Static task
static1
Behavioral task
behavioral1
Sample
b577a5c27e6d294f48df204e1a263fd468d976ef29f079f842d8c98e5a8d467e.exe
Resource
win7-20221111-en
General
-
Target
b577a5c27e6d294f48df204e1a263fd468d976ef29f079f842d8c98e5a8d467e
-
Size
476KB
-
MD5
25c27eac533cd65f49c7142210066016
-
SHA1
8bb12d713f9e7ddc3ca35c8dae2d6343fdb72409
-
SHA256
b577a5c27e6d294f48df204e1a263fd468d976ef29f079f842d8c98e5a8d467e
-
SHA512
e076a6a9ca906af0634b3d663971cd6bb8f51533a3cf6e08b71733c4dd4e73e789ee1d6fe7f210095274ef4e71ca7a0920f3b18acb7716c91cfcdc44d91df9c1
-
SSDEEP
6144:lAOgMGx9BIlAdi2DiCxG9xNNg1JuUVsFt4mgjELmvG:l+2lKCw1JuUkt4mgjESe
Malware Config
Signatures
Files
-
b577a5c27e6d294f48df204e1a263fd468d976ef29f079f842d8c98e5a8d467e.exe windows x86
f99e4d9bb0f2b5d1361305b5f71c1f51
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GetFileSize
CreateFileA
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
lstrlenA
GetModuleFileNameA
GetLastError
FreeLibrary
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
DeleteFileA
CreateProcessA
GetCommandLineA
UnmapViewOfFile
GetFileAttributesA
GetTempPathA
WriteFile
GetTempFileNameA
GetProcAddress
GetModuleHandleA
MapViewOfFile
CreateFileMappingA
MulDiv
LocalFree
lstrcmpA
LocalAlloc
GetVersion
LoadLibraryA
WritePrivateProfileSectionA
WaitForSingleObject
CreateSemaphoreA
GetCurrentProcessId
CopyFileA
VirtualQuery
GetSystemInfo
VirtualProtect
CloseHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
LCMapStringW
LCMapStringA
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
GetCPInfo
GetOEMCP
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
SetLastError
TlsFree
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
TerminateProcess
GetSystemTimeAsFileTime
HeapReAlloc
RaiseException
RtlUnwind
ExitProcess
FlushFileBuffers
SetStdHandle
GetStartupInfoA
GetDriveTypeA
Sleep
GetCurrentThreadId
lstrlenW
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
FindResourceA
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
user32
CallWindowProcA
DefWindowProcA
SetCursor
ReleaseCapture
SetCapture
EndPaint
BeginPaint
GetSystemMetrics
CharPrevA
SendMessageA
GetActiveWindow
MsgWaitForMultipleObjects
CharNextA
DialogBoxParamA
PeekMessageA
TranslateMessage
DispatchMessageA
GetWindowTextLengthA
MessageBoxA
CreateWindowExA
RegisterClassExA
DestroyWindow
LoadCursorA
wsprintfA
GetClassInfoExA
GetWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
GetDlgItem
GetParent
SetDlgItemTextA
GetDlgItemTextA
SetWindowTextA
GetWindowLongA
SetWindowLongA
EndDialog
GetDC
UnregisterClassA
shell32
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ole32
CoUninitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize
oleaut32
VarUI4FromStr
SysAllocStringLen
SysFreeString
advapi32
RegQueryValueExA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyA
RegDeleteKeyA
RegSetValueExA
gdi32
DeleteObject
CreateFontIndirectA
GetDeviceCaps
Sections
.text Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE