Static task
static1
Behavioral task
behavioral1
Sample
32d9596ca9c84e880492550be84a15fc2882ea063988e40b3d0872aadc2297a4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
32d9596ca9c84e880492550be84a15fc2882ea063988e40b3d0872aadc2297a4.exe
Resource
win10v2004-20220812-en
General
-
Target
32d9596ca9c84e880492550be84a15fc2882ea063988e40b3d0872aadc2297a4
-
Size
12.1MB
-
MD5
c210e730c90642a7d9331599b4e1dd25
-
SHA1
bce34e4deff3766f41dbf5fb0ed8b7042fe5ccf6
-
SHA256
32d9596ca9c84e880492550be84a15fc2882ea063988e40b3d0872aadc2297a4
-
SHA512
c6ce98ea2b1a1ba9360c46fdd120f3d542eb00af66bfd40c3dab1c1430378277d66024c75206128edd9fbd13c94f0677b1a64fa7d3d5697bf879337a1234b9ee
-
SSDEEP
24576:3Wlem7xzhrEY0TI2LUmsFpiBB57iOpkydGAzbTTmJKb4opQJMoKEDt0GZFlMZWO7:3W5xVT2gmsqBB0YLdxHiJK03M7aFGW/
Malware Config
Signatures
Files
-
32d9596ca9c84e880492550be84a15fc2882ea063988e40b3d0872aadc2297a4.exe windows x86
5b869658dc6672f0e141be7a7bc58cc3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
FlushFileBuffers
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetTickCount
QueryPerformanceCounter
SetStdHandle
LoadLibraryA
GetCPInfo
GetOEMCP
WideCharToMultiByte
VirtualQuery
InterlockedExchange
RtlUnwind
InitializeCriticalSection
SetFilePointer
GetStartupInfoA
GetFileType
SetHandleCount
GetSystemInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameW
UnhandledExceptionFilter
GetModuleFileNameA
WriteFile
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetSystemTimeAsFileTime
CloseHandle
GetTempPathA
GetCurrentProcessId
GetCurrentThreadId
CompareStringA
GetModuleHandleA
ExitProcess
GetProcAddress
GetLastError
GetStdHandle
GetConsoleOutputCP
GetTempPathW
IsBadStringPtrA
GetACP
CompareStringW
TerminateProcess
Sleep
GetLocaleInfoW
GetCurrencyFormatW
GetDateFormatA
GetCurrencyFormatA
GetCurrentProcess
GetLocaleInfoA
IsBadStringPtrW
GetDateFormatW
GetCommandLineW
GetCommandLineA
HeapAlloc
HeapFree
user32
GetMessageTime
RegisterClassA
CheckMenuItem
SetDlgItemTextA
DialogBoxParamA
GetDlgItemTextA
LoadCursorA
ToAsciiEx
DestroyWindow
SetWindowPlacement
SetCursor
CloseClipboard
GetSystemMenu
SetTimer
ScreenToClient
MapDialogRect
CreateDialogParamA
PostQuitMessage
SendDlgItemMessageA
SetKeyboardState
SetCapture
KillTimer
MsgWaitForMultipleObjects
LoadIconA
MessageBeep
MessageBoxIndirectA
CreateMenu
SendMessageA
DrawEdge
ShowCaret
RegisterWindowMessageA
GetDC
GetKeyboardState
GetWindowPlacement
GetKeyboardLayout
RegisterClipboardFormatA
MessageBoxA
GetWindowLongA
GetClipboardData
CreateWindowExA
PeekMessageA
EmptyClipboard
GetDlgItem
EndDialog
DestroyCaret
GetSysColor
GetCursorPos
CheckDlgButton
ShowWindow
IsDlgButtonChecked
AppendMenuA
CheckRadioButton
OpenClipboard
InsertMenuA
SetWindowTextA
UpdateWindow
SetClipboardData
gdi32
SetTextAlign
MoveToEx
LineTo
SetTextColor
GetCharacterPlacementW
DeleteDC
CreateFontIndirectA
SetBkColor
ExcludeClipRect
SetPixel
UnrealizeObject
DeleteObject
SetMapMode
Rectangle
ExtTextOutW
RealizePalette
SelectPalette
SetPaletteEntries
CreatePen
GetTextMetricsA
IntersectClipRect
GetPixel
GetObjectA
GetStockObject
ExtTextOutA
UpdateColors
TextOutA
comdlg32
GetSaveFileNameA
ChooseColorA
GetOpenFileNameA
ChooseFontA
shell32
CommandLineToArgvW
ole32
CoCreateInstance
CoInitialize
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024KB - Virtual size: 1020KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ