Static task
static1
Behavioral task
behavioral1
Sample
811fdcf364b471b858e14bc33ba06147c4d58fea5b6303a3af1239fdc326af8c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
811fdcf364b471b858e14bc33ba06147c4d58fea5b6303a3af1239fdc326af8c.exe
Resource
win10v2004-20221111-en
General
-
Target
811fdcf364b471b858e14bc33ba06147c4d58fea5b6303a3af1239fdc326af8c
-
Size
944KB
-
MD5
16c7bc2c5b912218d6952f20cdae1563
-
SHA1
78f8b0e251a7eb1a5d11e69995f5c08543e55056
-
SHA256
811fdcf364b471b858e14bc33ba06147c4d58fea5b6303a3af1239fdc326af8c
-
SHA512
3d9a7a702f18fcc2c942ae8c0548f73531715de56458c25b024f775d22975246c43c7ab0df9a00d94fd352d8fa75e85e7c2fffd256440ab7604879d195b0acc2
-
SSDEEP
24576:Oz+crnq6qhjDo0t52nEYy6lsoJWSX394W2nwU3ybbVvJ5MMeAAsV8q3X:AtWjDo0t52nEYy6lsoJWSX394W2nwU3I
Malware Config
Signatures
Files
-
811fdcf364b471b858e14bc33ba06147c4d58fea5b6303a3af1239fdc326af8c.exe windows x86
1685e9f9d4e4af6c472be82d837dce37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
FreeLibrary
LoadLibraryA
GetSystemDirectoryA
GlobalGetAtomNameA
ReleaseMutex
WaitForSingleObject
GetTickCount
GlobalDeleteAtom
SetLastError
LocalFree
IsBadReadPtr
GlobalAddAtomA
GetCommandLineA
GetLastError
Sleep
GetModuleFileNameA
FindClose
CreateMutexA
FindFirstFileA
SetErrorMode
FindNextFileA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
InterlockedIncrement
InterlockedDecrement
IsBadCodePtr
IsBadWritePtr
HeapReAlloc
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
TlsGetValue
MultiByteToWideChar
TlsAlloc
TlsSetValue
GetCurrentThreadId
LeaveCriticalSection
LocalAlloc
EnterCriticalSection
CloseHandle
InitializeCriticalSection
HeapAlloc
GetVersion
HeapFree
ExitProcess
RtlUnwind
RaiseException
GetStartupInfoA
user32
RedrawWindow
GetWindowRect
CallWindowProcA
SendMessageA
ReleaseDC
GetClientRect
GetDC
InvalidateRect
FillRect
GetParent
SetWindowLongA
GetDlgItem
GetSysColor
EndDialog
SendDlgItemMessageA
EnableWindow
DialogBoxParamA
SetFocus
EnumChildWindows
PtInRect
IsWindowVisible
GetClassNameA
WindowFromPoint
ValidateRgn
ClientToScreen
InvalidateRgn
GetKeyState
ValidateRect
EnumWindows
SetWindowPos
GetCursorPos
FindWindowA
PostMessageA
IsIconic
ShowWindow
GetMenu
IsWindow
GetWindowLongA
KillTimer
SetTimer
SystemParametersInfoA
GetClassLongA
SetClassLongA
GetWindow
GetUpdateRect
SetRect
BeginPaint
GetForegroundWindow
EndPaint
EqualRect
RemovePropA
UpdateWindow
SetWindowTextA
ScreenToClient
MessageBoxA
LoadStringA
SetCursor
DefWindowProcA
LoadCursorA
RegisterWindowMessageA
wsprintfA
GetSystemMetrics
GetDesktopWindow
GetPropA
SetPropA
MessageBeep
gdi32
CreateSolidBrush
CreateDCA
OffsetRgn
LineTo
SetROP2
TextOutA
DeleteObject
MoveToEx
SetBkMode
GetTextMetricsA
SetTextColor
GetStockObject
DeleteDC
CreateRectRgn
FrameRgn
SelectObject
GdiFlush
shell32
SHAppBarMessage
SHChangeNotify
advapi32
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
Sections
.text Size: 372KB - Virtual size: 369KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ