Static task
static1
Behavioral task
behavioral1
Sample
1fcbdff3783d0d6021ecb38db528b8a5a9c3ea7a9c6db757b878481700421d35.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1fcbdff3783d0d6021ecb38db528b8a5a9c3ea7a9c6db757b878481700421d35.exe
Resource
win10v2004-20221111-en
General
-
Target
1fcbdff3783d0d6021ecb38db528b8a5a9c3ea7a9c6db757b878481700421d35
-
Size
336KB
-
MD5
e72021abe3bb7f339e9943b928dcb8bd
-
SHA1
74b65de43005e6f370c9fbee035437fd97fc75cf
-
SHA256
1fcbdff3783d0d6021ecb38db528b8a5a9c3ea7a9c6db757b878481700421d35
-
SHA512
43fb605448305ef2d0010601465033be2fc3ad52b3335762f8b4d7cc12c959720c1c3265ea4b3f768433a0b96510372e4aa7ff20f00a40b7e4ff0b16968a8352
-
SSDEEP
6144:GMnzpLCbRM6aexc3jDX+7I8ndH3BhWZr:h4M6Pc3r8ndXBMr
Malware Config
Signatures
Files
-
1fcbdff3783d0d6021ecb38db528b8a5a9c3ea7a9c6db757b878481700421d35.exe windows x86
3c791d7cac46f432b9cce14b2f9c1351
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CombineRgn
GetGlyphOutline
SetMagicColors
CreateICW
ScaleViewportExtEx
GetWindowExtEx
RoundRect
GetWorldTransform
SetSystemPaletteUse
PlayEnhMetaFile
GetDeviceCaps
CopyMetaFileA
DescribePixelFormat
PolyPolygon
kernel32
InterlockedIncrement
GetProcAddress
SetEnvironmentVariableW
HeapReAlloc
GetStringTypeW
GetTickCount
WriteConsoleA
WideCharToMultiByte
GlobalAddAtomA
EnumSystemLocalesA
TlsAlloc
GetStdHandle
GetEnvironmentStringsW
Sleep
HeapAlloc
InterlockedExchange
VirtualQuery
DeleteCriticalSection
SetFilePointer
LeaveCriticalSection
GetTimeZoneInformation
TlsFree
HeapFree
GetDateFormatA
CompareStringW
FormatMessageW
EnterCriticalSection
GetVersionExA
GetModuleFileNameA
SetStdHandle
CompareStringA
GetCurrentThreadId
GetPrivateProfileSectionW
GetLocaleInfoW
LoadLibraryA
GetACP
GetFileType
GetConsoleMode
SetLastError
LCMapStringW
CloseHandle
UnhandledExceptionFilter
GetStringTypeA
GetLocaleInfoA
GetCPInfo
LCMapStringA
SetConsoleCtrlHandler
GetOEMCP
ReadFile
TlsGetValue
GlobalGetAtomNameW
ExpandEnvironmentStringsW
GetTimeFormatA
FreeEnvironmentStringsW
GetUserDefaultLCID
VirtualFree
HeapCreate
GetCurrentProcessId
SetHandleCount
ExitProcess
TlsSetValue
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
HeapSize
InitializeCriticalSection
GetConsoleCP
WriteConsoleW
IsValidLocale
GetLastError
IsDebuggerPresent
FreeLibrary
FlushFileBuffers
GetConsoleOutputCP
lstrlenA
GetEnvironmentStrings
OpenMutexA
QueryPerformanceCounter
GetProcessHeap
HeapDestroy
CreateMutexA
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
MultiByteToWideChar
WriteFile
InterlockedDecrement
SetEnvironmentVariableA
FreeEnvironmentStringsA
TerminateProcess
VirtualAlloc
GetUserDefaultLangID
CreateFileA
GetCurrentThread
GetCurrentProcess
RtlUnwind
IsValidCodePage
user32
DestroyWindow
wvsprintfA
SetMenuInfo
EqualRect
ClientToScreen
CreateWindowExA
MessageBoxA
SetWindowContextHelpId
GetActiveWindow
SetDlgItemInt
GetMenuState
RegisterClassA
DefWindowProcA
ShowWindow
LoadBitmapA
CreateAcceleratorTableA
SetLastErrorEx
GetKeyNameTextW
IsChild
GetKeyboardLayoutNameW
SubtractRect
RegisterClassExA
comdlg32
GetSaveFileNameA
LoadAlterBitmap
wininet
DeleteUrlCacheGroup
FtpSetCurrentDirectoryW
InternetGetLastResponseInfoW
InternetCrackUrlW
HttpAddRequestHeadersW
FtpGetFileW
InternetTimeFromSystemTimeA
ReadUrlCacheEntryStream
advapi32
CryptGetDefaultProviderW
DuplicateTokenEx
CryptAcquireContextW
LogonUserA
RegDeleteKeyA
RegSaveKeyW
RegSetValueA
comctl32
ImageList_Create
ImageList_GetFlags
ImageList_Replace
ImageList_DragEnter
CreatePropertySheetPageW
ImageList_SetDragCursorImage
InitCommonControlsEx
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ