Static task
static1
Behavioral task
behavioral1
Sample
970ed38fe5985f1a4d3fe2ce1413a402f88b916eba487df0817400c47947d823.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
970ed38fe5985f1a4d3fe2ce1413a402f88b916eba487df0817400c47947d823.exe
Resource
win10v2004-20221111-en
General
-
Target
970ed38fe5985f1a4d3fe2ce1413a402f88b916eba487df0817400c47947d823
-
Size
320KB
-
MD5
1d185b5e2b5a04b913cc460f5e31a8d6
-
SHA1
d00b99e729abbe2ea27e7a83740d0d7fcbe04a5a
-
SHA256
970ed38fe5985f1a4d3fe2ce1413a402f88b916eba487df0817400c47947d823
-
SHA512
b7e2d904bf703ab9640b0ffe755f087055db7d05a0d73c358e9e75475d87d196f8a9faba7c68cf9e7d25ac5bc243572220de7fc3cf77718d187017815b7b7287
-
SSDEEP
6144:fdmR72xztIST7hGEyMkPYeud6RnXFOJ1TcVLmBZo+zT1i0e1qM3:FCyxJIREyxpudsnXFOfTK63o+zT1i00F
Malware Config
Signatures
Files
-
970ed38fe5985f1a4d3fe2ce1413a402f88b916eba487df0817400c47947d823.exe windows x86
e08d2735e5ba273bfbaf08d3bb15521f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeZoneInformation
GetTickCount
GetCurrencyFormatW
QueryPerformanceCounter
GetSystemTimeAsFileTime
RtlUnwind
GetACP
FreeEnvironmentStringsW
SetHandleCount
GetStdHandle
GetConsoleOutputCP
GetOEMCP
TlsGetValue
LoadLibraryW
FreeEnvironmentStringsA
Sleep
TlsAlloc
VirtualFree
GetCurrentThread
SetUnhandledExceptionFilter
IsValidLocale
GetModuleFileNameW
HeapFree
LeaveCriticalSection
FlushFileBuffers
SetCurrentDirectoryW
InterlockedDecrement
GetCommandLineA
IsValidCodePage
UnhandledExceptionFilter
GetEnvironmentStrings
MultiByteToWideChar
CreateMutexA
SetLastError
GetUserDefaultLCID
VirtualQuery
GetStringTypeW
GetLastError
GetStartupInfoA
GetEnvironmentStringsW
ReadFile
SetFilePointer
OpenMutexA
GetDateFormatA
GetStringTypeA
WriteConsoleA
HeapCreate
DeleteCriticalSection
GetConsoleCP
SetConsoleCursorInfo
MapViewOfFileEx
GetCurrentThreadId
GetConsoleMode
LoadLibraryA
HeapReAlloc
FreeLibrary
MoveFileA
SetStdHandle
WideCharToMultiByte
HeapDestroy
GetCPInfo
TlsSetValue
WriteFile
WriteConsoleW
CompareStringW
EnumSystemLocalesA
InterlockedIncrement
GetModuleFileNameA
TransmitCommChar
TlsFree
OpenFile
GetProcessHeap
GetTimeFormatA
InitializeCriticalSection
WriteProfileStringA
EnumResourceLanguagesA
HeapAlloc
VirtualAlloc
TerminateProcess
LCMapStringA
RtlMoveMemory
GetVersionExA
ExitProcess
CreateFileA
InterlockedExchange
SetEnvironmentVariableA
GetModuleHandleA
IsDebuggerPresent
GetLocaleInfoA
ResetEvent
SetConsoleCtrlHandler
CloseHandle
GetCurrentProcessId
CompareStringA
EnterCriticalSection
LocalHandle
GetLocaleInfoW
GetProcAddress
GetCurrentProcess
HeapSize
LCMapStringW
SetSystemTime
GetFileType
user32
DefDlgProcA
FlashWindow
RegisterClassExA
GetForegroundWindow
GetAltTabInfo
SetMessageQueue
wsprintfW
GetKeyState
CreateMenu
CloseDesktop
MessageBoxA
CreateWindowExA
SetShellWindow
FreeDDElParam
GetListBoxInfo
ActivateKeyboardLayout
GetWindowTextLengthW
GetShellWindow
RegisterClassA
CreateIcon
AnimateWindow
ShowWindow
SetDlgItemTextA
comctl32
InitCommonControlsEx
gdi32
ExcludeClipRect
DeviceCapabilitiesExA
PtInRegion
ColorCorrectPalette
GetCharABCWidthsA
GetBkMode
SetDIBitsToDevice
GetICMProfileA
SetViewportOrgEx
CloseEnhMetaFile
Escape
CreateDIBitmap
UpdateICMRegKeyW
CheckColorsInGamut
SetMagicColors
CopyEnhMetaFileA
CreatePolyPolygonRgn
StrokeAndFillPath
PolyBezierTo
CreateFontIndirectA
CreateFontIndirectW
shell32
ExtractAssociatedIconA
SHUpdateRecycleBinIcon
SHGetSpecialFolderPathA
SHFileOperationW
InternalExtractIconListW
Sections
.text Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ