Static task
static1
Behavioral task
behavioral1
Sample
1e90314e6374138300d5065b59922172eb50caaaee3599d3b5adeccb1ef915d1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1e90314e6374138300d5065b59922172eb50caaaee3599d3b5adeccb1ef915d1.exe
Resource
win10v2004-20221111-en
General
-
Target
1e90314e6374138300d5065b59922172eb50caaaee3599d3b5adeccb1ef915d1
-
Size
116KB
-
MD5
0b2785228e801e53b4d25925b3f9f6b4
-
SHA1
b52ad5800e88c1267806572fa1997f2d3467ac5b
-
SHA256
1e90314e6374138300d5065b59922172eb50caaaee3599d3b5adeccb1ef915d1
-
SHA512
c57c4dfcb33c00e93b94ec60da2f0848ac533bb42b1629993321ddddf56f181741abbbcd45ba6a9d47ad8c648d36dacb098eb13cc7e5a2148fb28188dc08f7b9
-
SSDEEP
3072:+pVu6kpVFLlX3PqzTdRPDOec/sFmbGi2m:yQFhXi5DE
Malware Config
Signatures
Files
-
1e90314e6374138300d5065b59922172eb50caaaee3599d3b5adeccb1ef915d1.exe windows x86
5c61f9e6582bce3b2c5e204910f7450a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GlobalFree
SetFilePointer
GetStartupInfoA
IsValidCodePage
user32
IsZoomed
GetDlgItem
DrawMenuBar
DrawIcon
CreatePopupMenu
BeginPaint
DestroyWindow
RegisterWindowMessageA
LoadCursorA
GetScrollRange
DefWindowProcA
EnableWindow
GetDesktopWindow
GetClientRect
DispatchMessageA
GetSubMenu
LoadIconA
InsertMenuA
msvcrt
log10
_except_handler3
exit
__setusermatherr
__p__commode
__p__fmode
_XcptFilter
_adjust_fdiv
_acmdln
__pioinfo
__set_app_type
_lseek
_write
memmove
_initterm
__getmainargs
advapi32
RegDeleteKeyA
OpenProcessToken
QueryServiceStatus
RegQueryValueExW
ole32
CoUninitialize
CoGetClassObject
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
CoSetProxyBlanket
StringFromIID
CoInitializeSecurity
CoFreeUnusedLibraries
CoInitialize
CoCreateGuid
OleUninitialize
CLSIDFromString
StgOpenStorageOnILockBytes
CoReleaseMarshalData
shell32
SHFileOperationA
ShellExecuteA
SHGetFileInfo
DragAcceptFiles
SHBrowseForFolderW
SHGetSpecialFolderLocation
ExtractIconExW
SHBrowseForFolder
ShellExecuteW
SHCreateDirectoryExW
comctl32
ImageList_LoadImageA
ImageList_DragEnter
ImageList_SetImageCount
PropertySheetA
ImageList_Remove
ImageList_DragShowNolock
ImageList_SetOverlayImage
ImageList_BeginDrag
PropertySheetW
DestroyPropertySheetPage
ImageList_Add
oleaut32
LoadTypeLib
VariantInit
SysReAllocStringLen
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayPutElement
SysFreeString
VariantCopyInd
SafeArrayPtrOfIndex
version
GetFileVersionInfoA
VerFindFileW
GetFileVersionInfoW
Sections
.text Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ