Static task
static1
Behavioral task
behavioral1
Sample
7170b30e09b7ef31a4f763a3511a616ec4f258a188babec598a7c5c8544fb54e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7170b30e09b7ef31a4f763a3511a616ec4f258a188babec598a7c5c8544fb54e.exe
Resource
win10v2004-20220812-en
General
-
Target
7170b30e09b7ef31a4f763a3511a616ec4f258a188babec598a7c5c8544fb54e
-
Size
170KB
-
MD5
092421c415e3837b7a6c947a5f9f69f6
-
SHA1
4d772a315a726bb351cbbdd201de637a0efe11da
-
SHA256
7170b30e09b7ef31a4f763a3511a616ec4f258a188babec598a7c5c8544fb54e
-
SHA512
9f24b2643a1ef2f37a44dd1ab8228b822625a56b6d5b966bc6acb77dbcbbb2386d4b162e7d7bfed740d694647088a89f1fbaa5f478db93882dbc95ba31a3a30b
-
SSDEEP
3072:B5Sc2sHirAebQWJSy6Wc94sF4/kLSa1kjd7YiaFZ8Zm6vCf5LChnUkK7/NgdAaCq:siqkLSa1ukiaF6Zm66f5LChnUke/NaS
Malware Config
Signatures
Files
-
7170b30e09b7ef31a4f763a3511a616ec4f258a188babec598a7c5c8544fb54e.exe windows x86
6602ab82d0d910aa74e054a0e13eedff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CallWindowProcA
InsertMenuA
UnhookWindowsHookEx
IsWindowEnabled
LoadIconA
GetMenuItemCount
FindWindowA
AdjustWindowRectEx
GetSysColor
GetKeyState
ClientToScreen
TrackPopupMenu
GetLastActivePopup
RegisterClassA
GetCursorPos
EmptyClipboard
LoadCursorA
IsWindow
EndDialog
GetForegroundWindow
ShowWindow
DeleteMenu
GetActiveWindow
GetClassNameA
DrawIcon
KillTimer
SetMenu
FillRect
UpdateWindow
GetDesktopWindow
GetSysColorBrush
GetSystemMetrics
msvcrt
fread
signal
_errno
_adjust_fdiv
_controlfp
__setusermatherr
_exit
strchr
_XcptFilter
__p___initenv
_snprintf
__getmainargs
strstr
__p__commode
__p__fmode
_initterm
_vsnprintf
_except_handler3
__dllonexit
atexit
wcslen
exit
_strnicmp
__set_app_type
strcpy
strlen
kernel32
GetCurrentDirectoryA
GetUserDefaultLangID
OpenProcess
WideCharToMultiByte
GlobalLock
IsDBCSLeadByte
LocalAlloc
lstrlenW
LocalFree
GetShortPathNameA
FileTimeToSystemTime
FlushFileBuffers
GetCurrentProcessId
GlobalFree
OutputDebugStringA
SetFileAttributesW
IsBadWritePtr
GetConsoleMode
GetModuleHandleA
GetStringTypeW
VirtualProtect
GetFileTime
GetSystemDefaultLCID
GlobalUnlock
GetModuleHandleW
GetCurrentProcess
WaitForMultipleObjects
SetFileAttributesA
advapi32
GetLengthSid
RegEnumKeyW
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyA
InitializeSecurityDescriptor
CloseServiceHandle
SetSecurityDescriptorDacl
RegSetValueExA
RegSetValueExW
ControlService
LookupPrivilegeValueW
AllocateAndInitializeSid
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ