Static task
static1
Behavioral task
behavioral1
Sample
924dcbe063f7923ed981a0491c4bd644d9de90ab4bce95db9337172971f4d801.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
924dcbe063f7923ed981a0491c4bd644d9de90ab4bce95db9337172971f4d801.exe
Resource
win10v2004-20220901-en
General
-
Target
924dcbe063f7923ed981a0491c4bd644d9de90ab4bce95db9337172971f4d801
-
Size
476KB
-
MD5
0edbe88303c53820cbed188210f4ee78
-
SHA1
20fb6d6a03912d4e8f80e2bd6ab4d230352a9ad2
-
SHA256
924dcbe063f7923ed981a0491c4bd644d9de90ab4bce95db9337172971f4d801
-
SHA512
8fc951a847282635e39b7da4bc6ee6958334bc3cbdcc302eab63b882aba477944039f651f92a1a12c8b863f844aa3911856723c21e32b5f61d88ba9d648e828e
-
SSDEEP
12288:c/jgIFGAoY6iIxgteCkIRo50NbrvHKZvU:c/jgIFGAoxiIi83IRPNmU
Malware Config
Signatures
Files
-
924dcbe063f7923ed981a0491c4bd644d9de90ab4bce95db9337172971f4d801.exe windows x86
21c40022a10d16f1a7ba423ebca5ef61
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
PropertySheetA
ImageList_BeginDrag
ImageList_GetImageCount
_TrackMouseEvent
kernel32
InterlockedDecrement
HeapDestroy
WideCharToMultiByte
GetConsoleCP
EnumSystemLocalesA
VirtualAlloc
VirtualFree
HeapFree
InterlockedExchange
WriteFile
GetLocaleInfoA
LeaveCriticalSection
GetStringTypeA
RtlUnwind
TlsAlloc
GetACP
GetEnvironmentStrings
GetTickCount
WriteConsoleA
QueryPerformanceCounter
GetLocaleInfoW
SetEnvironmentVariableA
SetUnhandledExceptionFilter
HeapAlloc
DeleteCriticalSection
TerminateProcess
LoadLibraryA
GetProcessHeap
GetFileType
GetVersionExA
HeapReAlloc
MultiByteToWideChar
GetSystemTimeAsFileTime
GetDateFormatA
CloseHandle
WriteConsoleW
GetStringTypeW
GetConsoleMode
TlsFree
TlsGetValue
LCMapStringA
HeapCreate
IsDebuggerPresent
GetStartupInfoA
SetFilePointer
IsValidCodePage
FreeLibrary
GetUserDefaultLCID
FlushFileBuffers
GetTimeZoneInformation
SetLastError
FreeEnvironmentStringsA
LCMapStringW
Sleep
FatalAppExitA
GetTimeFormatA
HeapSize
GetCurrentProcess
GetLastError
InterlockedIncrement
GetConsoleOutputCP
CompareStringW
GetModuleHandleA
GetProcAddress
GetCommandLineA
GetCurrentThread
SetConsoleCtrlHandler
GetCurrentProcessId
InitializeCriticalSection
EnterCriticalSection
GetModuleFileNameA
VirtualQuery
GetEnvironmentStringsW
GetCPInfo
CreateFileA
SetStdHandle
ExitProcess
IsValidLocale
UnhandledExceptionFilter
GetStdHandle
SetHandleCount
TlsSetValue
GetCurrentThreadId
ReadFile
GetOEMCP
FreeEnvironmentStringsW
CreateMutexA
CompareStringA
user32
DefWindowProcA
SetCursor
BeginPaint
UnhookWindowsHookEx
EmptyClipboard
ShowWindow
SetParent
GetWindow
DispatchMessageA
CopyIcon
GetKeyState
GetForegroundWindow
GetDesktopWindow
DefDlgProcA
GetSubMenu
GetWindowRect
GetPropA
SetTimer
CreateWindowExA
CharNextA
MapVirtualKeyA
GetCursor
GetNextDlgGroupItem
UpdateWindow
LoadAcceleratorsA
RegisterClassA
FrameRect
ReleaseDC
DestroyWindow
GetDlgCtrlID
RegisterClipboardFormatA
SetWindowsHookExA
KillTimer
GetWindowPlacement
DrawStateA
EndPaint
CreateAcceleratorTableA
SetPropA
MessageBoxA
AppendMenuA
GetMenuItemID
SetWindowPos
GetWindowDC
LoadBitmapA
CreateIconIndirect
DestroyAcceleratorTable
SetMenu
CreatePopupMenu
GetWindowThreadProcessId
RegisterClassExA
GetScrollPos
LoadIconA
DestroyMenu
advapi32
AllocateAndInitializeSid
RegDeleteKeyA
StartServiceCtrlDispatcherA
RegSetValueExA
RegQueryValueExA
InitializeSecurityDescriptor
RegCreateKeyExA
RegEnumValueA
FreeSid
RegCloseKey
GetTokenInformation
RegisterEventSourceA
RegDeleteValueA
DeregisterEventSource
RegOpenKeyExA
ReportEventA
CloseServiceHandle
RegOpenKeyA
OpenThreadToken
Sections
.text Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ