Static task
static1
Behavioral task
behavioral1
Sample
b0c98f509be63a25187c2cae47f9a772d1a88919d7a26be8965b2d69e89cfac9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0c98f509be63a25187c2cae47f9a772d1a88919d7a26be8965b2d69e89cfac9.exe
Resource
win10v2004-20220901-en
General
-
Target
b0c98f509be63a25187c2cae47f9a772d1a88919d7a26be8965b2d69e89cfac9
-
Size
768KB
-
MD5
7fd4f1a6f1478f905ec05ac53f81da1d
-
SHA1
07fcbb4fcc68166cf2cf7dc42d839400b6e1ae76
-
SHA256
b0c98f509be63a25187c2cae47f9a772d1a88919d7a26be8965b2d69e89cfac9
-
SHA512
89284bf93ad5c8f824dcbc6c9eaabe9ba86fcbbf5c86ea414bf4b038cfa60ea06fae38d6ae6b1b88d891e7e3e9a1aee1808db5b701405290a38e3cffae1f50d2
-
SSDEEP
12288:SdtyREiOp884Bw4FFS7wGzskG7pGK0ma1bUbzQH4wqXuEGT6kbBQ7/xCsTTVNtLF:ct1iOp884uzwGzs1pQdUb2sXBGGoq7/J
Malware Config
Signatures
Files
-
b0c98f509be63a25187c2cae47f9a772d1a88919d7a26be8965b2d69e89cfac9.exe windows x86
58c7b39be644e445fa48b2b9a2e16b9b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetDataFromIDListA
ShellExecuteExA
SHFileOperationA
comdlg32
PrintDlgW
GetSaveFileNameW
GetOpenFileNameA
ChooseColorA
kernel32
CompareStringA
UnmapViewOfFile
GetStartupInfoA
GlobalCompact
EnumResourceLanguagesA
LockFile
CreateDirectoryExA
FoldStringW
GetDateFormatA
GetThreadContext
OpenMutexA
OpenWaitableTimerW
IsDebuggerPresent
FindFirstFileW
GetModuleFileNameA
SetLocaleInfoA
GetStdHandle
GetUserDefaultLCID
GetSystemTimeAsFileTime
WriteProfileSectionA
GetPrivateProfileSectionNamesW
GetCurrentThread
FlushFileBuffers
HeapAlloc
VirtualProtect
WritePrivateProfileSectionW
MultiByteToWideChar
UnlockFileEx
InterlockedExchange
GetCurrentDirectoryA
QueryPerformanceCounter
HeapSize
LocalHandle
GetDiskFreeSpaceExW
GetConsoleScreenBufferInfo
SetEnvironmentVariableA
GetDiskFreeSpaceA
GetCurrencyFormatA
InitializeCriticalSection
LoadLibraryA
SetCurrentDirectoryA
VirtualAlloc
GetCommandLineA
lstrcmpiA
SetLastError
FreeEnvironmentStringsW
FindNextFileW
GetSystemInfo
LeaveCriticalSection
GetCurrentProcessId
CreateProcessW
GetComputerNameW
TlsAlloc
HeapLock
CreateMailslotW
RtlZeroMemory
GetStartupInfoW
GetStringTypeA
VirtualQuery
CompareStringW
HeapDestroy
EnumSystemLocalesW
GetLocaleInfoW
LCMapStringW
HeapCreate
WideCharToMultiByte
SetPriorityClass
IsValidCodePage
GetTimeZoneInformation
UnhandledExceptionFilter
GetEnvironmentStringsW
SetStdHandle
FreeEnvironmentStringsA
GetFileType
GetShortPathNameW
GetProfileStringA
WriteFileEx
GetVersionExA
GetExitCodeProcess
EnumDateFormatsExW
GetEnvironmentStrings
LCMapStringA
WriteConsoleInputA
EnterCriticalSection
GetACP
GetCPInfo
EnumCalendarInfoA
HeapReAlloc
TerminateProcess
FindFirstFileA
SetFilePointer
GetTempFileNameA
GetLocaleInfoA
DeleteCriticalSection
GetTimeFormatA
GetCommandLineW
GetProcAddress
ReadFile
IsBadWritePtr
CreateFileMappingA
GetModuleFileNameW
TlsGetValue
SetConsoleWindowInfo
HeapFree
ExitProcess
GetOEMCP
WritePrivateProfileStringW
CloseHandle
EnumSystemLocalesA
VirtualFree
HeapValidate
SetHandleCount
SetFileAttributesA
SetEvent
GetLastError
GetDiskFreeSpaceExA
FindAtomW
GetTickCount
GetModuleHandleA
AllocConsole
OpenSemaphoreW
WriteConsoleOutputA
GetCurrentProcess
VirtualLock
RtlUnwind
TlsSetValue
GetStringTypeW
IsValidLocale
TlsFree
WriteFile
GetLongPathNameW
CreateMutexA
GetCurrentThreadId
advapi32
RegCloseKey
LookupPrivilegeNameA
RegQueryMultipleValuesW
RegEnumKeyExA
RegQueryValueExA
CryptSetProviderW
GetUserNameA
CryptEncrypt
InitiateSystemShutdownA
RegDeleteValueA
CryptVerifySignatureW
CryptHashSessionKey
CryptEnumProviderTypesA
user32
DdeCreateDataHandle
ShowWindow
GetClassLongW
RegisterClassExA
DestroyWindow
MessageBeep
MessageBoxW
DispatchMessageA
RegisterClassA
GetPriorityClipboardFormat
GetMenuBarInfo
CreateWindowExW
DdeSetUserHandle
EnumDisplayDevicesW
ChildWindowFromPoint
DefWindowProcA
BroadcastSystemMessageW
GetMessageW
DrawIconEx
GetClassLongA
OpenDesktopA
GetCursorPos
SetCaretPos
comctl32
ImageList_GetFlags
ImageList_Duplicate
ImageList_Create
CreatePropertySheetPageA
ImageList_SetFlags
ImageList_DragEnter
ImageList_GetImageInfo
ImageList_SetBkColor
ImageList_Write
ImageList_DragMove
ImageList_GetImageCount
ImageList_LoadImageW
_TrackMouseEvent
DrawStatusTextW
ImageList_Draw
ImageList_GetBkColor
ImageList_SetDragCursorImage
InitCommonControlsEx
Sections
.text Size: 176KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 400KB - Virtual size: 398KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ