Static task
static1
Behavioral task
behavioral1
Sample
283311220eed48ced973a3867e12a9ff0a91fb362d869dc78a956f5ebae506d5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
283311220eed48ced973a3867e12a9ff0a91fb362d869dc78a956f5ebae506d5.exe
Resource
win10v2004-20220812-en
General
-
Target
283311220eed48ced973a3867e12a9ff0a91fb362d869dc78a956f5ebae506d5
-
Size
667KB
-
MD5
05fdb39a5597b90930173d5859406780
-
SHA1
24ff8b933d549f7ed3f3b5393189e3b1070d4ecc
-
SHA256
283311220eed48ced973a3867e12a9ff0a91fb362d869dc78a956f5ebae506d5
-
SHA512
39887709461e0792155ee730f7ea5c19ce3378d71724be887833fc29813824daa2a07522023407614ce2865104d32616ee78ea66010b5dcd10c24f1ba6ef251c
-
SSDEEP
12288:9AJzDMadp3JJRcr1N/MU5p4oT09I5N1gzc0JB5MVeFen7ijjj3CUzdxuRJRBOMGT:mRganrRcr1N/MU5p4ow9I5NuQ0JB5MVU
Malware Config
Signatures
Files
-
283311220eed48ced973a3867e12a9ff0a91fb362d869dc78a956f5ebae506d5.exe windows x86
aebdf34c1de9e9f6da9e95ff1f955201
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
shell32
SHGetPathFromIDListW
SHGetFileInfoW
CommandLineToArgvW
ShellExecuteW
ShellExecuteExW
SHGetMalloc
SHBrowseForFolderW
SHGetSpecialFolderLocation
kernel32
CreateFileA
FreeLibrary
GetProcessHeap
HeapAlloc
GetLastError
GetProcAddress
HeapFree
LoadLibraryW
GetModuleFileNameW
LocalFree
WaitForSingleObject
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
CloseHandle
SetFileApisToOEM
GetCurrentProcess
GetCurrentThread
SetPriorityClass
GetEnvironmentVariableW
SetThreadPriority
GetVersionExW
GetModuleHandleW
ExpandEnvironmentStringsW
CreateFileW
GetCommandLineW
DeleteFileW
GetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
FindClose
FindNextFileW
FindFirstFileW
FormatMessageW
InterlockedExchangeAdd
SetEndOfFile
SetFileTime
WriteFile
SetFilePointer
GetFileSize
ReadFile
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetLongPathNameW
MoveFileW
lstrlenW
GetTempPathW
GetFullPathNameW
GetWindowsDirectoryW
GetTempFileNameW
SetFileAttributesW
SetEvent
ResetEvent
CreateEventW
FindResourceW
FileTimeToSystemTime
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
HeapReAlloc
VirtualAlloc
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetACP
WaitForMultipleObjects
ResumeThread
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetVersionExA
GetStartupInfoW
ExitThread
GetCurrentThreadId
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
user32
TranslateMessage
IsWindowVisible
EnableWindow
GetMessageW
KillTimer
DispatchMessageW
PostQuitMessage
CreateDialogParamW
ScreenToClient
DestroyIcon
IsWindow
ShowWindow
MessageBoxW
PostMessageW
DialogBoxParamW
SetWindowPos
GetWindowRect
GetSystemMetrics
GetWindowTextW
SetWindowTextW
GetDlgItem
SendMessageW
EndDialog
SetFocus
LoadIconW
GetActiveWindow
GetDesktopWindow
LoadStringW
SetTimer
IsDialogMessageW
gdi32
DeleteObject
CreateSolidBrush
ole32
CoUninitialize
CoTaskMemFree
CoInitializeEx
CoCreateInstance
CoInitialize
Sections
.text Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ