Static task
static1
Behavioral task
behavioral1
Sample
120dbc8644633c880528542e6215df92c7330712c9a9d17dd81d6eaa15cc82d6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
120dbc8644633c880528542e6215df92c7330712c9a9d17dd81d6eaa15cc82d6.exe
Resource
win10v2004-20220812-en
General
-
Target
120dbc8644633c880528542e6215df92c7330712c9a9d17dd81d6eaa15cc82d6
-
Size
103KB
-
MD5
30ca0caaafb655804fcf7e02fa1925c0
-
SHA1
93a150c155e6bd2eff04c9ae1219c77ced211448
-
SHA256
120dbc8644633c880528542e6215df92c7330712c9a9d17dd81d6eaa15cc82d6
-
SHA512
2b3007e7d96a1768dda206e136713d0c0ea0c69f5cebbac59fea50df034e40e20cdf2134c907d4692afa587e7a8e15652553d0ffc03003e1ca54c73813ada233
-
SSDEEP
3072:qpk2kruj5jLfVSOvwKtK/rzbIyV7OwIqtEArzsgr:skT69j7VSO5+PKEtEA
Malware Config
Signatures
Files
-
120dbc8644633c880528542e6215df92c7330712c9a9d17dd81d6eaa15cc82d6.exe windows x86
e6bc2a014df7cdab9105074dc273a28f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetSaveFileNameW
GetOpenFileNameW
GetFileTitleW
imm32
ImmInstallIMEW
user32
GetFocus
LoadIconW
RegisterClassW
DefWindowProcW
GetWindowLongW
GetClientRect
BeginPaint
GetSysColor
EndPaint
LoadCursorW
SetCursor
InvalidateRect
MessageBoxW
wsprintfW
MessageBeep
DialogBoxParamW
PostMessageW
GetWindow
LoadStringW
CheckDlgButton
EndDialog
SetFocus
SetWindowLongW
CallWindowProcW
EnableWindow
GetDlgItem
GetDlgItemTextW
GetDlgItemInt
IsDlgButtonChecked
SendDlgItemMessageW
SetDlgItemTextW
SetDlgItemInt
CheckRadioButton
GetParent
SendMessageW
kernel32
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
GetModuleHandleA
ExitProcess
HeapAlloc
HeapFree
GetFileAttributesA
GetFileAttributesW
GetVersionExA
GetCommandLineA
GetStartupInfoA
LoadLibraryA
lstrlenW
GlobalUnlock
GlobalLock
CopyFileW
GetSystemDirectoryW
lstrcatW
lstrcpyW
GlobalFree
GlobalAlloc
GetWindowsDirectoryW
lstrcmpiW
CreateThread
TerminateThread
GetFileInformationByHandle
CloseHandle
SuspendThread
WriteFile
ReadFile
VirtualProtect
MoveFileW
DeleteFileW
LocalFree
LocalUnlock
LocalLock
LocalAlloc
CreateFileW
GlobalReAlloc
GetLastError
SetEndOfFile
WideCharToMultiByte
LockResource
LoadResource
FindResourceW
_lclose
UpdateResourceW
_lread
_llseek
GetFileSize
OpenFile
EndUpdateResourceW
BeginUpdateResourceW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemInfo
VirtualQuery
MultiByteToWideChar
LCMapStringA
LCMapStringW
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
GetLocaleInfoA
SetFilePointer
HeapReAlloc
GetStringTypeA
GetStringTypeW
ResumeThread
GetProcAddress
gdi32
CreateSolidBrush
CreatePen
SelectObject
DeleteObject
Rectangle
advapi32
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegEnumValueW
RegCreateKeyW
RegOpenKeyW
RegCloseKey
comctl32
PropertySheetW
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE