Static task
static1
Behavioral task
behavioral1
Sample
f620bc2b3a5ce1b31a64ed11a2b399f30e0aeda854fc645940695f6bd64fb78e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f620bc2b3a5ce1b31a64ed11a2b399f30e0aeda854fc645940695f6bd64fb78e.exe
Resource
win10v2004-20220812-en
General
-
Target
f620bc2b3a5ce1b31a64ed11a2b399f30e0aeda854fc645940695f6bd64fb78e
-
Size
796KB
-
MD5
85c632a50749e2336cc9c8d9c269b9d8
-
SHA1
3a1a8dfa68ff443dd3b6b791fbfc230bf7a4c6b3
-
SHA256
f620bc2b3a5ce1b31a64ed11a2b399f30e0aeda854fc645940695f6bd64fb78e
-
SHA512
0d4a358b77f97fbc433e12b5d4e37a5ff173cb05f53f11cb78bcb25d33714ff0af9a33512cb95bac208636cb1a077cb62aad1428601b014ed58cd18acdb8a554
-
SSDEEP
12288:aCVdzqMyOzpAvCueJnjmz0149mG2YoAUdmadIzCu76PIheNkaDmLvevchG:aCvoO6vaQf9D2NRKCu7dheLqr
Malware Config
Signatures
Files
-
f620bc2b3a5ce1b31a64ed11a2b399f30e0aeda854fc645940695f6bd64fb78e.exe windows x86
de93a483e63c3dbf4a064aa0e96e0356
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalSize
CompareStringW
DeleteCriticalSection
RtlUnwind
OpenMutexA
ReadConsoleInputA
InterlockedExchangeAdd
TlsAlloc
GetTempFileNameW
MoveFileExW
SetLastError
LCMapStringW
QueryPerformanceCounter
ReadFileEx
WaitNamedPipeW
LeaveCriticalSection
GetCPInfo
FoldStringA
EnumDateFormatsExW
GetCommandLineA
HeapFree
WriteProfileSectionW
GetModuleFileNameA
WaitForMultipleObjects
InterlockedCompareExchange
CreateNamedPipeW
CloseHandle
WriteConsoleInputW
TerminateProcess
FreeEnvironmentStringsW
GetModuleHandleA
GetLocalTime
VirtualQuery
GetACP
GlobalFindAtomW
FlushFileBuffers
TlsSetValue
GetWindowsDirectoryA
lstrlen
InitializeCriticalSection
VirtualProtect
InterlockedDecrement
MultiByteToWideChar
OpenFileMappingW
HeapReAlloc
HeapCreate
FreeEnvironmentStringsA
IsBadReadPtr
GetCurrentThread
WriteFile
GetEnvironmentStrings
GetOEMCP
FindResourceExA
GetSystemTimeAsFileTime
VirtualFree
TlsFree
RtlZeroMemory
GetStringTypeA
GetLastError
ReadFile
VirtualAlloc
GetShortPathNameA
ExitProcess
HeapAlloc
GetVersion
CommConfigDialogA
EnumDateFormatsW
GetCurrentThreadId
DuplicateHandle
CreateDirectoryExA
SetConsoleMode
EnumDateFormatsA
SetFileTime
LocalCompact
EnumSystemLocalesW
SetStdHandle
GetSystemDirectoryA
LoadResource
TlsGetValue
GetStartupInfoA
HeapDestroy
OpenProcess
GetDateFormatA
LCMapStringA
GetCurrentProcessId
SetEnvironmentVariableA
GetStringTypeW
GetEnvironmentStringsW
UnlockFile
GetThreadPriority
SetHandleCount
UnhandledExceptionFilter
GetTimeZoneInformation
EnumDateFormatsExA
InterlockedExchange
GetTickCount
GetStdHandle
MapViewOfFile
GetCurrentProcess
WideCharToMultiByte
IsBadWritePtr
SetFilePointer
CreateFileMappingA
lstrcatW
EnterCriticalSection
WaitForDebugEvent
LoadLibraryA
SetFileAttributesA
LocalUnlock
GlobalGetAtomNameW
DeleteAtom
InterlockedIncrement
ReadConsoleOutputW
FillConsoleOutputCharacterA
LocalShrink
GetFileType
GetProcAddress
CreateMutexA
WaitNamedPipeA
GetSystemTime
CompareStringA
comctl32
ImageList_GetImageCount
ImageList_AddIcon
ImageList_Add
InitCommonControlsEx
DestroyPropertySheetPage
ImageList_Read
user32
AttachThreadInput
SetTimer
BroadcastSystemMessage
CreateAcceleratorTableW
CreateDialogParamW
DefWindowProcA
InvertRect
DefDlgProcA
GetTitleBarInfo
SetParent
CreateWindowExA
GetUserObjectSecurity
EmptyClipboard
GetGUIThreadInfo
LoadCursorA
DrawCaption
SetWindowsHookExA
OpenIcon
IsCharUpperA
EndPaint
IsCharLowerW
SetMenuItemInfoW
ShowCursor
RegisterClassA
CallMsgFilterA
DestroyWindow
GetWindow
ToAsciiEx
InSendMessageEx
SetMessageExtraInfo
CharLowerA
DispatchMessageA
IsIconic
ShowWindow
TileWindows
ShowOwnedPopups
GetClipboardData
RegisterClassExA
LoadAcceleratorsW
DeferWindowPos
GetCaretBlinkTime
MessageBoxA
LoadBitmapW
Sections
.text Size: 200KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 404KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ