Static task
static1
Behavioral task
behavioral1
Sample
d24d951290a132fa150b8daac14cce792c9d1b8578fabfcc3b0d874a60537d29.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d24d951290a132fa150b8daac14cce792c9d1b8578fabfcc3b0d874a60537d29.exe
Resource
win10v2004-20221111-en
General
-
Target
d24d951290a132fa150b8daac14cce792c9d1b8578fabfcc3b0d874a60537d29
-
Size
135KB
-
MD5
56fd7ea0428425ce065c28179538b884
-
SHA1
36d03d9a8fb829d11ff2d4fc65ac2af0111bebf4
-
SHA256
d24d951290a132fa150b8daac14cce792c9d1b8578fabfcc3b0d874a60537d29
-
SHA512
cad43134e4a1a259fb7791346fb4278772e0683bceb2fa7cddab7918bbead8716fb58a0fd77b8c4c8f525363540231cd7d2591280fb9aa21f2927d78339c07fb
-
SSDEEP
3072:luKp5wnwPp5w6gwRhGUpuktkPnyq1qdp3jonVAgyh82p6:8KpunSW6gdUBkfH1vVPF2p6
Malware Config
Signatures
Files
-
d24d951290a132fa150b8daac14cce792c9d1b8578fabfcc3b0d874a60537d29.exe windows x86
0438b75b4dd5ace0680dae5b17f15a01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
RemoveDirectoryW
GetSystemDirectoryW
LCMapStringA
SetEndOfFile
HeapSize
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLocaleInfoA
VirtualProtect
VirtualQuery
InterlockedExchange
RtlUnwind
LoadLibraryA
GetCPInfo
GetOEMCP
FlushFileBuffers
SetStdHandle
SetFilePointer
GetStringTypeW
WideCharToMultiByte
GetStringTypeA
GetStartupInfoA
GetFileType
GetTempPathW
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
MultiByteToWideChar
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
TerminateProcess
ExitProcess
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetStartupInfoW
GetModuleHandleA
lstrlenW
SizeofResource
LockResource
FreeResource
GetFileAttributesW
CloseHandle
LoadLibraryW
GetProcAddress
FreeLibrary
CreateDirectoryW
GetWindowsDirectoryW
WritePrivateProfileStringW
FindResourceW
LoadResource
CopyFileW
GetCurrentProcess
GetVersionExW
GetSystemInfo
GetSystemDefaultLCID
GetModuleFileNameW
GetACP
GetDriveTypeW
GetDiskFreeSpaceExW
GetSystemTimeAsFileTime
GetLastError
HeapAlloc
HeapFree
GetDiskFreeSpaceW
CreateFileW
ReadFile
SetHandleCount
LCMapStringW
user32
LoadStringW
LoadIconW
SendMessageW
GetMessageW
DispatchMessageW
IsDialogMessageW
TranslateMessage
LoadCursorW
RegisterClassExW
SetFocus
PostQuitMessage
DefWindowProcW
FillRect
SetWindowTextW
SetRect
CheckDlgButton
GetParent
GetDlgItemTextW
SetDlgItemTextW
IsDlgButtonChecked
DestroyWindow
DialogBoxParamW
BeginPaint
EndPaint
KillTimer
EndDialog
CreateDialogParamW
ShowWindow
UpdateWindow
PostMessageW
MessageBoxW
InvalidateRect
ExitWindowsEx
GetDC
ReleaseDC
LoadBitmapW
SetTimer
CreateWindowExW
FindWindowW
SetForegroundWindow
GetSystemMetrics
GetClientRect
GetWindowRect
SetWindowPos
GetDlgItem
gdi32
GetTextMetricsW
CreateSolidBrush
StretchDIBits
UpdateColors
SelectPalette
RealizePalette
DeleteObject
SetBkMode
SetTextColor
TextOutW
GetObjectW
SelectObject
StretchBlt
DeleteDC
BitBlt
CreateCompatibleDC
advapi32
OpenProcessToken
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
LookupPrivilegeValueW
AdjustTokenPrivileges
shell32
SHBrowseForFolderW
ShellExecuteW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
ole32
CoCreateInstance
CoInitialize
CoUninitialize
comctl32
ord17
ImageList_Create
ImageList_ReplaceIcon
shlwapi
PathFileExistsW
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83.0MB - Virtual size: 83.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ