Static task
static1
Behavioral task
behavioral1
Sample
843c7ad32214a321ef728d870386347a100c4950017b44e93aa7a34deab6a186.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
843c7ad32214a321ef728d870386347a100c4950017b44e93aa7a34deab6a186.exe
Resource
win10v2004-20220812-en
General
-
Target
843c7ad32214a321ef728d870386347a100c4950017b44e93aa7a34deab6a186
-
Size
738KB
-
MD5
b996ac40c671078245125f93b094dc91
-
SHA1
07801468cf77ed1b8f77ce2da44e8a789fa727fa
-
SHA256
843c7ad32214a321ef728d870386347a100c4950017b44e93aa7a34deab6a186
-
SHA512
d5a6b0c7106b49e2a1801ec5b36d9612cb685645dbebec9b99a3b3200775eff533b695d40873cb99bb8c8f4d329157f484b7845bf4f4fe6790ccdfb1ba623e30
-
SSDEEP
12288:99xik0KOW+CgtI01QAC/nz7bVtSrVWRj8oSxt80sy8xqtqxxuAe8381AxbgUK:9bxaDtIQQVfnRtS5Y8n6/y8xpdea8SWU
Malware Config
Signatures
Files
-
843c7ad32214a321ef728d870386347a100c4950017b44e93aa7a34deab6a186.exe windows x86
4ac2898b217c53563c44182201b64fa8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCompressedFileSizeW
MulDiv
LocalFileTimeToFileTime
SetLastError
_hread
SystemTimeToTzSpecificLocalTime
GetStdHandle
GetWriteWatch
IsBadCodePtr
SetCurrentDirectoryW
SetErrorMode
GetVolumePathNameA
GetLogicalDriveStringsW
GetFileInformationByHandle
FindNextVolumeW
GetFileSize
SetTapeParameters
FindAtomW
WriteFileEx
GlobalAlloc
EnumResourceNamesA
GetProcessHeap
lstrcmpA
RemoveDirectoryA
EndUpdateResourceW
SetProcessWorkingSetSize
GetFileTime
GetComputerNameExA
QueryPerformanceFrequency
OpenFile
OpenWaitableTimerA
FindVolumeMountPointClose
SearchPathW
GlobalGetAtomNameW
DeleteVolumeMountPointA
EnumTimeFormatsW
UpdateResourceW
SetVolumeMountPointA
OpenFileMappingW
GetCommConfig
GetCommModemStatus
GetExitCodeProcess
TlsFree
SetStdHandle
RequestWakeupLatency
UnhandledExceptionFilter
FindResourceExW
GetSystemTimeAsFileTime
GlobalFree
LocalShrink
GlobalAddAtomA
GetUserDefaultUILanguage
GetAtomNameA
GetCPInfoExA
VerifyVersionInfoW
LocalAlloc
WritePrivateProfileStringA
OpenWaitableTimerW
SetMessageWaitingIndicator
OpenFileMappingA
GetThreadPriorityBoost
ResetEvent
VerifyVersionInfoA
SetPriorityClass
GetStartupInfoA
LocalLock
ResetWriteWatch
GetCommandLineW
IsBadReadPtr
GetVersionExA
QueueUserWorkItem
FindResourceA
WritePrivateProfileStringW
MoveFileExW
GetVersion
LCMapStringA
CreateIoCompletionPort
CancelDeviceWakeupRequest
ExitProcess
GetVolumeInformationA
GetModuleHandleW
GetLogicalDriveStringsA
FreeLibrary
SetMailslotInfo
GetProfileIntW
GetWindowsDirectoryW
GetCommState
SetFilePointerEx
EnumResourceNamesW
GetTimeFormatA
WriteFile
FileTimeToDosDateTime
VerSetConditionMask
ReplaceFileW
FatalExit
CreateDirectoryExA
QueueUserAPC
SetEndOfFile
GlobalLock
FoldStringA
GetSystemTime
user32
CreateWindowExW
GetParent
SetRect
FrameRect
GetSystemMetrics
BeginPaint
DestroyWindow
SetCapture
EnableMenuItem
EndPaint
GetClientRect
DialogBoxParamW
RegisterClassW
GetSubMenu
DrawTextW
WinHelpW
LoadBitmapW
wsprintfW
IntersectRect
PostQuitMessage
MoveWindow
ReleaseDC
OffsetRect
PtInRect
GetWindowRect
InvalidateRect
LoadStringA
EndDialog
LoadCursorW
DefWindowProcW
MessageBoxW
IsZoomed
WaitMessage
GetMenu
PeekMessageW
GetDlgItem
GetWindowPlacement
MessageBoxA
DispatchMessageW
ReleaseCapture
SetDlgItemTextW
TranslateAcceleratorW
ShowWindow
CharLowerBuffA
PostMessageW
LoadStringW
UnionRect
CheckRadioButton
LoadIconW
SendMessageW
GetDesktopWindow
LoadAcceleratorsW
InvertRect
FillRect
DrawMenuBar
GetMessageW
IsIconic
GetForegroundWindow
SetTimer
GetDC
IsDlgButtonChecked
UpdateWindow
GetDlgItemTextW
TranslateMessage
CheckDlgButton
shlwapi
PathAppendA
PathCombineA
comctl32
InitCommonControlsEx
advapi32
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
RegQueryValueExA
RegSetValueExW
RegOpenKeyExA
Sections
.text Size: 263KB - Virtual size: 263KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 260KB - Virtual size: 651KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ