Static task
static1
Behavioral task
behavioral1
Sample
71bdee4689b5db34df39b52bef78aa3cab49ddd526ff642b5e2cf28715e0b515.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
71bdee4689b5db34df39b52bef78aa3cab49ddd526ff642b5e2cf28715e0b515.exe
Resource
win10v2004-20220901-en
General
-
Target
71bdee4689b5db34df39b52bef78aa3cab49ddd526ff642b5e2cf28715e0b515
-
Size
544KB
-
MD5
0f4b01b901cf57b87070f0f2a67b11ba
-
SHA1
4d05596b72fe82c491683721b3cd1ffd5f44e93b
-
SHA256
71bdee4689b5db34df39b52bef78aa3cab49ddd526ff642b5e2cf28715e0b515
-
SHA512
d2076f027727f6de8357b604959fcd734032c22e0f75d25b6f7d8f986cb64ed94547c536bb12e0deaa0687b8bf5f0d568a007f75af20151c5165ceed5c7d8be5
-
SSDEEP
12288:UwmLu6oHQhvTQYkUVFpaNxfdsFD+RmvhFdZOhaEt6:UdlBkGFpKhdervd8X
Malware Config
Signatures
Files
-
71bdee4689b5db34df39b52bef78aa3cab49ddd526ff642b5e2cf28715e0b515.exe windows x86
65c5a195b63220415d8e371051859889
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
DrawStatusTextA
ImageList_Add
ImageList_AddMasked
ImageList_GetDragImage
CreateStatusWindow
CreateToolbar
ImageList_LoadImageW
ImageList_GetFlags
InitCommonControlsEx
CreateStatusWindowA
user32
SetWindowPos
ChildWindowFromPoint
GetDialogBaseUnits
InsertMenuA
SetWindowWord
RegisterClassExA
RegisterClassA
ShowScrollBar
RegisterClipboardFormatA
DialogBoxParamA
EnumWindowStationsW
DdeReconnect
ToAscii
GetKeyboardLayoutList
EnumWindowStationsA
LoadMenuA
GetMenuItemID
CharUpperBuffW
ChangeClipboardChain
GetWindowLongA
ChangeDisplaySettingsExW
advapi32
RegOpenKeyA
GetUserNameA
CryptSignHashA
ReportEventW
RegSaveKeyW
RegConnectRegistryA
CryptGetProvParam
kernel32
HeapAlloc
GetCommandLineW
GetStartupInfoA
CompareStringW
GetOEMCP
GetEnvironmentStrings
GetModuleHandleA
GetDateFormatA
GetCPInfo
GetModuleFileNameA
IsValidLocale
ReadFile
GetTimeFormatA
GetCurrentProcessId
WriteFile
OpenWaitableTimerW
GetProcAddress
UnhandledExceptionFilter
TlsGetValue
MultiByteToWideChar
CompareStringA
EnumSystemLocalesA
LocalShrink
CreateEventA
lstrlenW
RtlUnwind
TlsAlloc
LeaveCriticalSection
HeapSize
EnterCriticalSection
GetUserDefaultLCID
GetTimeZoneInformation
SetStdHandle
ContinueDebugEvent
SetLastError
VirtualAlloc
GetLocaleInfoA
FlushFileBuffers
GetSystemTimeAsFileTime
TlsSetValue
FreeEnvironmentStringsW
IsValidCodePage
FreeResource
FreeEnvironmentStringsA
GetStringTypeW
SetFilePointer
HeapDestroy
WideCharToMultiByte
FindResourceW
VirtualQuery
VirtualProtect
SetEnvironmentVariableA
QueryPerformanceCounter
GetCurrentProcess
HeapReAlloc
VirtualFree
LocalFileTimeToFileTime
IsBadWritePtr
GetStdHandle
GetACP
OpenMutexA
GetStartupInfoW
GetCommandLineA
GetLocaleInfoW
ExitProcess
SetHandleCount
GlobalUnlock
GetVersionExA
GetCurrentThreadId
EnumResourceTypesW
CloseHandle
TlsFree
LCMapStringW
HeapCreate
GetStringTypeA
CreateMutexA
lstrcpyW
GetEnvironmentStringsW
HeapFree
GetSystemInfo
GetFileType
DeleteCriticalSection
InitializeCriticalSection
FreeLibraryAndExitThread
InterlockedExchange
TerminateProcess
LCMapStringA
LoadLibraryA
GetTickCount
WritePrivateProfileStructW
GetModuleFileNameW
GetLastError
GetCurrentThread
Sections
.text Size: 168KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 240KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ