Static task
static1
Behavioral task
behavioral1
Sample
fd798108b5e5e27e026f95c793bce1f2a93d00152c9f3d9e11548725f299a091.exe
Resource
win7-20220901-en
General
-
Target
fd798108b5e5e27e026f95c793bce1f2a93d00152c9f3d9e11548725f299a091
-
Size
415KB
-
MD5
06ef09589c30d58a613fa5e10e478ee0
-
SHA1
920cd0ad8c7714c918a6a0d30b328658b55cd14a
-
SHA256
fd798108b5e5e27e026f95c793bce1f2a93d00152c9f3d9e11548725f299a091
-
SHA512
9aa4b17c47bd1a1076c5d2b6cd37cc5521b06c02027fad024ae4951124801d0768e758fa0a20f7df2ae3072b1e6d21ff6c25bad52e05a1a2ffd4781f93e23231
-
SSDEEP
6144:4hik6xnBRD/9KSLThr4Kdyj7XKUTa8m23d7KJqKWMJcjo+eCyGAtOeCSOE6Jy0dj:WpYBRoIbI7XHgZQKhJgeCm8SP/WjjYjg
Malware Config
Signatures
Files
-
fd798108b5e5e27e026f95c793bce1f2a93d00152c9f3d9e11548725f299a091.exe windows x86
fcd376aae4f5f2a6cb926124bd0387af
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
GetModuleFileNameW
LoadLibraryW
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetUserDefaultLangID
GetSystemDefaultLCID
GetACP
FileTimeToSystemTime
GetLastError
lstrlenW
RaiseException
InterlockedExchange
FreeLibrary
LocalAlloc
LocalFree
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
VirtualProtect
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetUserDefaultLCID
CompareStringW
IsValidLocale
MulDiv
OutputDebugStringA
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
GetVersion
GetFileAttributesW
GetModuleHandleW
VirtualAlloc
SetLastError
LeaveCriticalSection
EnterCriticalSection
TlsGetValue
VirtualFree
TlsSetValue
DeleteCriticalSection
TlsFree
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetModuleHandleA
GetLocaleInfoA
advapi32
RegOpenKeyExW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegQueryValueExW
RegCloseKey
CryptAcquireContextW
CryptReleaseContext
CryptGenKey
CryptDestroyKey
gdi32
TextOutW
CreateFontIndirectA
GetObjectA
GetTextMetricsA
SelectObject
GetTextExtentPoint32W
CreatePen
SetBkColor
SetTextColor
SetTextAlign
DeleteObject
LineTo
MoveToEx
GetDeviceCaps
user32
SendDlgItemMessageW
GetDlgItem
LoadCursorW
RegisterClassExW
LoadIconW
GetWindowTextW
SetWindowPos
ReleaseDC
SetFocus
GetDC
GetClientRect
GetSysColor
GetFocus
DrawFocusRect
EndPaint
InvalidateRect
DefWindowProcW
GetParent
SendMessageW
LoadStringW
GetClassNameA
SendMessageA
BeginPaint
GetWindowLongA
GetWindowLongW
DrawTextA
DrawTextW
SetRectEmpty
MapWindowPoints
GetWindowRect
MoveWindow
IsWindowVisible
GetWindow
IsWindow
CreateWindowExA
CreateDialogIndirectParamA
DestroyWindow
MapDialogRect
SystemParametersInfoA
LoadBitmapA
GetSystemMetrics
SetWindowTextW
GetDlgCtrlID
EndDialog
DialogBoxParamW
MessageBoxW
IsWindowUnicode
ole32
CoCreateInstance
CoInitialize
CoCreateGuid
CoUninitialize
msvcrt
_controlfp
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_amsg_exit
_wcmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
__CxxFrameHandler
swprintf
memmove
_except_handler3
iswspace
_vsnwprintf
_CxxThrowException
??1type_info@@UAE@XZ
Sections
.text Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 195KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE