Static task
static1
Behavioral task
behavioral1
Sample
7e4b91812428bae6420016911570c0198caba9234ba7433aacc5bb8d6b52a31c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7e4b91812428bae6420016911570c0198caba9234ba7433aacc5bb8d6b52a31c.exe
Resource
win10v2004-20220812-en
General
-
Target
7e4b91812428bae6420016911570c0198caba9234ba7433aacc5bb8d6b52a31c
-
Size
748KB
-
MD5
0cde5a12da2f9dad984ea59697143d03
-
SHA1
b08486039051d7aac18190eae04e2705da2ba601
-
SHA256
7e4b91812428bae6420016911570c0198caba9234ba7433aacc5bb8d6b52a31c
-
SHA512
700f091a5c986c1d3e978c982ae55adc57517af0903a72c908204e15a2aaf4a438680abe90ed18b91e726c350c2d7b74ac6cf185ad565fb1740c96c5dfdc851a
-
SSDEEP
12288:J+TyHiXcNZQT/TaewgpEp5a6mb8z51fvAc+GOmxNco4v84Vv1FFf0elSxtMISmCJ:JIT/fwgpYI1qXwM7c0UvH9gxtMIdiL
Malware Config
Signatures
Files
-
7e4b91812428bae6420016911570c0198caba9234ba7433aacc5bb8d6b52a31c.exe windows x86
9eaf507f35950059e03270d84d93e868
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
malloc
free
memcpy
fopen
fread
fwrite
ftell
fseek
fclose
ferror
time
srand
rand
_strnicmp
strncmp
strncpy
_strdup
strcmp
memmove
strlen
strcpy
strcat
sprintf
fabs
ceil
floor
localtime
mktime
gmtime
kernel32
GetModuleHandleA
HeapCreate
IsDebuggerPresent
HeapDestroy
ExitProcess
LoadLibraryA
FindResourceA
LoadResource
SizeofResource
LockResource
FreeLibrary
SetFileAttributesA
CreateFileA
SetFileTime
CloseHandle
SystemTimeToFileTime
LocalFileTimeToFileTime
HeapAlloc
HeapFree
GetCurrentThreadId
GetCurrentProcessId
InitializeCriticalSection
GetModuleFileNameA
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
CreateProcessA
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
GetEnvironmentVariableA
SetEnvironmentVariableA
SetUnhandledExceptionFilter
Sleep
GetTickCount
GetVersionExA
SetLastError
TlsAlloc
GlobalAlloc
GlobalFree
GetProcAddress
GetDriveTypeA
FindFirstFileA
FindClose
GetFileAttributesA
FindNextFileA
DeleteFileA
RemoveDirectoryA
GetTempPathA
CreateDirectoryA
GetLastError
GetLocalTime
WriteFile
ReadFile
SetFilePointer
GetFileSize
HeapReAlloc
comctl32
InitCommonControls
InitCommonControlsEx
user32
OemToCharA
CharLowerA
MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows
DestroyWindow
SendMessageA
GetWindowRect
ScreenToClient
RedrawWindow
GetWindowLongA
GetIconInfo
SetWindowPos
InvalidateRect
UpdateWindow
ReleaseCapture
BeginPaint
DrawStateA
EndPaint
SetCapture
CallWindowProcA
GetSystemMetrics
CreateWindowExA
SetWindowLongA
GetSysColor
GetSysColorBrush
SetFocus
GetWindowTextLengthA
GetWindowTextA
RemovePropA
DefWindowProcA
SetPropA
GetParent
GetPropA
GetWindow
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
RegisterClassA
AdjustWindowRectEx
GetActiveWindow
ShowWindow
CreateAcceleratorTableA
IsZoomed
IsIconic
PeekMessageA
MsgWaitForMultipleObjects
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
SetCursorPos
LoadImageA
SetCursor
MapWindowPoints
MoveWindow
SystemParametersInfoA
GetKeyState
PostMessageA
GetCursorPos
GetFocus
GetClientRect
FillRect
EnumChildWindows
DefFrameProcA
IsChild
GetClassNameA
DestroyIcon
CreateIconFromResourceEx
CreateIconFromResource
gdi32
GetStockObject
GetObjectType
GetObjectA
DeleteObject
SetBkColor
SetTextColor
CreateSolidBrush
CreateCompatibleDC
SetDIBits
DeleteDC
CreateDIBSection
GetDIBits
SelectObject
BitBlt
CreateBitmap
SetPixel
imagehlp
MakeSureDirectoryPathExists
ole32
CoInitialize
RevokeDragDrop
shell32
ShellExecuteExA
winmm
timeBeginPeriod
timeEndPeriod
Sections
.code Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 622KB - Virtual size: 622KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ