Static task
static1
Behavioral task
behavioral1
Sample
67d8aadcddf5c6c39715263e1c847126e231fcc21f72da3a8f348d5aed817fa4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
67d8aadcddf5c6c39715263e1c847126e231fcc21f72da3a8f348d5aed817fa4.exe
Resource
win10v2004-20220812-en
General
-
Target
67d8aadcddf5c6c39715263e1c847126e231fcc21f72da3a8f348d5aed817fa4
-
Size
254KB
-
MD5
94ab58db38917178169d2f84c868167b
-
SHA1
b08c643a3f4375e0e86cf0e3b3b85d59db6bd836
-
SHA256
67d8aadcddf5c6c39715263e1c847126e231fcc21f72da3a8f348d5aed817fa4
-
SHA512
fbada33f2b530ebcdad150ab55fee4dca9bc2e66dbeb1a2fdfd55fda76903176c2d071f077a3a72f932308289c57996d74219eaefebe89d37c79e9f6aa75e876
-
SSDEEP
6144:WCYrkIQTB5tLWasTatDs8xr6yOeTmC5HWdwJSdB:ZdIQTJfr5OeAldB
Malware Config
Signatures
Files
-
67d8aadcddf5c6c39715263e1c847126e231fcc21f72da3a8f348d5aed817fa4.exe windows x86
5163642446e81ea84e15989b4766c84b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
malloc
free
memcpy
fopen
fread
fwrite
ftell
fseek
fclose
ferror
strstr
_strnicmp
strncmp
strncpy
_strdup
strlen
strcpy
strcat
memcmp
_stricmp
sprintf
strcmp
fabs
ceil
floor
localtime
mktime
gmtime
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
SetFileAttributesA
CreateFileA
SetFileTime
CloseHandle
SystemTimeToFileTime
LocalFileTimeToFileTime
HeapAlloc
HeapFree
EnterCriticalSection
WaitForSingleObject
LeaveCriticalSection
InitializeCriticalSection
CreateThread
GetCurrentThreadId
GetCurrentProcessId
SetFilePointer
SetEndOfFile
WriteFile
GetFileSize
ReadFile
SetLastError
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
GlobalAlloc
GlobalFree
TlsAlloc
DeleteFileA
GetLocalTime
DeleteCriticalSection
HeapReAlloc
Sleep
user32
SendMessageA
OemToCharA
CharLowerA
MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
GetWindowLongA
GetForegroundWindow
IsWindowEnabled
EnableWindow
EnumWindows
SetWindowPos
DestroyWindow
GetWindowRect
ScreenToClient
RedrawWindow
GetIconInfo
InvalidateRect
UpdateWindow
ReleaseCapture
BeginPaint
DrawStateA
EndPaint
SetCapture
CallWindowProcA
GetSystemMetrics
CreateWindowExA
SetWindowLongA
ValidateRect
GetParent
MapWindowPoints
RemovePropA
DefWindowProcA
SetPropA
GetPropA
MoveWindow
GetWindow
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
RegisterClassA
AdjustWindowRectEx
GetActiveWindow
ShowWindow
CreateAcceleratorTableA
PeekMessageA
MsgWaitForMultipleObjects
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetClientRect
FillRect
SetFocus
GetFocus
EnumChildWindows
PostMessageA
DefFrameProcA
IsChild
GetClassNameA
GetKeyState
SetCursorPos
LoadImageA
SetCursor
SystemParametersInfoA
GetCursorPos
RegisterWindowMessageA
DestroyIcon
CreateIconFromResourceEx
CreateIconFromResource
gdi32
GetStockObject
GetObjectType
GetObjectA
DeleteObject
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel
SetDIBits
comctl32
InitCommonControlsEx
imagehlp
MakeSureDirectoryPathExists
shlwapi
PathMatchSpecA
ole32
CoInitialize
RevokeDragDrop
wininet
InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetCloseHandle
InternetReadFile
Sections
.code Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ