Static task
static1
Behavioral task
behavioral1
Sample
7736fde44c02a4e9d8d3a819399e66bad5b3a01865fbd959042a323d293bffae.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7736fde44c02a4e9d8d3a819399e66bad5b3a01865fbd959042a323d293bffae.exe
Resource
win10v2004-20221111-en
General
-
Target
7736fde44c02a4e9d8d3a819399e66bad5b3a01865fbd959042a323d293bffae
-
Size
220KB
-
MD5
44ae46641c501bed9486f8cd00d3184e
-
SHA1
2ce841025bab0072c1de615195237d28e8ec2f43
-
SHA256
7736fde44c02a4e9d8d3a819399e66bad5b3a01865fbd959042a323d293bffae
-
SHA512
9bc215045e3f31e56bb8917e4a147196b3832a216533c5aa62d1b850766eb23e7a5a943b202e6e6402cb51bf621e5434d593b383ae6a14bb73b03b9c78e76d47
-
SSDEEP
3072:m3qmuh8WvPZ1enHHm4yWGkpsSUarWe7/aZJsoldfItMnsQIAnPzD8nwZrsHri/9X:5bXx1eznfr6BdfwMnsV4v8ncrsLilha+
Malware Config
Signatures
Files
-
7736fde44c02a4e9d8d3a819399e66bad5b3a01865fbd959042a323d293bffae.exe windows x86
5c098b1d5fac81f3cee8459ff197d19b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
LoadResource
FindResourceA
WideCharToMultiByte
GetLastError
lstrlenA
GetShortPathNameA
lstrcpynA
IsDBCSLeadByte
lstrcmpiA
GetCurrentThreadId
GetCommandLineA
InitializeCriticalSection
LoadLibraryExA
CreateMutexA
DeleteCriticalSection
CopyFileA
GetCurrentProcess
lstrlenW
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
GetSystemDirectoryA
WriteFile
CreateFileA
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatA
CloseHandle
GetWindowsDirectoryA
GetModuleHandleA
GetModuleFileNameA
GetVersionExA
GetSystemDefaultLCID
GetLocaleInfoA
lstrcpyA
lstrcatA
InterlockedIncrement
GetUserDefaultLangID
HeapDestroy
GetEnvironmentVariableA
HeapSize
TerminateProcess
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
ExitProcess
GetVersion
GetStartupInfoA
RaiseException
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
LocalFree
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
InterlockedDecrement
SetStdHandle
GetStringTypeW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
IsBadReadPtr
IsBadCodePtr
SetFilePointer
HeapCreate
ReadFile
FlushFileBuffers
user32
DefWindowProcA
wsprintfA
RegisterClassA
EndDialog
EnumChildWindows
GetDlgItem
SendMessageA
CharNextA
PostThreadMessageA
DispatchMessageA
GetMessageA
PostMessageA
CreateWindowExA
GetSystemMenu
LoadIconA
SetForegroundWindow
FindWindowA
PostQuitMessage
EnableWindow
GetDlgCtrlID
EnumDisplaySettingsA
SetWindowTextA
WinHelpA
LoadStringA
GetWindowRect
EnableMenuItem
GetParent
SetWindowLongA
CallWindowProcA
DialogBoxParamA
advapi32
RegOpenKeyA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
ole32
CoTaskMemRealloc
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
CoUninitialize
CoSuspendClassObjects
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromProgID
CoCreateInstance
oleaut32
VariantClear
SysFreeString
RegisterTypeLi
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysStringLen
VarUI4FromStr
LoadTypeLi
comctl32
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
hccutils
FindDeviceByNameAndClass
IsDisplayValid
LoadDialogString
EnumDeviceByClass
GetAttachedMonitorDevice
FindResources
LoadSTRING
GetDisplayDevice
GetCUIDriverFromClassDevice
ReleaseClassDevice
Sections
.text Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.grdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE