Static task
static1
Behavioral task
behavioral1
Sample
073095a5a1a299d7917389313a1fc4452600ba7653bcb7d4aec74941327f6019.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
073095a5a1a299d7917389313a1fc4452600ba7653bcb7d4aec74941327f6019.exe
Resource
win10v2004-20221111-en
General
-
Target
073095a5a1a299d7917389313a1fc4452600ba7653bcb7d4aec74941327f6019
-
Size
812KB
-
MD5
7e749dde51c21f5620b98220948cc602
-
SHA1
45c487fd62c142cdf07b12815b9a49c4519af0d7
-
SHA256
073095a5a1a299d7917389313a1fc4452600ba7653bcb7d4aec74941327f6019
-
SHA512
f2b25a159e984ba9819b294b00ac6d0218768c7b996ef54e5f92c3381536a0560c4d19156a0fba717e4a0f6785b733c5d0ec8c90f5c72b4a902370475aaf1132
-
SSDEEP
24576:bHUjP2lBln5j8fDxjHgvA2YHmsqmnKEH5V5paFFb:bHt8jeYGdmndH8D
Malware Config
Signatures
Files
-
073095a5a1a299d7917389313a1fc4452600ba7653bcb7d4aec74941327f6019.exe windows x86
14216d0fe75208169eae36d3b91e8c74
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
GetCPInfo
GetCurrentProcess
LCMapStringA
GetStdHandle
SetEnvironmentVariableA
GetTimeZoneInformation
GetLocalTime
GetStartupInfoA
UnhandledExceptionFilter
MultiByteToWideChar
GetLongPathNameA
GetExitCodeThread
EnterCriticalSection
CreateMutexA
SetLastError
GetACP
LoadLibraryExA
OpenMutexA
FindNextChangeNotification
TerminateProcess
GetStringTypeW
GetModuleFileNameA
GetCommandLineA
GetSystemTime
GetModuleHandleA
GetLastError
GetVersion
HeapCreate
VirtualFree
CloseHandle
GetSystemTimeAsFileTime
ReadFile
FreeEnvironmentStringsA
GetCurrentThreadId
GetProcAddress
HeapDestroy
GlobalAddAtomA
TlsGetValue
SetStdHandle
FlushFileBuffers
GetCurrentThread
InterlockedIncrement
InterlockedExchange
SetFilePointer
GetEnvironmentStringsW
OutputDebugStringA
CompareStringW
HeapAlloc
InitializeCriticalSection
FreeEnvironmentStringsW
VirtualAlloc
DeleteCriticalSection
HeapReAlloc
QueryPerformanceCounter
GetTimeFormatW
GetEnvironmentStrings
GetOEMCP
InterlockedDecrement
ExitProcess
GetStringTypeA
GetModuleHandleW
lstrcatW
GetTickCount
FoldStringA
WriteFile
LeaveCriticalSection
LoadLibraryA
CompareStringA
TlsFree
TlsSetValue
HeapFree
TlsAlloc
MoveFileW
SetHandleCount
VirtualQuery
GetFileType
WideCharToMultiByte
RtlUnwind
IsBadWritePtr
GetCurrentProcessId
comdlg32
PrintDlgW
GetOpenFileNameA
comctl32
ImageList_Destroy
ImageList_DragEnter
ImageList_SetFlags
GetEffectiveClientRect
ImageList_DragShowNolock
DrawStatusTextA
ImageList_Draw
InitCommonControlsEx
ImageList_GetFlags
CreatePropertySheetPage
ImageList_SetOverlayImage
CreateStatusWindowA
DrawStatusText
CreatePropertySheetPageA
ImageList_LoadImageA
ImageList_SetDragCursorImage
ImageList_SetFilter
ImageList_DragLeave
ImageList_AddMasked
ImageList_Read
ImageList_GetImageCount
ImageList_Copy
InitMUILanguage
ImageList_EndDrag
user32
DdePostAdvise
FrameRect
SetProcessDefaultLayout
GetKeyNameTextA
wsprintfW
ClientToScreen
GetInputDesktop
RegisterClassA
AnimateWindow
InSendMessageEx
EnumPropsW
IsCharLowerW
EndPaint
KillTimer
DragDetect
EndMenu
DrawTextExA
GetClassInfoA
GetTabbedTextExtentA
CloseDesktop
GetClipboardData
CallWindowProcW
EnableMenuItem
EnumDisplayDevicesA
GetDlgCtrlID
EnableWindow
CreateWindowExA
CloseWindowStation
SetRect
GetClassInfoExA
DefWindowProcA
CreateWindowExW
CopyAcceleratorTableA
ChildWindowFromPointEx
SetDlgItemTextW
InvalidateRect
SetWindowLongW
GetKeyNameTextW
TranslateAcceleratorA
GetAsyncKeyState
SetClipboardViewer
NotifyWinEvent
VkKeyScanA
GetClassWord
GetTabbedTextExtentW
DlgDirSelectExW
TileWindows
LoadIconW
IsIconic
CreateMDIWindowA
MapWindowPoints
MessageBoxW
ChildWindowFromPoint
GetDialogBaseUnits
UnionRect
GetKBCodePage
BroadcastSystemMessageA
TranslateAcceleratorW
FreeDDElParam
RegisterClassExA
DialogBoxParamA
ExcludeUpdateRgn
GetGUIThreadInfo
GetMenu
GetCapture
GetDlgItemTextW
ShowWindow
SetWindowsHookA
ClipCursor
PostMessageW
FindWindowExA
OemKeyScan
DdeDisconnectList
DdeCreateStringHandleA
CharToOemBuffW
DestroyWindow
advapi32
CryptGetProvParam
CryptReleaseContext
ReportEventW
CryptContextAddRef
CryptGetDefaultProviderA
RegSetValueA
RegReplaceKeyA
RegSaveKeyA
LogonUserA
CryptSetProviderExW
CryptImportKey
CryptGenRandom
RegOpenKeyA
LookupPrivilegeDisplayNameA
RegCreateKeyExW
gdi32
GetTextExtentPointA
EqualRgn
GetTextCharacterExtra
CopyEnhMetaFileA
EnumFontFamiliesW
EndDoc
shell32
SHGetNewLinkInfo
SHAddToRecentDocs
SHEmptyRecycleBinW
Sections
.text Size: 196KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 396KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ