Static task
static1
Behavioral task
behavioral1
Sample
062327fd0a9a8c553eb395b6ddcf9f503085a78f5189e9b4c0884a7fe732ad49.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
062327fd0a9a8c553eb395b6ddcf9f503085a78f5189e9b4c0884a7fe732ad49.exe
Resource
win10v2004-20220812-en
General
-
Target
062327fd0a9a8c553eb395b6ddcf9f503085a78f5189e9b4c0884a7fe732ad49
-
Size
596KB
-
MD5
9de795de305046d7a531787176f9cef5
-
SHA1
86fc306387270e8faad497a31cf7386fe517bd3e
-
SHA256
062327fd0a9a8c553eb395b6ddcf9f503085a78f5189e9b4c0884a7fe732ad49
-
SHA512
f44eb7bf332af707cd4482a5a803cfc779ff12ec096b3f82657e3e33cc6c77958a086d046af79aaa54ab2576f4510e37804680b287041afcba443d9c02a99a70
-
SSDEEP
12288:acGjO8Y8WysFqGGx9EJFxt5/0rpyxOIxAL3:acGjO8WygGfwPt10MAb
Malware Config
Signatures
Files
-
062327fd0a9a8c553eb395b6ddcf9f503085a78f5189e9b4c0884a7fe732ad49.exe windows x86
6fac57421ce8cf9a7520a13d4e989945
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMenuItemRect
ChangeDisplaySettingsExW
SetFocus
IsWindow
CallWindowProcA
GetMonitorInfoW
SetCaretBlinkTime
LoadCursorA
GetShellWindow
GetKeyNameTextW
RegisterClassExA
MessageBoxW
SetWinEventHook
CopyAcceleratorTableW
GetClassNameA
SetScrollRange
GetComboBoxInfo
ShowWindow
RegisterClipboardFormatA
FillRect
PostQuitMessage
ExitWindowsEx
DefDlgProcA
CallMsgFilter
CreateCaret
RemovePropA
GetNextDlgTabItem
DefWindowProcW
wvsprintfW
MessageBoxIndirectA
CharUpperBuffW
GetWindowTextLengthA
DdeAbandonTransaction
SetClassLongW
DrawTextA
EnumDisplaySettingsExA
GetListBoxInfo
GetDoubleClickTime
SetDoubleClickTime
UpdateWindow
DrawEdge
SendIMEMessageExA
DestroyWindow
RegisterClassA
CreateWindowExW
gdi32
PolyBezierTo
GdiPlayScript
AnimatePalette
PolyPolygon
CopyEnhMetaFileW
CreateBitmap
FrameRgn
GetViewportOrgEx
GetTextMetricsA
Pie
UpdateColors
GetDIBColorTable
SetBitmapDimensionEx
LPtoDP
PolyTextOutW
kernel32
GetModuleFileNameA
TlsGetValue
GetCurrentThreadId
CompareStringW
EnumDateFormatsExW
GetLongPathNameW
SetLastError
GetConsoleScreenBufferInfo
FindResourceA
GetProcessAffinityMask
DeleteCriticalSection
ReadConsoleInputW
InterlockedDecrement
GetProfileSectionW
GetSystemTimeAsFileTime
TlsAlloc
EnterCriticalSection
GetConsoleTitleW
WideCharToMultiByte
SetWaitableTimer
LeaveCriticalSection
ReadConsoleOutputCharacterA
GetEnvironmentStringsW
GetEnvironmentStrings
GetCurrentProcess
HeapCreate
SetConsoleActiveScreenBuffer
IsValidLocale
FreeEnvironmentStringsW
SetEnvironmentVariableW
ExitProcess
GlobalDeleteAtom
LCMapStringA
AddAtomW
SetEnvironmentVariableA
GetDateFormatA
GetVersion
FlushFileBuffers
SystemTimeToTzSpecificLocalTime
VirtualProtect
GetOEMCP
GetCPInfo
GetNamedPipeHandleStateA
GetStartupInfoA
SetConsoleOutputCP
GetStringTypeW
GetCurrentThread
OpenFileMappingA
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
HeapDestroy
RemoveDirectoryA
GetLocalTime
GlobalSize
ExpandEnvironmentStringsW
WritePrivateProfileSectionW
VirtualAlloc
LCMapStringW
SetHandleCount
GlobalAlloc
GetPrivateProfileStructA
LoadLibraryA
VirtualFree
ReadConsoleOutputW
TlsSetValue
CompareStringA
InterlockedExchange
SetConsoleCtrlHandler
LocalSize
ReadConsoleW
HeapAlloc
CreateDirectoryA
HeapFree
InterlockedIncrement
SetEndOfFile
FileTimeToLocalFileTime
GetLastError
GlobalGetAtomNameA
VirtualLock
GetTickCount
GetFileAttributesA
WriteFile
GetCurrentProcessId
RtlUnwind
ReadFile
CreateDirectoryExW
SetTimeZoneInformation
GetStdHandle
QueryPerformanceCounter
SetFilePointer
SetLocaleInfoA
GetSystemTime
CloseHandle
GetProcAddress
IsBadWritePtr
CreateMutexW
TlsFree
FlushViewOfFile
GetModuleHandleA
VirtualQuery
MultiByteToWideChar
OpenMutexA
GetFileAttributesExW
TerminateProcess
ReadConsoleA
InitializeCriticalSection
GetComputerNameA
HeapReAlloc
GetThreadPriority
LocalLock
GetStringTypeA
GetCommandLineA
CreateMutexA
RaiseException
CreateFileA
SetCriticalSectionSpinCount
FindClose
FindNextFileW
GetFullPathNameW
GetACP
FreeEnvironmentStringsA
GetNamedPipeHandleStateW
UnlockFileEx
CreateRemoteThread
Sleep
GetTimeZoneInformation
SetStdHandle
GetFileType
comctl32
InitCommonControlsEx
ImageList_GetImageRect
shell32
DoEnvironmentSubstW
SHGetPathFromIDListA
SHEmptyRecycleBinA
ShellExecuteW
InternalExtractIconListW
advapi32
RegRestoreKeyA
DuplicateToken
CryptEnumProvidersA
CryptSetKeyParam
CryptGenKey
CryptGetDefaultProviderW
RegEnumValueA
RegCreateKeyW
LookupPrivilegeDisplayNameA
RegQueryMultipleValuesW
CryptReleaseContext
RegEnumKeyExA
GetUserNameA
RegSetKeySecurity
RegDeleteValueW
RegConnectRegistryW
Sections
.text Size: 180KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 240KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ