Static task
static1
Behavioral task
behavioral1
Sample
663a00ec1f17c1872b83e2cf56c37ab1f6824d3d7bb2cc6a348d7dc1bb4474d0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
663a00ec1f17c1872b83e2cf56c37ab1f6824d3d7bb2cc6a348d7dc1bb4474d0.exe
Resource
win10v2004-20220901-en
General
-
Target
663a00ec1f17c1872b83e2cf56c37ab1f6824d3d7bb2cc6a348d7dc1bb4474d0
-
Size
960KB
-
MD5
3cb266fc95f43f875ef82dc42a711c30
-
SHA1
bd773db7387e17c76ab72f0762a3b31c51b773d8
-
SHA256
663a00ec1f17c1872b83e2cf56c37ab1f6824d3d7bb2cc6a348d7dc1bb4474d0
-
SHA512
ffc269eb40847246cd08532c9506523be344366e820eb04b2a9df3b0a43f4701c0bc4ebc86502308d0875900dd35740f096282434914bfc1bbfa21a0b367aeb4
-
SSDEEP
12288:TyTzfkc3RHwqxzTXzmBTsb+bmhnpX4rBQ6+TWxp5N++Ti2nTecOk6lSaDxKNKlFg:TOfkcuWnmBTsCMnpodTxp/+gecP6x
Malware Config
Signatures
Files
-
663a00ec1f17c1872b83e2cf56c37ab1f6824d3d7bb2cc6a348d7dc1bb4474d0.exe windows x86
5220ed7f7e9ab703cee63c0958e66f08
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
user32
UnregisterHotKey
CreateDialogParamW
SetWindowTextW
EnableWindow
ShowWindow
GetAsyncKeyState
wsprintfW
GetDlgItem
IsWindowVisible
SetWindowPos
GetForegroundWindow
GetWindow
GetWindowInfo
LoadImageW
GetDC
ReleaseDC
RegisterHotKey
EnumDisplaySettingsW
MessageBoxW
LoadAcceleratorsW
PeekMessageW
PostMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
FindWindowW
GetMonitorInfoW
GetCursorPos
SendMessageW
DestroyWindow
PostQuitMessage
DefWindowProcW
LoadStringW
LoadIconW
LoadCursorW
RegisterClassW
CreateWindowExW
gdi32
GetObjectW
GetDIBits
DeleteObject
CreateDIBSection
DeleteDC
CreateDCW
GetDeviceCaps
GetStockObject
ExtEscape
advapi32
RegSetValueExA
RegQueryValueExA
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyA
kernel32
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
SetConsoleCtrlHandler
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
GetACP
GetUserDefaultLCID
GetSystemTimeAsFileTime
GetCurrentProcessId
InterlockedExchange
RtlUnwind
InitializeCriticalSection
VirtualQuery
GetSystemInfo
VirtualProtect
TlsGetValue
TlsSetValue
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
RaiseException
SetStdHandle
HeapSize
GetTimeZoneInformation
GetLocaleInfoW
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
IsBadReadPtr
LoadLibraryA
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
lstrcatW
lstrcpyW
lstrlenW
lstrcmpiW
lstrcpynW
GetVersionExW
GetProcAddress
LoadLibraryW
lstrcmpW
Sleep
FreeLibrary
ReleaseMutex
MultiByteToWideChar
GetLastError
CreateMutexW
ReadFile
SetFilePointer
CloseHandle
CreateFileW
GlobalFree
GlobalAlloc
IsBadCodePtr
GetModuleHandleW
GetUserDefaultLangID
ResetEvent
WaitForSingleObject
CreateThread
CreateEventW
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
SetLastError
GetCurrentThreadId
GetCurrentThread
TlsFree
Sections
.text Size: 260KB - Virtual size: 257KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 198KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp1 Size: 540KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE