongA
gdi32
CreateDCA
ExtEscape
GetStockObject
GetObjectA
CreateFontIndirectA
SelectObject
GetTextAlign
SetTextAlign
TextOutA
DeleteObject
DeleteDC
advapi32
RegCreateKeyExA
LookupPrivilegeValueA
RegDeleteValueA
AllocateAndInitializeSid
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
FreeSid
RegQueryValueExA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceConfigA
ChangeServiceConfigA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
AdjustTokenPrivileges
rpcrt4
UuidToStringA
RpcStringFreeA
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
comctl32
PropertySheetA
Sections
.text Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE