Static task
static1
Behavioral task
behavioral1
Sample
218aa8e5dd033748819371781d3bdc7aea373b8895b0008883d2cec4842ad560.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
218aa8e5dd033748819371781d3bdc7aea373b8895b0008883d2cec4842ad560.exe
Resource
win10v2004-20220812-en
General
-
Target
218aa8e5dd033748819371781d3bdc7aea373b8895b0008883d2cec4842ad560
-
Size
716KB
-
MD5
0ba68d67ee2638b7369378e90e50e181
-
SHA1
002ef7b916b6699df5b38a1109948af5b0e68d57
-
SHA256
218aa8e5dd033748819371781d3bdc7aea373b8895b0008883d2cec4842ad560
-
SHA512
b24e3c132028228cfe476162d8991adeb04d92d8886b2372efde3e082e722472a635ce78715ba0bf23b29a47c2ed44c4752ec78bb0aa049f249314ab0acfcbd5
-
SSDEEP
12288:GcGSbfKWiMoCksQ/SUrroIvBTiPg7CmJlsV3riec40xHwG7EYT8foDkUAAQ:GczbfVQ/SUHHvoWsV3riec40h/4AQ
Malware Config
Signatures
Files
-
218aa8e5dd033748819371781d3bdc7aea373b8895b0008883d2cec4842ad560.exe windows x86
98aa721dd49ccbd952b5362f06905c4f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumDisplayDevicesW
OemToCharBuffW
SetClipboardData
CharUpperW
LoadMenuIndirectA
SetMenuItemBitmaps
CloseDesktop
GetComboBoxInfo
EnumPropsW
TranslateAcceleratorA
GetWindowWord
WaitForInputIdle
ScrollDC
DlgDirListComboBoxW
SetWindowLongW
GetTabbedTextExtentW
EnableWindow
ChildWindowFromPoint
GetKeyboardLayoutNameW
SetDeskWallpaper
MenuItemFromPoint
GetMenuItemCount
EndTask
BroadcastSystemMessageW
LoadCursorW
SetThreadDesktop
GetWindowThreadProcessId
SetDebugErrorLevel
MessageBoxW
BlockInput
GetScrollPos
MessageBeep
LoadMenuA
CharLowerW
SetClipboardViewer
RegisterClassA
WINNLSEnableIME
GetDialogBaseUnits
SetParent
DdeAddData
RegisterClassExA
UnhookWindowsHook
DlgDirSelectExW
CreateIconFromResourceEx
kernel32
LCMapStringW
InterlockedIncrement
GetStringTypeW
WaitForDebugEvent
CompareStringA
HeapReAlloc
SetUnhandledExceptionFilter
SetFilePointer
GetTickCount
TryEnterCriticalSection
SetStdHandle
MapViewOfFile
InterlockedDecrement
GetCommandLineW
GetSystemTimeAdjustment
SetThreadPriority
ExitProcess
SetCriticalSectionSpinCount
WritePrivateProfileStructA
UnmapViewOfFile
GetModuleFileNameA
GetFileType
HeapCreate
EnterCriticalSection
LoadLibraryA
LCMapStringA
GetStartupInfoW
RtlUnwind
FreeEnvironmentStringsA
GetEnvironmentStringsW
OpenMutexA
TlsGetValue
CommConfigDialogA
GetACP
GetCurrentProcess
GetEnvironmentVariableW
CompareStringW
GetPriorityClass
TlsFree
GetCurrentThreadId
GetEnvironmentStrings
WriteFile
GetLogicalDriveStringsW
GetPrivateProfileIntA
GetSystemTimeAsFileTime
GetStringTypeA
InitializeCriticalSection
VirtualQuery
CreateMutexA
GetCPInfo
WideCharToMultiByte
FreeLibraryAndExitThread
HeapDestroy
GetStartupInfoA
FreeEnvironmentStringsW
ReadFile
GetLocalTime
GetSystemDefaultLCID
QueryPerformanceCounter
FlushFileBuffers
IsBadWritePtr
GetTimeZoneInformation
TlsAlloc
TlsSetValue
HeapAlloc
SetThreadIdealProcessor
DeleteFiber
GetThreadPriority
VirtualFree
GetLastError
GetModuleHandleA
VirtualAlloc
UnhandledExceptionFilter
GetSystemTime
ContinueDebugEvent
TerminateProcess
MultiByteToWideChar
GetCurrentProcessId
InterlockedExchange
GetModuleFileNameW
DeleteCriticalSection
LeaveCriticalSection
ExpandEnvironmentStringsW
LocalFree
GetStdHandle
CloseHandle
HeapFree
lstrlenA
GetVersion
SetLastError
SetEnvironmentVariableA
GetProcAddress
LockFileEx
GetCurrentThread
GetCommandLineA
SetHandleCount
lstrcmpiA
FindNextChangeNotification
wininet
InternetGoOnlineW
GopherCreateLocatorW
FtpGetCurrentDirectoryW
FindNextUrlCacheContainerA
FindFirstUrlCacheEntryExW
comctl32
ImageList_DragMove
InitCommonControlsEx
ImageList_AddIcon
MakeDragList
CreateStatusWindowW
ImageList_GetImageInfo
ImageList_Remove
ImageList_SetBkColor
ImageList_SetImageCount
ImageList_DragLeave
ImageList_Duplicate
CreateUpDownControl
ImageList_Draw
GetEffectiveClientRect
ImageList_BeginDrag
ImageList_DragShowNolock
CreateToolbar
CreatePropertySheetPage
ImageList_LoadImageA
ImageList_GetImageRect
ImageList_GetImageCount
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 400KB - Virtual size: 398KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ