Static task
static1
Behavioral task
behavioral1
Sample
55b26cf9b538e7738d7abafa301dffc38eb180b6fd9a83bc202d2e4311d0ac26.exe
Resource
win7-20220901-en
General
-
Target
55b26cf9b538e7738d7abafa301dffc38eb180b6fd9a83bc202d2e4311d0ac26
-
Size
536KB
-
MD5
15d4807f7284d739e7a4ed95effd009c
-
SHA1
98f1efc82424b2c19bd6a3575eb19bac56f666ed
-
SHA256
55b26cf9b538e7738d7abafa301dffc38eb180b6fd9a83bc202d2e4311d0ac26
-
SHA512
6743499300756611b6ad0fcf66ed197d3a271e1ad52406f64c4d9a1137dabd5b09a037f1a935b094359181ae803b0125f7dde2fdde8c287f7b243a981406baa5
-
SSDEEP
12288:hUkUmzqjenW/LZJq5mGgbPV1kdLTIFEkD0rcDecHCXBm:hrUmRMYuV1CLTIFEkDccuXBm
Malware Config
Signatures
Files
-
55b26cf9b538e7738d7abafa301dffc38eb180b6fd9a83bc202d2e4311d0ac26.exe windows x86
7871ac5fa1f90802ddfdb1cf99e7519f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UnregisterClassA
GetDC
SystemParametersInfoA
SetWindowLongA
SendMessageA
LoadIconA
SetWindowTextA
PostQuitMessage
EnableWindow
GetWindowTextA
MessageBeep
SetFocus
GetWindow
GetWindowTextLengthA
LoadStringA
PostMessageA
GetDlgItem
GetParent
SetDlgItemTextA
MessageBoxA
LoadBitmapA
GetActiveWindow
CharNextA
DestroyWindow
CallWindowProcA
GetWindowLongA
DefWindowProcA
gdi32
DeleteObject
CreateFontIndirectA
GetDeviceCaps
comdlg32
GetOpenFileNameA
GetSaveFileNameA
kernel32
LCMapStringA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
FreeEnvironmentStringsA
GetStdHandle
UnhandledExceptionFilter
GetCPInfo
GetOEMCP
TlsGetValue
QueryPerformanceCounter
GetTickCount
GetEnvironmentStrings
GetCurrentProcessId
TlsSetValue
TlsFree
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
RaiseException
GetLastError
InitializeCriticalSection
DeleteCriticalSection
GetVersion
lstrcmpiA
lstrlenW
lstrlenA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
IsBadReadPtr
lstrcpyA
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
WaitForSingleObject
GetProcAddress
GetModuleHandleA
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
SetEvent
ResetEvent
GetModuleFileNameA
FreeLibrary
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
GetCurrentDirectoryA
CreateEventA
DeleteFileA
SetEndOfFile
GlobalAlloc
GlobalFree
CreateSemaphoreA
ReleaseSemaphore
CreateThread
Sleep
LoadLibraryA
DeviceIoControl
IsBadWritePtr
GetDriveTypeA
HeapDestroy
HeapReAlloc
HeapSize
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetLastError
TlsAlloc
SetUnhandledExceptionFilter
VirtualFree
HeapCreate
TerminateProcess
ExitProcess
SetStdHandle
FlushFileBuffers
FindResourceExA
WriteFile
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitThread
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
advapi32
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegEnumKeyExA
ole32
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
oleaut32
VarUI4FromStr
comctl32
CreatePropertySheetPageA
DestroyPropertySheetPage
PropertySheetA
ImageList_Create
InitCommonControlsEx
ImageList_ReplaceIcon
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lifxdiv Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kqjlyka Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewvvuty Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE