Static task
static1
Behavioral task
behavioral1
Sample
18b9182bc3cc01d0699fcc22db9237934ce738610e78ce8bfb750d4bc270ea15.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
18b9182bc3cc01d0699fcc22db9237934ce738610e78ce8bfb750d4bc270ea15.exe
Resource
win10v2004-20220812-en
General
-
Target
18b9182bc3cc01d0699fcc22db9237934ce738610e78ce8bfb750d4bc270ea15
-
Size
97KB
-
MD5
50a20bc53bdfbbba262defabb10e7af2
-
SHA1
1e2d57820f9b9fe854c64eab52ebae50cd5874fa
-
SHA256
18b9182bc3cc01d0699fcc22db9237934ce738610e78ce8bfb750d4bc270ea15
-
SHA512
e5d0cf42215bb2a964b5b106a287d9db7c0f4e744da3e453845e7cc3802cd710a7b39afe0623c5df2a01d77cc223f9080bf7704b40102cf6e8ea6bd0558b5c7c
-
SSDEEP
1536:o8YG+Yl6rhROR1d7EOAVHKK1LF+4J/n+KOLzCEPZEDIStEuOPCuTJolo4naeb:dfPGOkHtLF+4p+6EPuiKuTJoa4naeb
Malware Config
Signatures
Files
-
18b9182bc3cc01d0699fcc22db9237934ce738610e78ce8bfb750d4bc270ea15.exe windows x86
79abf76ebccaba135a066f5e0cde12eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsContentTypeA
SHQueryInfoKeyA
SHQueryValueExA
SHStrDupA
PathIsDirectoryA
SHSetValueA
PathGetCharTypeA
SHEnumValueA
kernel32
CreateFileA
LoadLibraryA
GetProcessHeap
GetACP
LocalAlloc
MoveFileExA
WaitForSingleObject
GetCurrentProcessId
Sleep
DeleteCriticalSection
VirtualFree
GetCurrentThread
lstrcpyA
GetOEMCP
VirtualAlloc
GetFileAttributesA
ExitProcess
WideCharToMultiByte
GetStringTypeW
ExitThread
lstrlenA
FindResourceA
GetModuleHandleA
gdi32
SelectPalette
GetDCOrgEx
SetTextColor
GetRgnBox
user32
EqualRect
GetMenuItemCount
SetWindowTextA
GetFocus
EndPaint
IsWindowVisible
EnableWindow
FindWindowA
ClientToScreen
IsChild
IsWindowEnabled
DrawIcon
FillRect
GetForegroundWindow
GetClassLongA
GetLastActivePopup
GetDlgItem
GetCapture
CallNextHookEx
DrawFrameControl
GetCursor
GetSysColor
DrawIconEx
GetMessagePos
GetKeyState
BeginDeferWindowPos
GetKeyNameTextA
GetMenu
DrawMenuBar
GetActiveWindow
MessageBoxA
CreateWindowExA
GetParent
EnableScrollBar
GetScrollInfo
CreatePopupMenu
DispatchMessageW
ShowWindow
SetCursor
BeginPaint
DeferWindowPos
GetClientRect
IsMenu
CheckMenuItem
CharNextA
GetMenuItemID
HideCaret
CharToOemA
FrameRect
GetSysColorBrush
DefWindowProcA
EndDeferWindowPos
GetDCEx
GetIconInfo
ShowScrollBar
IsDialogMessageA
GetSubMenu
DefMDIChildProcA
SetWindowPos
EnableMenuItem
RegisterClassA
SetTimer
GetWindowTextA
CharLowerA
GetClassInfoA
EnumThreadWindows
TrackPopupMenu
GetWindow
GetCursorPos
CreateIcon
GetPropA
GetDC
CallWindowProcA
GetMenuItemInfoA
GetMenuState
SetWindowLongA
CharLowerBuffA
GetClipboardData
GetScrollRange
CreateMenu
GetScrollPos
EnumChildWindows
DrawEdge
DispatchMessageA
DefFrameProcA
GetDesktopWindow
ntdll
wcscat
atol
msvcrt
rand
atol
tolower
calloc
memmove
sqrt
wcstol
memcpy
_acmdln
wcschr
swprintf
srand
mbstowcs
sprintf
advapi32
GetUserNameA
RegEnumValueA
RegCreateKeyA
oleaut32
RegisterTypeLib
SysAllocStringLen
SafeArrayGetElement
SysReAllocStringLen
VariantCopyInd
SysStringLen
GetErrorInfo
SafeArrayGetUBound
VariantChangeType
version
GetFileVersionInfoSizeA
VerInstallFileA
VerQueryValueA
Sections
text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ