Static task
static1
Behavioral task
behavioral1
Sample
74113b9dc56a0fc88dc429b21362a916aba307cbb55d64a8638bd936dff491ba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
74113b9dc56a0fc88dc429b21362a916aba307cbb55d64a8638bd936dff491ba.exe
Resource
win10v2004-20220812-en
General
-
Target
74113b9dc56a0fc88dc429b21362a916aba307cbb55d64a8638bd936dff491ba
-
Size
728KB
-
MD5
04044826b6820d8c2eaec98b059b2fb0
-
SHA1
01c9d1fdcce6b27030c627a1d8b1fc399f03d105
-
SHA256
74113b9dc56a0fc88dc429b21362a916aba307cbb55d64a8638bd936dff491ba
-
SHA512
6d9e1f7144e584cb3dccb0b59f1e3049e39122c84629b3a6a65b375165698c4caa3cd1f7bc846882e1d89c9cdc1a3a3754b8af3c12831a125e456c6341fd6f6a
-
SSDEEP
12288:yYmm8QQOVU2VaJ32rBetOBaLtspQ4He9lev+idW+Xec+42ZiCllMUjK86j:XmmrXqlJ3m8cIeQ4+mdWWBCDmd
Malware Config
Signatures
Files
-
74113b9dc56a0fc88dc429b21362a916aba307cbb55d64a8638bd936dff491ba.exe windows x86
e5837d83b0feda8483f1b408f0f56d90
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileSectionA
FindAtomW
SetMessageWaitingIndicator
IsValidCodePage
LocalCompact
CreateTimerQueueTimer
GetTempFileNameW
GetSystemDefaultUILanguage
LCMapStringW
GetStdHandle
SetProcessWorkingSetSize
GetCalendarInfoA
RtlZeroMemory
GetThreadTimes
GetEnvironmentVariableA
GetHandleInformation
InterlockedDecrement
GetStartupInfoW
GlobalMemoryStatusEx
ExitProcess
SetUnhandledExceptionFilter
ReplaceFileA
lstrcatA
FindResourceExA
RequestWakeupLatency
GetTickCount
GetUserDefaultLCID
FormatMessageW
GetCommMask
CreateTimerQueue
GetPrivateProfileIntW
Process32NextW
CreateFileMappingA
SearchPathA
lstrcpynW
lstrcpyA
SetCalendarInfoA
Thread32First
OutputDebugStringA
TlsGetValue
DnsHostnameToComputerNameW
CreateFileA
OutputDebugStringW
DeleteVolumeMountPointA
SetVolumeMountPointA
FindFirstVolumeMountPointA
ResumeThread
MoveFileW
SetWaitableTimer
EndUpdateResourceA
GetModuleFileNameA
ReplaceFileW
GetAtomNameA
SetLastError
SetEnvironmentVariableA
GetProcessPriorityBoost
GetProfileStringW
EnumTimeFormatsA
GetNamedPipeHandleStateA
GetVersionExW
CallNamedPipeW
FreeLibraryAndExitThread
FatalAppExitA
GetStringTypeExA
GetDriveTypeA
GetThreadPriority
GetComputerNameW
VerifyVersionInfoW
GetCPInfoExA
SetLocalTime
DeleteAtom
GlobalGetAtomNameA
GlobalHandle
LockFile
IsBadStringPtrA
QueueUserAPC
EnumDateFormatsExW
GetCurrencyFormatA
EnumCalendarInfoW
LocalShrink
SignalObjectAndWait
GetDriveTypeW
DefineDosDeviceA
SetSystemPowerState
OpenFileMappingA
GetTimeFormatA
DisconnectNamedPipe
GetThreadLocale
BindIoCompletionCallback
EnumSystemLanguageGroupsW
CreateDirectoryW
GetACP
SetPriorityClass
GetNumberFormatA
comctl32
InitCommonControlsEx
shlwapi
PathAppendA
PathCombineA
advapi32
RegSetValueExW
RegCloseKey
RegOpenKeyExA
RegQueryValueExW
RegQueryValueExA
RegCreateKeyExW
RegOpenKeyExW
user32
LoadIconW
PostMessageW
DestroyMenu
FillRect
PeekMessageW
SetDlgItemTextW
WaitMessage
MessageBoxA
CreateWindowExW
LoadAcceleratorsW
CheckDlgButton
SetCapture
EnableMenuItem
PostQuitMessage
GetSubMenu
GetParent
LoadStringA
GetMenu
PtInRect
TranslateAcceleratorW
wsprintfW
MoveWindow
DefWindowProcW
GetWindowPlacement
DrawTextW
ReleaseCapture
EndDialog
CheckRadioButton
LoadStringW
IsZoomed
DestroyWindow
SetTimer
BeginPaint
OffsetRect
GetWindowRect
ShowWindow
DispatchMessageW
ReleaseDC
UnionRect
IntersectRect
GetDesktopWindow
InvertRect
SendMessageW
GetClientRect
DrawMenuBar
EndPaint
IsIconic
DialogBoxParamW
GetDlgItemTextW
GetDlgItem
SetRect
UpdateWindow
LoadCursorW
InvalidateRect
LoadBitmapW
GetDC
WinHelpW
TranslateMessage
GetForegroundWindow
RegisterClassW
FrameRect
GetMessageW
MessageBoxW
GetSystemMetrics
IsDlgButtonChecked
Sections
.text Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 259KB - Virtual size: 658KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 233KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ