Static task
static1
Behavioral task
behavioral1
Sample
7f04137d0ca839a3a77a707a530b3f17c03f7cc9db4fd5c4c4da8209528eebc6.exe
Resource
win7-20221111-en
General
-
Target
7f04137d0ca839a3a77a707a530b3f17c03f7cc9db4fd5c4c4da8209528eebc6
-
Size
107KB
-
MD5
52a1a2b181d13ff904448d85a1d62d8d
-
SHA1
14c7e1de348e26f617208cba386f86adcad45de4
-
SHA256
7f04137d0ca839a3a77a707a530b3f17c03f7cc9db4fd5c4c4da8209528eebc6
-
SHA512
c10fac60178ac245758550b3fbe15f6b530344a4c56e982f09e0ec57496eb299de2cce708b27fc43e13e5dfe2acc67f999788205d7eef798c37b8a97c03ccfaa
-
SSDEEP
3072:KXxngWz+O3OyG4GtLHVW4YEskNravTKJn:KJi9yGdHVnPNra+Jn
Malware Config
Signatures
Files
-
7f04137d0ca839a3a77a707a530b3f17c03f7cc9db4fd5c4c4da8209528eebc6.exe windows x86
5505839c035cf7ab5cbe4553adacc76c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_except_handler3
__set_app_type
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
wcslen
wcscpy
swscanf
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
kernel32
IsDBCSLeadByte
LocalUnlock
LocalLock
GlobalFree
GlobalUnlock
GlobalSize
GlobalLock
GlobalAlloc
LocalFree
LocalAlloc
lstrcpyW
MultiByteToWideChar
GetPrivateProfileStringW
GetPrivateProfileIntW
GetACP
WritePrivateProfileStringW
GetSystemDirectoryW
FreeLibrary
GetCurrentProcessId
GetProcAddress
LoadLibraryW
GetComputerNameW
lstrlenW
GlobalDeleteAtom
GlobalAddAtomW
GetModuleHandleW
GetLastError
GetModuleHandleA
GetStartupInfoA
WideCharToMultiByte
LoadLibraryA
gdi32
CreateCompatibleDC
DeleteDC
CreateCompatibleBitmap
SelectObject
CreatePen
TranslateCharsetInfo
GetNearestColor
DeleteObject
CreateFontIndirectW
SetBkColor
SetTextColor
LineTo
MoveToEx
BitBlt
CreateSolidBrush
user32
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
SendMessageW
DdeAddData
DdeCreateDataHandle
CloseClipboard
GetClipboardData
OpenClipboard
DdePostAdvise
DdeClientTransaction
InvalidateRect
ReleaseDC
GetDC
FlashWindow
SetTimer
PostMessageW
DdeCreateStringHandleW
DdeFreeStringHandle
SetWindowTextW
wsprintfW
DdeQueryStringW
DdeCmpStringHandles
DdeGetData
DialogBoxParamW
EndDialog
WinHelpW
CheckDlgButton
SendDlgItemMessageW
GetSysColor
LoadStringW
GetSystemMetrics
LoadIconW
DestroyWindow
ShowWindow
SetWindowLongW
GetWindowLongW
CreateWindowExW
CallWindowProcW
CharNextW
IsIconic
SetFocus
GetMenu
CheckMenuItem
IsClipboardFormatAvailable
EnableMenuItem
SetWindowPos
GetSystemMenu
PostQuitMessage
GetWindowPlacement
DdeAbandonTransaction
MoveWindow
GetClientRect
MessageBeep
FindWindowW
AppendMenuW
UpdateWindow
SetWindowPlacement
MessageBoxW
RegisterClipboardFormatW
DdeGetLastError
DdeNameService
DdeInitializeW
LoadAcceleratorsW
EndPaint
DrawIcon
DefWindowProcW
BeginPaint
DdeKeepStringHandle
KillTimer
GetDesktopWindow
DdeDisconnect
DdeConnect
CharUpperW
RegisterClassW
LoadCursorW
DdeUninitialize
comdlg32
ChooseColorW
ChooseFontW
shell32
ShellAboutW
comctl32
CreateStatusWindowW
CreateToolbarEx
ord2
winmm
sndPlaySoundW
waveOutGetNumDevs
ntlanman
I_SystemFocusDialog
nddeapi
ord600
ord612
mpr
WNetGetUserW
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE