Static task
static1
Behavioral task
behavioral1
Sample
95b6b73aebb36e792f9a3f43954fcf0d7506dc4ff79548ab89a6970e9cbfb745.exe
Resource
win7-20220901-en
General
-
Target
95b6b73aebb36e792f9a3f43954fcf0d7506dc4ff79548ab89a6970e9cbfb745
-
Size
721KB
-
MD5
241b27f617d5091e90fcdc80a7b73345
-
SHA1
310c218d7b10260edcab87b344e73b47717e0e59
-
SHA256
95b6b73aebb36e792f9a3f43954fcf0d7506dc4ff79548ab89a6970e9cbfb745
-
SHA512
a6a2d397fdd32143b984675e2a91a53f5c04e2b96035559e77b53d4125d6f7d0089dab6c5a0d11c44be54ee3cb3d225e6141b9907714643b69a904db04ce6f1a
-
SSDEEP
12288:jbvWtRlbbdWyQxz7fjEAikoynNPDXwli/1TPnKawfJQjGVN34Obd/LBkzIwO95Hm:jbvWtRldWyQJfjEAikowPDXwli/1TnfQ
Malware Config
Signatures
Files
-
95b6b73aebb36e792f9a3f43954fcf0d7506dc4ff79548ab89a6970e9cbfb745.exe windows x86
93c3be7c44374d1159b9dfe8ed7cddc1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VarUI1FromDate
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
kernel32
TlsAlloc
GetSystemTimeAsFileTime
GetStartupInfoA
GetProcAddress
ResetEvent
LoadLibraryA
lstrcpyW
GlobalLock
GetModuleHandleA
CloseHandle
lstrcatW
Sleep
GetCommandLineW
SetEvent
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoW
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
HeapSize
HeapSetInformation
GetCommandLineA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapReAlloc
RtlUnwind
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
HeapDestroy
HeapCreate
GetModuleFileNameW
GetStdHandle
WriteFile
HeapAlloc
IsProcessorFeaturePresent
ExitProcess
HeapFree
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetStringTypeW
MultiByteToWideChar
LCMapStringW
WideCharToMultiByte
GetCurrentThread
GetLastError
GetCurrentThreadId
SetLastError
GetModuleHandleW
TlsFree
IsValidCodePage
DecodePointer
TlsSetValue
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
user32
GetDlgItemInt
GetDlgItem
GetDlgCtrlID
EndDialog
OpenClipboard
CheckRadioButton
GetClientRect
IsClipboardFormatAvailable
CheckMenuRadioItem
SetMenu
GetSysColor
MessageBeep
GetSubMenu
SendMessageW
TrackPopupMenuEx
GetWindowTextW
SetWindowPos
PostQuitMessage
CharNextW
DialogBoxParamW
MessageBoxW
CheckMenuItem
LoadIconW
UpdateWindow
DestroyMenu
LoadStringW
GetProcessDefaultLayout
TranslateAcceleratorW
SetDlgItemInt
WinHelpW
EnableMenuItem
GetWindowLongW
LoadMenuW
HideCaret
ScreenToClient
GetClipboardData
OffsetRect
LoadAcceleratorsW
ChildWindowFromPoint
GetDesktopWindow
MapWindowPoints
ShowWindow
DestroyWindow
GetWindowRect
RegisterClassExW
LoadCursorW
SystemParametersInfoW
CreateDialogParamW
GetDialogBaseUnits
Sections
.text Size: 459KB - Virtual size: 458KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ