Static task
static1
Behavioral task
behavioral1
Sample
63e3cbcf31d98dc8b621414a1e2540116f9f148a6fd30d91eafdcd910548472c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
63e3cbcf31d98dc8b621414a1e2540116f9f148a6fd30d91eafdcd910548472c.exe
Resource
win10v2004-20220901-en
General
-
Target
63e3cbcf31d98dc8b621414a1e2540116f9f148a6fd30d91eafdcd910548472c
-
Size
348KB
-
MD5
07b3532afc025690405a5e16d7f0a694
-
SHA1
4acfada79b0dff177693507a0a93f9113cd0f957
-
SHA256
63e3cbcf31d98dc8b621414a1e2540116f9f148a6fd30d91eafdcd910548472c
-
SHA512
5c975e0de1ce23a463faf3346ccbcac3d8188ded38fc6d191f13d99440ed19e667e49e766101198cbc274079a9100408499634ec39f29d1dc101c8044160b04c
-
SSDEEP
6144:+hcsjwmNLdAbBEXegdsYuvQLSPDJ8Qzqeck4cMK1GJVqSzgkZbv:+XLdAbBEXHUYL6sezDMK8Kybv
Malware Config
Signatures
Files
-
63e3cbcf31d98dc8b621414a1e2540116f9f148a6fd30d91eafdcd910548472c.exe windows x86
7255fdf638354d4adf5053f6899c0009
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageW
GetSubMenu
CallMsgFilterW
RemoveMenu
IsDlgButtonChecked
InSendMessageEx
OemToCharBuffA
DlgDirSelectExW
GetClassLongA
GetClassNameA
wsprintfW
BringWindowToTop
SetSystemCursor
TrackMouseEvent
SetWinEventHook
GetKeyboardState
GetClassInfoA
GetMessageTime
LoadMenuW
DrawAnimatedRects
GetWindowThreadProcessId
GetKeyboardType
GetAltTabInfo
WindowFromDC
SendMessageW
ChangeClipboardChain
FindWindowExW
DdePostAdvise
BroadcastSystemMessage
DispatchMessageW
SetUserObjectInformationW
RegisterClassExA
MessageBoxIndirectA
SwapMouseButton
SetPropA
DrawCaption
OpenDesktopW
PtInRect
GetClipboardViewer
CharToOemBuffW
UpdateWindow
LoadImageW
GetScrollPos
DdeClientTransaction
DeferWindowPos
EnumWindows
GetCaretBlinkTime
VkKeyScanW
CreateAcceleratorTableA
EnumDesktopWindows
RealChildWindowFromPoint
MapWindowPoints
CallWindowProcW
EndTask
RegisterClassA
kernel32
GetProcAddress
WideCharToMultiByte
LoadLibraryA
HeapDestroy
TlsGetValue
GetTimeZoneInformation
InterlockedExchange
VirtualAlloc
IsValidCodePage
SetLastError
GetModuleHandleA
SetStdHandle
FreeEnvironmentStringsW
TerminateProcess
GetFileType
GetDateFormatA
GetThreadContext
FileTimeToDosDateTime
RtlUnwind
GetLocaleInfoA
CreateMutexA
GetStartupInfoW
GetThreadLocale
CompareStringW
GetTimeFormatA
IsBadWritePtr
GetProfileIntW
GetVersionExA
GetModuleFileNameA
MapViewOfFileEx
lstrlen
GetUserDefaultLCID
SetEnvironmentVariableA
GetTickCount
LCMapStringA
GetSystemTimeAsFileTime
UnhandledExceptionFilter
EnumSystemLocalesA
InitializeCriticalSection
HeapSize
GetCommandLineA
HeapAlloc
GetEnvironmentStringsW
GetStdHandle
GetModuleFileNameW
GetStartupInfoA
GetLogicalDriveStringsA
LCMapStringW
VirtualProtect
GetOEMCP
OutputDebugStringA
GetCurrentThread
FlushFileBuffers
SetConsoleCtrlHandler
CreateNamedPipeA
GetCommandLineW
ExitProcess
ReadFile
SetHandleCount
GetCurrentProcessId
TlsFree
GetStringTypeW
GetACP
VirtualFree
HeapFree
TransactNamedPipe
FreeEnvironmentStringsA
SetFilePointer
OpenMutexA
QueryPerformanceCounter
SetCurrentDirectoryA
TlsAlloc
IsValidLocale
TlsSetValue
CompareStringA
GetLastError
CreateProcessW
GetEnvironmentStrings
DeleteCriticalSection
WaitForDebugEvent
MultiByteToWideChar
GetCPInfo
HeapCreate
GetLocaleInfoW
SuspendThread
GetStringTypeA
GetCurrentProcess
WriteFile
GetSystemInfo
EnterCriticalSection
GetCurrentThreadId
DebugBreak
CloseHandle
FileTimeToLocalFileTime
VirtualQuery
LeaveCriticalSection
HeapReAlloc
comctl32
CreateStatusWindow
ImageList_DragLeave
ImageList_SetOverlayImage
_TrackMouseEvent
CreatePropertySheetPage
ImageList_EndDrag
CreateToolbarEx
ImageList_LoadImageW
ImageList_GetImageCount
ImageList_DragShowNolock
CreatePropertySheetPageW
ImageList_SetImageCount
InitCommonControlsEx
ImageList_Create
InitMUILanguage
ImageList_GetDragImage
ImageList_Destroy
CreateMappedBitmap
DrawStatusTextA
ImageList_Copy
ImageList_SetFilter
ImageList_Duplicate
ImageList_GetFlags
Sections
.text Size: 152KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ