Static task
static1
Behavioral task
behavioral1
Sample
786f3f3bbe779df0699ca7229beedefc8974508064da72e38c5443e3ca6329e9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
786f3f3bbe779df0699ca7229beedefc8974508064da72e38c5443e3ca6329e9.exe
Resource
win10v2004-20220812-en
General
-
Target
786f3f3bbe779df0699ca7229beedefc8974508064da72e38c5443e3ca6329e9
-
Size
796KB
-
MD5
0369b5f2a16063f79c8c89741f4ef7ce
-
SHA1
5405e035809d8a37707747f9380bf80c9ffc8215
-
SHA256
786f3f3bbe779df0699ca7229beedefc8974508064da72e38c5443e3ca6329e9
-
SHA512
ac624151efa2f103e1c5c402604efc3211ff788a51a0029d461c970b5b5f81766129fe4b7fe8ef653b1a0b70d6b11af19abd8afd1c27983ea424c5c5f1eb4c5a
-
SSDEEP
12288:SuzHnvuOCBptYU4Aiin3gNm3MftBx0G+zB7jvgUDTsszVWm+dq:SuzHvYtYUAmMfROZjIUfssh6q
Malware Config
Signatures
Files
-
786f3f3bbe779df0699ca7229beedefc8974508064da72e38c5443e3ca6329e9.exe windows x86
1d784028c3645891da8ef1793dedf091
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumDisplaySettingsA
SetWindowLongW
ShowWindow
DdeDisconnect
GetFocus
MessageBoxA
GetKeyNameTextW
EnumPropsExA
CharPrevExA
RegisterClassExA
SetParent
CharPrevA
CreateDesktopA
GetWindowTextLengthA
IsIconic
CharToOemBuffA
DdeClientTransaction
AdjustWindowRect
FillRect
GetDlgItemTextW
IsWindowUnicode
FindWindowExW
ChangeClipboardChain
SendMessageA
DestroyWindow
OemKeyScan
DefWindowProcA
MapVirtualKeyExW
CreateWindowExW
GetWindowRect
GetCursor
DrawTextW
DdeFreeStringHandle
RegisterClassA
DefFrameProcW
GetParent
shell32
SHGetInstanceExplorer
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
ShellHookProc
comctl32
ImageList_Duplicate
ImageList_DragEnter
DrawStatusTextA
DrawStatusText
InitCommonControlsEx
ImageList_Add
ImageList_SetFilter
ImageList_GetIconSize
ImageList_EndDrag
ImageList_SetFlags
ImageList_Copy
ImageList_Read
ImageList_DragLeave
wininet
FindFirstUrlCacheContainerA
kernel32
GetStartupInfoA
GetConsoleOutputCP
WritePrivateProfileStructA
GetUserDefaultLCID
IsValidLocale
SetStdHandle
CloseHandle
GetLastError
TlsSetValue
VirtualFree
SetLastError
OpenMutexA
WideCharToMultiByte
GetStringTypeW
InterlockedIncrement
GetOEMCP
SetConsoleCtrlHandler
GetCurrentThreadId
LCMapStringA
WriteConsoleW
IsValidCodePage
HeapFree
GetLocaleInfoA
TerminateProcess
GetDateFormatA
SetFilePointer
WaitNamedPipeW
HeapSize
ExitProcess
GetLongPathNameW
RtlUnwind
VirtualAlloc
FlushFileBuffers
CompareStringA
VirtualQuery
TlsFree
IsDebuggerPresent
CreateMutexA
InterlockedDecrement
GetModuleFileNameA
GetEnvironmentStringsW
lstrcpyn
GetStdHandle
SetEnvironmentVariableA
DeleteCriticalSection
Sleep
GetModuleFileNameW
WritePrivateProfileStructW
HeapAlloc
InitializeCriticalSection
ReadFile
GetConsoleCP
GetFileType
GetACP
GetModuleHandleA
WriteConsoleA
MultiByteToWideChar
GetLocaleInfoW
GetCPInfo
LeaveCriticalSection
GetEnvironmentStrings
FreeEnvironmentStringsW
UnhandledExceptionFilter
GetCurrentProcess
HeapCreate
FreeLibrary
GetVersionExA
CompareStringW
GetCommandLineW
GetCurrentProcessId
TlsAlloc
SetHandleCount
GetStringTypeA
InterlockedExchange
GetTimeFormatA
LCMapStringW
CreateFileA
GetStartupInfoW
ExpandEnvironmentStringsW
EnumCalendarInfoExW
TlsGetValue
LoadLibraryA
GetTickCount
WriteFile
FindResourceW
GetConsoleMode
GetLogicalDrives
GetProcAddress
GetTimeZoneInformation
GetCommandLineA
HeapReAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentThread
EnumSystemLocalesA
EnterCriticalSection
FreeEnvironmentStringsA
HeapDestroy
SetUnhandledExceptionFilter
GetProcessHeap
Sections
.text Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 452KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ