Static task
static1
Behavioral task
behavioral1
Sample
791eb7f9fbdbd59ed8df9ffcaf343a3887803e16296bc0cb08b3ebc9a18ec724.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
791eb7f9fbdbd59ed8df9ffcaf343a3887803e16296bc0cb08b3ebc9a18ec724.exe
Resource
win10v2004-20220812-en
General
-
Target
791eb7f9fbdbd59ed8df9ffcaf343a3887803e16296bc0cb08b3ebc9a18ec724
-
Size
543KB
-
MD5
729d616180b3f7ad3ddc6a9f0a28ec14
-
SHA1
d0704a6b9e53eefd710b059b455224902f372c26
-
SHA256
791eb7f9fbdbd59ed8df9ffcaf343a3887803e16296bc0cb08b3ebc9a18ec724
-
SHA512
da0a026695b9a1b83516938939ee3e092f8836a16de4293d5d700962dd2e2ebe58bc80aad7f1860917cf2acbb5fe5cfe58daac13a476e0a56199349d72a551de
-
SSDEEP
12288:OA+ILJzvG1md4XHK4NSbbM7a5/hnZJgUSElK:OAB1Gc4a40QUZnbQElK
Malware Config
Signatures
Files
-
791eb7f9fbdbd59ed8df9ffcaf343a3887803e16296bc0cb08b3ebc9a18ec724.exe windows x86
d182ece5fcf62eb8bc0973f8bfd9c81e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetCursorPos
DdeCmpStringHandles
CallMsgFilterW
IsWindowEnabled
CallNextHookEx
ShowWindow
SetDebugErrorLevel
MapVirtualKeyExW
TrackPopupMenuEx
MsgWaitForMultipleObjectsEx
MessageBoxExA
GetKeyState
RegisterClassA
SetCaretPos
BroadcastSystemMessage
DdeInitializeW
CreateWindowStationW
SendMessageTimeoutW
GetWindowContextHelpId
RegisterClassExA
EndTask
GetMenuItemInfoW
GetKeyboardLayoutNameA
GetClipboardOwner
LoadCursorW
ChangeMenuW
DlgDirListComboBoxA
comctl32
DrawInsert
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_SetFlags
ImageList_Add
MakeDragList
ImageList_DrawIndirect
ImageList_SetImageCount
ImageList_DragEnter
CreatePropertySheetPage
ImageList_Write
ImageList_GetImageInfo
ImageList_LoadImage
CreateStatusWindowA
InitCommonControlsEx
ImageList_Destroy
kernel32
FlushFileBuffers
CompareStringW
GetStartupInfoA
VirtualQuery
GetModuleFileNameA
TerminateProcess
GetConsoleCP
SetLastError
UnhandledExceptionFilter
OpenMutexA
EnumSystemLocalesA
HeapReAlloc
SetUnhandledExceptionFilter
TlsAlloc
HeapFree
CreateFileA
VirtualAlloc
EnterCriticalSection
HeapCreate
GetLocaleInfoW
Sleep
TlsSetValue
FoldStringA
DeleteCriticalSection
GetVersionExA
GetConsoleOutputCP
RtlUnwind
HeapAlloc
GetCPInfo
GetProcAddress
CloseHandle
WriteConsoleW
QueryPerformanceCounter
LeaveCriticalSection
GetTickCount
GetACP
GetConsoleMode
MultiByteToWideChar
TlsGetValue
ExitProcess
GetStringTypeA
LCMapStringW
GetDateFormatA
GetEnvironmentStrings
IsValidCodePage
GetProcessHeap
GetTimeZoneInformation
GetCurrentThread
GetUserDefaultLCID
InitializeCriticalSection
IsDebuggerPresent
VirtualFree
TlsFree
GetCommandLineA
InterlockedExchange
InterlockedDecrement
GetEnvironmentStringsW
ReadFile
LCMapStringA
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
SetHandleCount
WriteConsoleA
FreeEnvironmentStringsW
GetOEMCP
CompareStringA
GetStringTypeW
FreeEnvironmentStringsA
ReadConsoleW
GetSystemTimeAsFileTime
CreateMutexA
SetConsoleCtrlHandler
WriteFile
IsValidLocale
GetLastError
GetStdHandle
HeapDestroy
SetEnvironmentVariableA
FreeLibrary
GetFileType
SetStdHandle
WideCharToMultiByte
GetCurrentProcess
InterlockedIncrement
GetTimeFormatA
LoadLibraryA
SetFilePointer
ReadConsoleOutputW
HeapSize
GetLocaleInfoA
shell32
InternalExtractIconListW
SHFreeNameMappings
ShellExecuteW
SHGetSettings
SHChangeNotify
wininet
InternetGetLastResponseInfoA
HttpSendRequestExW
CreateUrlCacheContainerA
UnlockUrlCacheEntryFileW
GetUrlCacheEntryInfoA
gdi32
CreateRectRgnIndirect
ExtSelectClipRgn
AbortDoc
EnumFontFamiliesA
SetDeviceGammaRamp
SetBkColor
CreateDCA
GetRasterizerCaps
DeleteDC
CombineTransform
GetWindowOrgEx
CombineRgn
SetBitmapDimensionEx
GetOutlineTextMetricsW
CreateICA
GetFontLanguageInfo
CreatePolygonRgn
CopyEnhMetaFileW
GetDeviceCaps
SetTextCharacterExtra
Sections
.text Size: 373KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ