?HelpOpenCommand@@YG_KPAPAEPAPAPAPAE@Z
Static task
static1
Behavioral task
behavioral1
Sample
08915573e53df70ae8e6ca323772c4c80a21e89b332bb30c7df26a528f0ea084.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
08915573e53df70ae8e6ca323772c4c80a21e89b332bb30c7df26a528f0ea084.exe
Resource
win10v2004-20220812-en
General
-
Target
08915573e53df70ae8e6ca323772c4c80a21e89b332bb30c7df26a528f0ea084
-
Size
190KB
-
MD5
00bd23a4d418a23799b82ddffa4600b2
-
SHA1
24310d94a002a040ef2d222032fb6a5775078c5e
-
SHA256
08915573e53df70ae8e6ca323772c4c80a21e89b332bb30c7df26a528f0ea084
-
SHA512
dca236dab07da54d03607e8e386dd2e73a3ec23fab6a7f735b96393dac794a2fefa9271650251f829380d1566c6f43367d7976831281db5b9032ff392cd240b8
-
SSDEEP
3072:0pIsiqmpFNxSfKjrDhZuffG6ZnhKneTj7LHjzLfHhlk3fVoSY3ffDgtJPLt:ZsiqmpFNPjr1Z0G6lUneTH7nk3knDgrR
Malware Config
Signatures
Files
-
08915573e53df70ae8e6ca323772c4c80a21e89b332bb30c7df26a528f0ea084.exe windows x86
e08dec1cfe9b446a12b2c06ba79ba307
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
BackupEventLogW
oleaut32
SysStringLen
oleacc
GetStateTextA
GetOleaccVersionInfo
userenv
GetProfilesDirectoryA
crypt32
CertCloseStore
kernel32
VirtualAlloc
GetComputerNameExA
GetTimeZoneInformation
IsBadCodePtr
SetThreadAffinityMask
WaitForMultipleObjectsEx
FileTimeToSystemTime
MoveFileA
FindResourceA
GetSystemDirectoryA
FreeLibrary
GetVersion
GetCurrentThread
SetErrorMode
WaitForSingleObject
TlsSetValue
GetBinaryTypeA
FlushFileBuffers
HeapFree
VirtualFree
EnterCriticalSection
GetFileAttributesA
lstrcpyW
ResumeThread
GetCurrentDirectoryW
CompareStringW
GlobalHandle
ClearCommBreak
GetWindowsDirectoryA
HeapLock
CancelIo
LocalUnlock
CreateMailslotW
MoveFileW
DeleteCriticalSection
FindResourceExA
GetModuleHandleA
CreatePipe
DeviceIoControl
GetUserDefaultLangID
CreateSemaphoreW
ExitThread
AddAtomA
EnumResourceLanguagesA
GetThreadPriority
FileTimeToDosDateTime
CompareFileTime
GetFileAttributesExW
VirtualProtect
CreateFileMappingW
lstrcmpW
GetModuleFileNameW
CreateFileW
SetCommTimeouts
GetTickCount
FindNextFileW
lstrcmpiW
GetLocaleInfoA
VerSetConditionMask
SetCommState
GetTempPathW
SetEndOfFile
IsValidLanguageGroup
GetFullPathNameA
LoadLibraryA
LocalFree
GetSystemTimeAsFileTime
GetStringTypeExW
SetCommBreak
SetFilePointer
CreateDirectoryA
GetProcAddress
CreateDirectoryW
SetPriorityClass
SetCommMask
GetTempFileNameA
SetLocalTime
GetFileAttributesExA
LockResource
ole32
CoBuildVersion
CoInitialize
gdi32
SetBitmapDimensionEx
CreatePatternBrush
SelectObject
DPtoLP
StartPage
LineDDA
GetMapMode
RemoveFontResourceW
Rectangle
FillRgn
GetFontData
GetBkMode
MoveToEx
CreateFontA
ExtFloodFill
SetStretchBltMode
SetBkColor
CreateFontIndirectW
EndPage
BeginPath
SetViewportExtEx
CreateBrushIndirect
GetTextMetricsW
CreateFontW
ScaleViewportExtEx
UnrealizeObject
SelectClipRgn
PatBlt
GetObjectA
SetMapMode
ExcludeClipRect
GetTextColor
GetTextAlign
GetPaletteEntries
ScaleWindowExtEx
GetDeviceCaps
user32
MessageBoxExW
RegisterClassExA
IsRectEmpty
GetDlgCtrlID
GetFocus
MapVirtualKeyA
SetForegroundWindow
FrameRect
SystemParametersInfoW
SetParent
DestroyMenu
RegisterHotKey
GetShellWindow
CreateAcceleratorTableW
CopyImage
TranslateAcceleratorA
CharLowerBuffW
OemToCharBuffA
LoadStringA
SetSysColors
AppendMenuA
IsWindowEnabled
GetMenuStringA
KillTimer
CreatePopupMenu
DrawAnimatedRects
DialogBoxParamW
InternalGetWindowText
CreateIconFromResource
LoadMenuA
EnumWindows
LoadAcceleratorsA
wsprintfW
CopyRect
EnumChildWindows
InSendMessageEx
GetAsyncKeyState
MonitorFromPoint
ToUnicodeEx
GetDialogBaseUnits
LoadCursorW
IsZoomed
PostMessageW
GetScrollPos
DestroyIcon
RegisterClassExW
wvsprintfA
ShowCursor
GetDCEx
HiliteMenuItem
CreateDialogParamW
DestroyCaret
FindWindowExW
RemoveMenu
ReleaseDC
GetWindowLongW
GetPropW
TranslateAcceleratorW
DialogBoxParamA
PeekMessageW
MonitorFromRect
VkKeyScanW
LoadStringW
IsIconic
SetRectEmpty
CopyAcceleratorTableW
MapWindowPoints
GetIconInfo
GetClassInfoW
ShowCaret
IsDialogMessageW
GetMenu
GetClassInfoExW
GetCaretPos
LockWindowUpdate
CreateDialogParamA
GetCursorPos
GetMenuItemRect
SetWindowPlacement
CharUpperA
Exports
Exports
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Ho092 Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Dot Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Sob49 Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Pah459 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ