Static task
static1
Behavioral task
behavioral1
Sample
de936c91fb1f37954e1f31e75674f81224c3f993cfb91659695b57db477ffe27.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
de936c91fb1f37954e1f31e75674f81224c3f993cfb91659695b57db477ffe27.exe
Resource
win10v2004-20221111-en
General
-
Target
de936c91fb1f37954e1f31e75674f81224c3f993cfb91659695b57db477ffe27
-
Size
525KB
-
MD5
8aedc4688fe4e6bdaec6faa97d6bda3a
-
SHA1
8356962beaf0ad4a35aaa0a50fb3722f1e2c793d
-
SHA256
de936c91fb1f37954e1f31e75674f81224c3f993cfb91659695b57db477ffe27
-
SHA512
92b86c4cf3ddd2ec5530b982f3435a7412d6338ec0d0934afa582c5e4e681413eb11b1763e2c3403b30de9077eedbf410b304126766fd41d00f781594f5decf6
-
SSDEEP
6144:2nddwgkfZpNfiyPjUTgeNi7R9NJprXJNREg1iYufrWlIgm/f+l0jQAr44r7PW3NC:2o5kywTgOIX2CdSgmekoCmsUSd9Tba
Malware Config
Signatures
Files
-
de936c91fb1f37954e1f31e75674f81224c3f993cfb91659695b57db477ffe27.exe windows x86
08e9a51c532bed7295244365e65e893c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteExW
comctl32
InitCommonControlsEx
comdlg32
PageSetupDlgW
GetSaveFileNameA
ReplaceTextW
user32
SendMessageTimeoutA
GetListBoxInfo
wvsprintfW
UnionRect
SendDlgItemMessageA
SetUserObjectSecurity
RegisterClassA
GetTopWindow
SetRect
IsCharAlphaW
GetMessagePos
MenuItemFromPoint
ToAscii
DdeInitializeA
SetWinEventHook
SetSystemCursor
GetShellWindow
SendMessageTimeoutW
PostMessageW
TileWindows
GetDoubleClickTime
GetWindowLongA
MessageBoxIndirectA
DdeUnaccessData
SetPropA
RegisterClassExA
kernel32
RtlUnwind
TlsSetValue
FreeEnvironmentStringsW
GetDateFormatA
CreateMutexA
HeapFree
GetCommandLineA
GetEnvironmentStringsW
GetCPInfo
LCMapStringA
GetModuleHandleA
WriteFile
FlushFileBuffers
MultiByteToWideChar
WideCharToMultiByte
FindFirstFileExW
LoadLibraryA
ExitProcess
GetTimeZoneInformation
FreeEnvironmentStringsA
VirtualQuery
GetCurrentProcess
GetPrivateProfileStructA
LeaveCriticalSection
WritePrivateProfileStructA
DeleteFiber
GetUserDefaultLCID
GetEnvironmentVariableW
VirtualFree
GetLocaleInfoA
GetTickCount
GetCurrentThread
GetThreadLocale
ReadFile
GetFileType
GetTimeFormatA
IsBadReadPtr
HeapSize
LockResource
GetSystemInfo
GetProcAddress
CompareStringA
GetLastError
SetFilePointer
GetACP
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsValidCodePage
GetModuleFileNameA
InterlockedExchange
lstrcatA
HeapCreate
VirtualAlloc
GlobalUnlock
SetStdHandle
SetHandleCount
VirtualProtect
EnumDateFormatsExW
FindNextFileA
IsValidLocale
GetFileSize
GetOEMCP
CloseHandle
CreateWaitableTimerA
TlsFree
SetLastError
GetLocaleInfoW
GetCurrentThreadId
TlsGetValue
HeapDestroy
UnhandledExceptionFilter
HeapReAlloc
InitializeCriticalSection
LCMapStringW
TerminateProcess
FlushConsoleInputBuffer
EnumCalendarInfoW
GetStringTypeA
GetAtomNameW
GlobalHandle
CompareStringW
LoadLibraryExW
GetStartupInfoA
OpenMutexA
GetStdHandle
SetEnvironmentVariableA
DeleteCriticalSection
GetVersionExA
IsBadWritePtr
GetCurrentProcessId
EnterCriticalSection
HeapAlloc
GetStringTypeW
TlsAlloc
GlobalGetAtomNameW
GetEnvironmentStrings
EnumSystemLocalesA
advapi32
LookupPrivilegeDisplayNameA
CryptDeriveKey
CryptImportKey
RegSaveKeyW
CryptGetProvParam
CryptGetKeyParam
CryptDuplicateKey
RegCreateKeyExW
LookupAccountNameW
CryptGenKey
CryptSetProviderA
RegQueryValueExW
RegDeleteKeyA
CryptDuplicateHash
GetUserNameW
CryptSetHashParam
Sections
.text Size: 372KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ