Static task
static1
Behavioral task
behavioral1
Sample
c382089df8e525d45b504c1339b963e42d7e5f395189a9454e4f7e38073ee5bb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c382089df8e525d45b504c1339b963e42d7e5f395189a9454e4f7e38073ee5bb.exe
Resource
win10v2004-20220812-en
General
-
Target
c382089df8e525d45b504c1339b963e42d7e5f395189a9454e4f7e38073ee5bb
-
Size
576KB
-
MD5
790cd6ad56cc546f9880a081871edfce
-
SHA1
8653ca2f8a5a3a6583799cf20d1a975b6878e897
-
SHA256
c382089df8e525d45b504c1339b963e42d7e5f395189a9454e4f7e38073ee5bb
-
SHA512
9c65ae4e45e34d04068726525e2d95629fbd334bcb57511edb2de7fc299d6bc35c74af56c5d60f0246ee1548d2d31fd0d14b8cab8c82477da6c224cc6a716bb2
-
SSDEEP
6144:9Otb3r08h371uYI6aB3SUZm3RjNn3AvWct8fmX+kfwa8aNBMh9LIs39S7Si0Jhbd:9qIELiaRBUWct3HKaNO9RS7C/Da
Malware Config
Signatures
Files
-
c382089df8e525d45b504c1339b963e42d7e5f395189a9454e4f7e38073ee5bb.exe windows x86
bd1327cb757ec9015821a34db495e458
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
FlushFileBuffers
HeapReAlloc
GetProcessHeap
TerminateProcess
WideCharToMultiByte
InterlockedDecrement
GetLocaleInfoA
WriteFile
GetLastError
FindFirstFileExA
GetSystemTimeAsFileTime
GetCurrentThread
LCMapStringW
MultiByteToWideChar
GetSystemDirectoryA
GetModuleHandleA
GetTimeZoneInformation
GetStartupInfoA
GetCPInfo
CreateFileA
LeaveCriticalSection
CreateMutexA
GetCurrentProcessId
OpenMutexA
FreeLibrary
FillConsoleOutputCharacterA
HeapDestroy
CloseHandle
DeleteCriticalSection
IsValidCodePage
SetEnvironmentVariableA
GetFileType
GetProcAddress
LCMapStringA
CompareStringA
Sleep
GetEnvironmentStringsW
HeapCreate
WriteConsoleA
SetHandleCount
GetCurrentProcess
HeapFree
LoadLibraryA
GetUserDefaultLCID
SetStdHandle
HeapAlloc
TlsSetValue
InitializeCriticalSection
GetOEMCP
GetConsoleMode
SetConsoleCtrlHandler
GetModuleFileNameA
VirtualAlloc
ExitProcess
GetConsoleOutputCP
TlsFree
GetStringTypeA
UnhandledExceptionFilter
GetNamedPipeHandleStateA
TlsGetValue
InterlockedExchange
SetUnhandledExceptionFilter
GetDateFormatA
CreateSemaphoreW
GetCurrentThreadId
GetAtomNameA
InterlockedIncrement
GetConsoleCP
GetLocaleInfoW
GetStringTypeExW
WriteConsoleW
SetLastError
GetTimeFormatA
GetStdHandle
HeapSize
GetACP
VirtualQuery
GetVersionExA
TlsAlloc
CompareStringW
FreeEnvironmentStringsW
EnumSystemLocalesA
RtlUnwind
EnterCriticalSection
IsValidLocale
FreeEnvironmentStringsA
QueryPerformanceCounter
GetEnvironmentStrings
GetTickCount
SetFilePointer
GetCommandLineA
IsDebuggerPresent
ReadFile
VirtualFree
user32
DdeUnaccessData
ShowWindow
GetQueueStatus
GetScrollInfo
LoadKeyboardLayoutW
GetParent
AppendMenuA
EnumDisplaySettingsExA
CloseClipboard
MapVirtualKeyW
ToAscii
MoveWindow
RemovePropA
ValidateRect
SetTimer
CheckMenuItem
ShowCursor
EnumDisplayMonitors
DestroyCursor
GetSystemMetrics
RegisterClassA
FreeDDElParam
GetForegroundWindow
DispatchMessageW
GetSubMenu
ChangeDisplaySettingsW
DestroyCaret
CharToOemBuffA
DdeGetData
CreateMDIWindowA
OpenDesktopW
RegisterClassExA
HideCaret
RedrawWindow
LoadIconW
DialogBoxIndirectParamW
FindWindowExW
CreateWindowStationW
OpenIcon
GetKeyboardLayoutList
SetDlgItemInt
DlgDirSelectComboBoxExW
OpenWindowStationW
IsWindowVisible
CreateCursor
MsgWaitForMultipleObjectsEx
RegisterWindowMessageA
GetMenuDefaultItem
MessageBoxIndirectA
GetAncestor
RegisterDeviceNotificationW
DefWindowProcA
GetWindowDC
SetWindowsHookExA
InsertMenuItemA
GetGuiResources
CallNextHookEx
MessageBoxW
SetWindowPos
GetMenuStringW
DdeCreateDataHandle
GetPriorityClipboardFormat
DefFrameProcA
SetMenuItemInfoW
GetGUIThreadInfo
GetLastActivePopup
CreateWindowExA
GetWindowRect
DestroyWindow
GetKeyboardLayoutNameW
comctl32
ImageList_GetIcon
ImageList_Replace
InitCommonControlsEx
ImageList_SetIconSize
ImageList_ReplaceIcon
ImageList_SetBkColor
Sections
.text Size: 180KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ