Static task
static1
Behavioral task
behavioral1
Sample
2708cc94a8b863cd5b7feb17ba1d794d02dc9d55049c9f023252e1461a5cd5bf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2708cc94a8b863cd5b7feb17ba1d794d02dc9d55049c9f023252e1461a5cd5bf.exe
Resource
win10v2004-20220812-en
General
-
Target
2708cc94a8b863cd5b7feb17ba1d794d02dc9d55049c9f023252e1461a5cd5bf
-
Size
665KB
-
MD5
83feb8452436640ce6e7011b8295b42b
-
SHA1
7ad13ed0d91a5a93e1dfc5534a9c258b05b9734e
-
SHA256
2708cc94a8b863cd5b7feb17ba1d794d02dc9d55049c9f023252e1461a5cd5bf
-
SHA512
6e0e0fbcfb3e2acc4f3bafb37aedbccca934f431cf2309aed24a96f3bd050c34cbfa68e06afdeba10ce13a6c620b002295364433988b06bd810da3c5636907f5
-
SSDEEP
12288:piWnzIPtOTYQb+U2ssS/NcTpryVfHBde0gZirkkk4NaYmdrt7g:piWzIPtOTYQbUssSlY9yVfHBde0gikkH
Malware Config
Signatures
Files
-
2708cc94a8b863cd5b7feb17ba1d794d02dc9d55049c9f023252e1461a5cd5bf.exe windows x86
2832e37d620b187e31c73b0c21d18e85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetOpenFileNameW
ChooseFontA
LoadAlterBitmap
ReplaceTextA
user32
RegisterClassA
MessageBoxA
ReleaseCapture
CreateWindowExW
ShowWindow
RegisterClassExW
DefWindowProcW
IsIconic
DestroyWindow
PtInRect
RegisterClassExA
shell32
FindExecutableA
ExtractIconW
DragQueryFileA
advapi32
LookupPrivilegeValueW
RegOpenKeyExW
RegCreateKeyW
AbortSystemShutdownW
RegSetValueA
CryptGenKey
RegSetValueExW
GetUserNameW
RegOpenKeyW
CryptSetProviderExA
GetUserNameA
CryptSetProviderW
RegCreateKeyExA
CryptDestroyHash
RegConnectRegistryW
RegQueryValueW
CryptDuplicateKey
RegSaveKeyA
LookupPrivilegeNameA
RegFlushKey
CryptSetProviderExW
RegSetValueExA
comctl32
ImageList_SetBkColor
ImageList_DrawEx
ImageList_SetOverlayImage
CreateUpDownControl
ImageList_GetBkColor
ImageList_ReplaceIcon
CreateToolbar
ImageList_GetImageCount
ImageList_SetImageCount
ImageList_SetDragCursorImage
ImageList_Create
ImageList_AddIcon
ImageList_Write
CreateStatusWindow
ImageList_GetDragImage
ImageList_LoadImageW
InitCommonControlsEx
CreateMappedBitmap
gdi32
DeleteEnhMetaFile
GetCharWidth32A
SetRectRgn
CombineTransform
GdiPlayDCScript
SetLayout
CloseFigure
GetPath
GetPixelFormat
GetWinMetaFileBits
GetColorAdjustment
SetBkColor
EnumEnhMetaFile
GetBrushOrgEx
SetAbortProc
Chord
CreateMetaFileW
SetEnhMetaFileBits
GetCharABCWidthsFloatW
SetTextColor
RoundRect
CreateHalftonePalette
PolyPolygon
GetCharABCWidthsFloatA
kernel32
GetACP
WriteFile
TlsAlloc
ResetEvent
GetModuleHandleA
CompareStringW
GetCommandLineA
GetCurrentProcess
GetModuleFileNameA
GetCurrentProcessId
GetEnvironmentStrings
GetStringTypeW
HeapReAlloc
DeleteCriticalSection
HeapDestroy
UnhandledExceptionFilter
VirtualQuery
InterlockedExchange
GlobalFlags
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetCurrentThread
MultiByteToWideChar
LCMapStringW
GetSystemTime
IsBadWritePtr
FreeEnvironmentStringsW
GetNumberFormatA
InterlockedDecrement
LoadLibraryA
GetCPInfo
LCMapStringA
RtlUnwind
LocalLock
GetLocalTime
VirtualAlloc
FreeEnvironmentStringsA
WideCharToMultiByte
TerminateProcess
SetEnvironmentVariableA
SetStdHandle
GetLastError
TlsGetValue
ExitProcess
InitializeCriticalSection
CompareStringA
QueryPerformanceCounter
GetVersion
SetFilePointer
TlsFree
HeapFree
InterlockedIncrement
GetOEMCP
GetCurrentThreadId
GetTickCount
CloseHandle
GetStringTypeA
GetFileType
HeapCreate
ReadFile
SetLastError
SetHandleCount
OpenMutexA
GetStdHandle
CreateMutexA
LeaveCriticalSection
HeapAlloc
TlsSetValue
GetStartupInfoA
GetProcAddress
FlushFileBuffers
EnterCriticalSection
GetEnvironmentStringsW
VirtualFree
Sections
.text Size: 282KB - Virtual size: 281KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 205KB - Virtual size: 231KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ