Static task
static1
Behavioral task
behavioral1
Sample
f64d22e26e93a797b7fa79637ee8236295f5f7b65a63b19705505dcdbf5983c9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f64d22e26e93a797b7fa79637ee8236295f5f7b65a63b19705505dcdbf5983c9.exe
Resource
win10v2004-20220812-en
General
-
Target
f64d22e26e93a797b7fa79637ee8236295f5f7b65a63b19705505dcdbf5983c9
-
Size
1.0MB
-
MD5
1cb15e41e8a9ed0b71f460bfd3305960
-
SHA1
f6e81d527177ddea69fa8d37f0833ac807919bcd
-
SHA256
f64d22e26e93a797b7fa79637ee8236295f5f7b65a63b19705505dcdbf5983c9
-
SHA512
47d011881862b3fce10c3328a7c3b975fec62731de7a8f24bba0ebdbfaeb7955dd0cfae615031d2904801ef23b8e1673e6b76d1e62b17b9c6cc3f1bdae7ff169
-
SSDEEP
12288:SvPUkupMGe8j7HYLrU8ogc2Eg1qMVCgVTVDge:hJqGfXHYLrZoXrgzCgRVDge
Malware Config
Signatures
Files
-
f64d22e26e93a797b7fa79637ee8236295f5f7b65a63b19705505dcdbf5983c9.exe windows x86
d30f3efe3d2bbce12bde3b6a09ee7f0d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
FindResourceA
LoadResource
GetEnvironmentVariableA
FreeResource
WaitForSingleObject
SetEvent
EnterCriticalSection
LeaveCriticalSection
lstrcpynA
DeleteCriticalSection
InitializeCriticalSection
Sleep
lstrcmpA
GetSystemInfo
GetVersionExA
OpenEventA
CreateEventA
CreateThread
IsValidCodePage
GetACP
TerminateThread
HeapCreate
SetHandleCount
HeapDestroy
SetEndOfFile
GetCurrentProcess
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
_lread
_lwrite
LCMapStringW
GlobalAlloc
GetStringTypeA
VirtualFree
HeapReAlloc
GetFileType
GetPrivateProfileIntA
lstrcatA
lstrcpyA
WritePrivateProfileStringA
CloseHandle
WriteFile
CreateFileA
lstrlenA
GetPrivateProfileStringA
DeleteFileA
LCMapStringA
VirtualAlloc
ResumeThread
HeapFree
GetStringTypeW
GetCurrentThreadId
GetSystemDirectoryA
CopyFileA
MoveFileA
LocalAlloc
CreateDirectoryA
GetModuleFileNameA
GetDriveTypeA
GetVolumeInformationA
FindFirstFileA
FindNextFileA
FindClose
GetFileSize
ReadFile
SetFilePointer
GetOEMCP
GetStdHandle
_lopen
_lcreat
GlobalFree
GlobalUnlock
_llseek
_lclose
lstrcmpiA
FreeLibrary
GetLogicalDrives
GetVersion
GetProcAddress
LoadLibraryA
GetLocalTime
WritePrivateProfileStructA
GetPrivateProfileStructA
FreeEnvironmentStringsA
UnhandledExceptionFilter
GlobalLock
HeapAlloc
LocalFree
HeapSize
WideCharToMultiByte
GetCPInfo
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
user32
MoveWindow
SetDlgItemInt
LoadIconA
GetDesktopWindow
AdjustWindowRect
SetWindowPos
GetWindowRect
IsWindowVisible
GetDlgItemTextA
SetWindowLongA
GetWindowLongA
RegisterClassA
ShowWindow
GetDlgItem
SetMenuItemInfoA
DrawEdge
FillRect
ClientToScreen
GetParent
SetDlgItemTextA
GetDlgCtrlID
SendDlgItemMessageA
DestroyWindow
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
BeginPaint
GetMenuItemInfoA
DefWindowProcA
CheckMenuItem
EndPaint
MessageBoxA
LoadCursorA
PostMessageA
DeleteMenu
GetClientRect
LoadStringA
SystemParametersInfoA
GetSystemMetrics
GetDlgItemInt
TrackPopupMenu
LoadMenuA
InflateRect
GetSysColor
CopyAcceleratorTableA
CreateAcceleratorTableA
DrawMenuBar
GetMenu
SetMenu
WinHelpA
GetActiveWindow
IsIconic
ShowCursor
PostQuitMessage
SetClassLongA
KillTimer
SetActiveWindow
IsWindow
UpdateWindow
LoadAcceleratorsA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetMessageA
DestroyAcceleratorTable
DestroyMenu
UnregisterClassA
IntersectRect
DrawFocusRect
DestroyIcon
EnableWindow
SendMessageA
EndDialog
wsprintfA
GetDC
ReleaseDC
EnableMenuItem
GetSubMenu
AppendMenuA
DialogBoxParamA
RegisterClipboardFormatA
CallNextHookEx
GetMenuState
GetMenuItemID
TrackPopupMenuEx
CallWindowProcA
WindowFromPoint
UnhookWindowsHookEx
GetMenuStringA
CreateWindowExA
LoadImageA
IsDlgButtonChecked
GetWindowTextA
CheckDlgButton
SetFocus
SetWindowTextA
RemoveMenu
GetMenuItemCount
IsChild
SetWindowsHookExA
CreatePopupMenu
SetTimer
SetCapture
ReleaseCapture
SetCursor
ChildWindowFromPoint
GetCursorPos
ScreenToClient
LoadBitmapA
MapWindowPoints
PtInRect
InvalidateRect
CheckRadioButton
IsWindowEnabled
ValidateRect
DrawIcon
gdi32
CreateDIBSection
SetBkColor
CreatePatternBrush
DeleteObject
CreateRectRgnIndirect
StretchBlt
SetStretchBltMode
DeleteDC
CreateDIBitmap
CreateCompatibleDC
SelectObject
MoveToEx
LineTo
RestoreDC
GetObjectA
CreatePen
SaveDC
CreateFontIndirectA
GetTextMetricsA
GetDeviceCaps
ExtTextOutA
StretchDIBits
SetBkMode
SelectPalette
CreatePalette
RealizePalette
GetSystemPaletteEntries
CreateSolidBrush
CreateBrushIndirect
Polyline
BitBlt
CreateCompatibleBitmap
PtInRegion
CombineRgn
CreateRectRgn
SetDIBitsToDevice
GetTextExtentPointA
TextOutA
CreateBitmap
GetClipBox
PatBlt
SelectClipRgn
GetTextExtentPoint32A
comdlg32
GetSaveFileNameA
ChooseColorA
GetOpenFileNameA
GetFileTitleA
shell32
DragFinish
DragQueryFileA
DragAcceptFiles
ole32
RevokeDragDrop
RegisterDragDrop
OleInitialize
OleUninitialize
ReleaseStgMedium
winmm
mixerGetDevCapsA
timeGetTime
mixerClose
mixerGetID
mixerOpen
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetControlDetailsA
waveOutGetNumDevs
mixerSetControlDetails
comctl32
ImageList_Create
PropertySheetA
ImageList_Destroy
ImageList_LoadImageA
ImageList_Add
ord17
CreateToolbarEx
realhook
ord1
svdvideo
ord84
ord78
ord93
ord82
ord101
ord76
ord87
ord89
ord102
ord79
ord75
ord88
ord83
coolmenu
ord32
ord21
ord23
ord17
ord16
ord14
ord33
ord22
ord31
ord24
ord3
ord18
ord5
ord9
ord10
ord20
ord7
ord27
ord26
ord6
ord19
mpegsys
ord46
ord51
ord49
ord48
ord34
ord47
ord36
httpfile
ord1
ord9
ord2
ord6
ord5
ord3
ord4
ord7
ord8
fft
ord5
dvdfile
ord2
ord1
ord3
dvdinfo
ord1
ord2
ord4
subpic
ord17
ord20
ord22
ord21
ord12
ord19
ord23
ord18
mmxaudio
ord83
ord76
ord82
ord75
ord72
ord73
ord71
ord81
Sections
.text Size: 222KB - Virtual size: 222KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 360KB - Virtual size: 499KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 408KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 54KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE