Static task
static1
Behavioral task
behavioral1
Sample
66fa1272547a6b4a0acfbf73333c23c15e908c5124a96944d9b01d74d5fba250.exe
Resource
win7-20221111-en
General
-
Target
66fa1272547a6b4a0acfbf73333c23c15e908c5124a96944d9b01d74d5fba250
-
Size
501KB
-
MD5
2b61109f4f0e1e59eebfe54d967fa250
-
SHA1
47ad669d477845f1580108cbc5bd2bba15b70552
-
SHA256
66fa1272547a6b4a0acfbf73333c23c15e908c5124a96944d9b01d74d5fba250
-
SHA512
98724f2d2417c0e56d6f0742970999d1041092c595e7195c4724145e99b064f2475f00cfa139444dbbbaa750e10b519283d9b10abd1f1528c4e11cad7f88d81b
-
SSDEEP
6144:oSWIfbEHcM3Hop+LDFCThhRvueUgrw1JsXcRyCPVfoIsQohdHS7:7WoQ3Y+LejmSskotofQo7HS7
Malware Config
Signatures
Files
-
66fa1272547a6b4a0acfbf73333c23c15e908c5124a96944d9b01d74d5fba250.exe windows x86
793dbd4a40181d88b8e7225411378a7a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
SetThreadPriority
RaiseException
DeleteCriticalSection
FindResourceExW
LocalFree
MultiByteToWideChar
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
SetFilePointer
FreeLibrary
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
GetOEMCP
GetCPInfo
Sleep
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
FindFirstFileW
FindNextFileW
FindClose
GetModuleFileNameW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
LoadResource
FindResourceW
LockResource
SizeofResource
InterlockedExchange
GetCommandLineW
OpenMutexW
WaitForSingleObject
ReleaseMutex
CreateEventW
CreateProcessW
GetSystemTimeAsFileTime
CloseHandle
HeapCreate
VirtualAlloc
VirtualFree
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetVersionExA
GetACP
GetLocaleInfoA
GetThreadLocale
RtlUnwind
GetLastError
ExitThread
CreateThread
GetCurrentThreadId
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
GetStringTypeW
user32
DispatchMessageW
GetMessageW
TranslateMessage
CreateWindowExW
DialogBoxParamW
DrawTextW
InvalidateRect
EndDialog
MonitorFromRect
GetMonitorInfoW
MoveWindow
SetWindowRgn
GetWindowLongW
SetWindowLongW
SetLayeredWindowAttributes
SetTimer
BeginPaint
GetDC
ReleaseDC
EndPaint
RegisterClassExW
DefWindowProcW
KillTimer
SendMessageW
UnregisterClassW
GetWindowRect
PostMessageW
FindWindowW
UnregisterClassA
gdi32
SetTextColor
CreateRoundRectRgn
SetStretchBltMode
SetBkMode
DeleteObject
CreateDIBSection
BitBlt
GetObjectW
SelectObject
DeleteDC
CreateCompatibleDC
CreateFontIndirectW
advapi32
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
shell32
CommandLineToArgvW
ole32
CreateStreamOnHGlobal
shlwapi
PathRemoveFileSpecW
PathAppendW
PathCombineW
PathAddBackslashW
gdiplus
GdipCloneImage
GdipDrawImageRect
GdipCreateFromHDC
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageBounds
GdipDisposeImage
GdipLoadImageFromStream
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
Sections
.text Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 396KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE