Static task
static1
Behavioral task
behavioral1
Sample
db1308526a73a49a0ee10f72244fa971dd0eeb9d48ff8cad37599aac007e0677.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
db1308526a73a49a0ee10f72244fa971dd0eeb9d48ff8cad37599aac007e0677.exe
Resource
win10v2004-20220812-en
General
-
Target
db1308526a73a49a0ee10f72244fa971dd0eeb9d48ff8cad37599aac007e0677
-
Size
324KB
-
MD5
0bfa9410c83385ad04dad7f907604008
-
SHA1
b05be74a6c3e1ccf5f1edbf03f804555f811e362
-
SHA256
db1308526a73a49a0ee10f72244fa971dd0eeb9d48ff8cad37599aac007e0677
-
SHA512
742d9b7552d11d4b1312d9960bb10309b188b2780c842771a43b9c80ae17951e4ea5f17cbb9e8eba4046df8ca1d012af4e5fc375efab4b7a6b9fba89ee50070d
-
SSDEEP
6144:zFopFVzdG6MfI2hXylFHFycgARs3vSsrtBHiNyKMTqoEVcmhuABdywbwal:ipNG65EMlychCS8tBHxbaE
Malware Config
Signatures
Files
-
db1308526a73a49a0ee10f72244fa971dd0eeb9d48ff8cad37599aac007e0677.exe windows x86
eaf883a7bdaf65b800d63a4fb26eed5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GlobalLock
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
CompareStringA
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
SetFileTime
LockResource
GetCurrentProcessId
GetEnvironmentStrings
FileTimeToLocalFileTime
CreateProcessW
lstrlenW
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
HeapCreate
SetStdHandle
GetLastError
LeaveCriticalSection
HeapAlloc
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
WaitForMultipleObjects
DuplicateHandle
FindNextFileA
ResetEvent
GetDiskFreeSpaceA
FindFirstFileA
CompareStringW
GetProcessHeap
GetProcAddress
SetEvent
GetWindowsDirectoryA
DeleteFileA
LCMapStringW
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
VirtualProtect
TlsAlloc
GetTickCount
QueryPerformanceCounter
GetOEMCP
LoadLibraryW
SetHandleCount
GetVersion
HeapFree
WriteConsoleW
SetCurrentDirectoryA
InterlockedIncrement
GetCurrentThreadId
GetLocaleInfoA
SetEndOfFile
CreateEventW
GetConsoleMode
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
FlushFileBuffers
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
TlsGetValue
SetLastError
OutputDebugStringA
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
FreeLibrary
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
WideCharToMultiByte
lstrcmpiA
GetTempPathA
lstrcpyA
FreeEnvironmentStringsW
SetErrorMode
ExpandEnvironmentStringsA
LocalAlloc
GetCurrentDirectoryA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetLocalTime
GetFileAttributesW
HeapDestroy
FindFirstFileW
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetSystemDefaultLCID
GetUserDefaultLangID
GetSystemDefaultLangID
GetUserDefaultLCID
InterlockedExchange
SizeofResource
CreateProcessA
IsValidCodePage
VirtualFree
UnmapViewOfFile
Sleep
FindResourceA
EnterCriticalSection
VirtualAlloc
user32
TranslateMessage
SetWindowPos
EnableWindow
ShowWindow
UpdateWindow
GetParent
GetMessageA
DestroyWindow
GetKeyState
SendMessageA
ReleaseDC
GetCursorPos
GetDC
EndPaint
DispatchMessageA
FillRect
PostQuitMessage
IsWindowEnabled
MoveWindow
SetForegroundWindow
PeekMessageA
BeginPaint
GetSystemMetrics
GetWindowRect
GetFocus
SetDlgItemTextA
MessageBoxA
GetSysColor
SystemParametersInfoA
IsWindowVisible
InvalidateRect
GetClientRect
CallWindowProcA
SetCursor
LoadStringA
EnableMenuItem
RegisterClassA
GetWindowLongA
DestroyMenu
SetTimer
SetCapture
ReleaseCapture
SetWindowLongA
EndDialog
SetWindowTextA
CheckMenuItem
wsprintfA
CreateWindowExA
GetDlgItem
ScreenToClient
LoadCursorA
LoadIconA
IsWindow
GetDesktopWindow
ole32
CoCreateInstance
CoInitialize
CoUninitialize
advapi32
RegDeleteKeyA
RegCloseKey
RegQueryValueExW
gdi32
CreateSolidBrush
CreateCompatibleDC
DeleteObject
SetBkColor
SetTextColor
oleaut32
SysAllocStringLen
SysAllocString
SysStringLen
VariantClear
SysFreeString
msvcrt
_strcmpi
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
exit
_exit
free
_controlfp
__dllonexit
_onexit
_except_handler3
Sections
.text Size: 304KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ