Static task
static1
Behavioral task
behavioral1
Sample
b377a8f0bb5551da01cdf4f9e315428c257d47afba7e6d8dbbf682e65453c590.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b377a8f0bb5551da01cdf4f9e315428c257d47afba7e6d8dbbf682e65453c590.exe
Resource
win10v2004-20220812-en
General
-
Target
b377a8f0bb5551da01cdf4f9e315428c257d47afba7e6d8dbbf682e65453c590
-
Size
262KB
-
MD5
0a98f1ef67904477c25008aab266c8c3
-
SHA1
9f7fb15232953c2623519c8f1cb51c1928277c45
-
SHA256
b377a8f0bb5551da01cdf4f9e315428c257d47afba7e6d8dbbf682e65453c590
-
SHA512
fbf8894fdea19d5bf82efdefd0782ca8a6daa1c76f03055134e71fbff17961c737a340e529fba19a60f246190fc067f24b4f2d2503bfefbeb80bc28dd48bcd17
-
SSDEEP
3072:ii6rArRxuJTtOa5JjzFWJoYb2Tbs/GSEdX6Pi7U0SJVnBOyYN8u2r917k:SWxu609zEi5SEkJVnB+2Tk
Malware Config
Signatures
Files
-
b377a8f0bb5551da01cdf4f9e315428c257d47afba7e6d8dbbf682e65453c590.exe windows x86
9bb28a77fefc0a08ee68e52c46b00500
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
GetCurrentDirectoryA
GetVersionExA
GetModuleHandleA
FreeLibrary
GetSystemInfo
GetCurrentProcess
LoadLibraryA
GetProcAddress
GetExitCodeThread
LoadLibraryExA
GetFullPathNameA
GetModuleFileNameA
GetSystemDefaultLangID
CreateFileA
GetWindowsDirectoryA
SetEvent
TerminateThread
CreateEventA
OpenProcess
Sleep
WaitForSingleObject
DeleteFileA
FindFirstFileA
FindClose
GetLastError
SetCurrentDirectoryA
WriteFile
LocalFree
FormatMessageA
GetLocalTime
TerminateProcess
WaitForMultipleObjects
ResetEvent
lstrcatA
IsBadStringPtrA
WideCharToMultiByte
IsBadCodePtr
FindResourceExA
FindResourceA
LoadResource
GetStartupInfoA
GetExitCodeProcess
CloseHandle
lstrcmpiA
MulDiv
lstrlenA
GetProcessHeap
HeapAlloc
HeapFree
FindNextFileA
lstrcpyA
msvcrt
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
_endthreadex
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_beginthreadex
user32
GetWindowRect
EndDialog
SetDlgItemTextA
GetDlgItemTextA
GetDesktopWindow
FindWindowA
wvsprintfA
GetAncestor
SetWindowPos
SetWindowTextA
GetClientRect
CreateWindowExA
GetWindowLongA
GetWindowThreadProcessId
SetWindowLongA
DestroyWindow
PostQuitMessage
IsWindowVisible
CharLowerBuffA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
LoadImageA
GetDlgItem
GetDC
DrawIcon
ReleaseDC
SendMessageA
ShowWindow
SystemParametersInfoA
MessageBoxA
LoadStringA
DialogBoxParamA
DialogBoxIndirectParamA
CreateDialogParamA
CreateDialogIndirectParamA
wsprintfA
GetForegroundWindow
shlwapi
StrToIntExA
StrCmpNIA
StrTrimA
StrToIntA
SHDeleteKeyA
setupapi
SetupFindNextMatchLineA
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiCallClassInstaller
SetupGetLineByIndexA
SetupGetLineCountA
SetupFindNextLine
SetupOpenInfFileA
SetupCloseInfFile
SetupDiOpenDevRegKey
SetupDiGetClassDevsA
SetupGetFieldCount
SetupGetLineTextA
SetupGetStringFieldA
SetupFindFirstLineA
SetupGetIntField
SetupDiDestroyDeviceInfoList
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
gdi32
GetDeviceCaps
comctl32
InitCommonControlsEx
shell32
ShellExecuteExA
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hknpx Size: 8KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 148KB - Virtual size: 145KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE