Static task
static1
Behavioral task
behavioral1
Sample
068a860bf9a76d064a33fd73bdccd197f53c01082f645e8afc2cf85e68daf5e5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
068a860bf9a76d064a33fd73bdccd197f53c01082f645e8afc2cf85e68daf5e5.exe
Resource
win10v2004-20220812-en
General
-
Target
068a860bf9a76d064a33fd73bdccd197f53c01082f645e8afc2cf85e68daf5e5
-
Size
508KB
-
MD5
8bccc3931958eed292f4cc63edebe2c2
-
SHA1
817263bb4d7884028ea74f70a05be13a324bd95c
-
SHA256
068a860bf9a76d064a33fd73bdccd197f53c01082f645e8afc2cf85e68daf5e5
-
SHA512
5ba83dc64b654f91e87626e5c6e35e0ab932cdf2385646b74865eeb9b64e99ecd61bcb13274e34b3281f194061ede976e016bc6ac3532eb3c5760b54e0db2a34
-
SSDEEP
12288:hofdu4WnBKK43cYVvH/J7VIakAKYy7CSqdhwzEwPx3kv:hofI46KKszVf/7IaABqvwzEQS
Malware Config
Signatures
Files
-
068a860bf9a76d064a33fd73bdccd197f53c01082f645e8afc2cf85e68daf5e5.exe windows x86
8f5462e0c3c32d5b51abf6c4f3b809ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
DrawStatusTextW
ImageList_BeginDrag
ImageList_Read
InitCommonControlsEx
ImageList_SetOverlayImage
ImageList_SetBkColor
CreateToolbarEx
ImageList_GetBkColor
CreateUpDownControl
ImageList_SetDragCursorImage
MakeDragList
ImageList_LoadImageW
ImageList_GetImageRect
kernel32
RtlUnwind
GetFileAttributesExA
FreeEnvironmentStringsA
IsDebuggerPresent
GetStringTypeW
GetOEMCP
GetProcAddress
ExitProcess
CompareStringA
GetLocaleInfoW
GetCurrentProcess
ReadFile
SetConsoleCtrlHandler
GetConsoleOutputCP
HeapCreate
QueryPerformanceCounter
GlobalAlloc
HeapReAlloc
TerminateProcess
UnlockFileEx
WriteFile
LCMapStringA
GetLocaleInfoA
FindFirstFileExW
GetLastError
GetCommandLineA
GetStringTypeA
LoadLibraryA
SetConsoleTitleW
WideCharToMultiByte
GetACP
SetThreadIdealProcessor
WriteProfileStringW
GetSystemTimeAsFileTime
LoadLibraryExA
GetFileType
WriteConsoleA
DeleteCriticalSection
CloseHandle
EnumSystemLocalesA
LCMapStringW
FreeEnvironmentStringsW
TlsAlloc
InterlockedIncrement
GetCurrentThread
GetEnvironmentStrings
GetCPInfo
GlobalFree
SetEnvironmentVariableA
GetStartupInfoA
SetUnhandledExceptionFilter
GetStdHandle
InitializeCriticalSection
WriteConsoleOutputW
GetUserDefaultLCID
GetTimeZoneInformation
GetDateFormatA
OpenEventW
OpenFile
TlsGetValue
SetLastError
GetEnvironmentStringsW
OpenMutexA
FreeLibrary
GetShortPathNameW
LeaveCriticalSection
TlsFree
HeapAlloc
CreateMutexA
SetCurrentDirectoryW
VirtualFree
SetFilePointer
GetModuleFileNameA
TlsSetValue
InterlockedExchange
MultiByteToWideChar
FindNextChangeNotification
IsValidCodePage
EnterCriticalSection
InterlockedCompareExchange
GetTimeFormatA
GetMailslotInfo
SetHandleCount
WriteConsoleW
HeapFree
Sleep
GetVersionExA
GetLogicalDriveStringsW
SetStdHandle
IsValidLocale
InterlockedDecrement
FlushFileBuffers
GetProcessHeap
lstrcmpW
GetCurrentProcessId
GetModuleHandleA
CompareStringW
GetTickCount
VirtualAlloc
HeapSize
GetConsoleCP
lstrcatA
UnhandledExceptionFilter
GetConsoleMode
HeapDestroy
CreateFileA
VirtualQuery
GetCurrentThreadId
comdlg32
PrintDlgA
GetOpenFileNameA
LoadAlterBitmap
GetSaveFileNameW
user32
GetUpdateRgn
DefWindowProcW
RealGetWindowClass
RegisterWindowMessageA
CreateMDIWindowW
ToUnicodeEx
TranslateMDISysAccel
GetMenuContextHelpId
OpenDesktopA
CloseWindowStation
RegisterClassW
GetClassInfoW
DestroyWindow
MapVirtualKeyExW
CreateWindowExA
SetClassLongA
GetDlgItemTextW
IsDialogMessage
NotifyWinEvent
GetClipCursor
CascadeChildWindows
SetWindowsHookExA
DrawIcon
MonitorFromPoint
DdeAccessData
TranslateAcceleratorW
PostQuitMessage
DdeFreeDataHandle
GetAltTabInfo
DrawTextExW
IsMenu
GetActiveWindow
PostMessageA
BeginPaint
SetSysColors
InSendMessage
CreateDesktopA
GetKeyboardLayoutNameA
ShowWindow
DdeCreateDataHandle
DlgDirSelectComboBoxExA
GetInputDesktop
GetCapture
GetPropW
LoadAcceleratorsA
CreateWindowExW
UnhookWinEvent
MessageBoxA
BeginDeferWindowPos
CharLowerBuffW
GetClipboardViewer
RegisterClassExA
GetDesktopWindow
RegisterClassA
SetThreadDesktop
InsertMenuItemW
DefWindowProcA
IsRectEmpty
SetPropA
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ