Static task
static1
Behavioral task
behavioral1
Sample
437d013e35d4638d59bb83519ef42b8d81f09ee72c5fb321461662036a8e5f01.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
437d013e35d4638d59bb83519ef42b8d81f09ee72c5fb321461662036a8e5f01.exe
Resource
win10v2004-20221111-en
General
-
Target
437d013e35d4638d59bb83519ef42b8d81f09ee72c5fb321461662036a8e5f01
-
Size
660KB
-
MD5
9f5c5e7b4948f04bbf123bec807be506
-
SHA1
3858901c88be33e5e8d858f8eef5474991305b09
-
SHA256
437d013e35d4638d59bb83519ef42b8d81f09ee72c5fb321461662036a8e5f01
-
SHA512
fbc9d4db5e8e98c7643dad878dc7c4aa3d95193b2fa9cef71c20a06b8304be0677da7e1537ee42b1ae65e868f3dd27dba9955c6e747cda9127fd27f231b22ad5
-
SSDEEP
12288:YniRHIk/AtyuQK416/Cu+HEAjh75lmCsYOlSqVuMNwZlxsQxI:EiKMlNHEA1uHVufZlA
Malware Config
Signatures
Files
-
437d013e35d4638d59bb83519ef42b8d81f09ee72c5fb321461662036a8e5f01.exe windows x86
e4ba19d81b10032339b7598b2dea8cac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxW
SetWindowPos
DestroyWindow
GetKeyNameTextA
RegisterClassA
CopyIcon
EnumDisplaySettingsExA
GetMenuInfo
GetSysColorBrush
IsWindowVisible
ShowScrollBar
WINNLSGetEnableStatus
UnhookWinEvent
ShowWindow
ExitWindowsEx
CreateDesktopA
DdeFreeDataHandle
RegisterClassExA
CreateIconIndirect
TranslateAcceleratorW
SetClassWord
ChangeMenuW
CreateWindowExW
LoadIconA
DefWindowProcW
FlashWindow
comctl32
ImageList_DragMove
CreateToolbar
InitCommonControlsEx
ImageList_GetImageInfo
DrawInsert
CreatePropertySheetPage
ImageList_GetDragImage
ImageList_Destroy
CreateStatusWindowA
InitMUILanguage
ImageList_Write
ImageList_GetIcon
ImageList_Remove
ImageList_GetFlags
ImageList_EndDrag
CreateMappedBitmap
ImageList_ReplaceIcon
ImageList_DrawIndirect
CreatePropertySheetPageW
ImageList_GetImageRect
ImageList_LoadImageA
gdi32
GdiFlush
GetDeviceCaps
CreateEllipticRgn
GetObjectW
SetPixelV
DeleteDC
CreateScalableFontResourceA
CreateDCW
CreateCompatibleDC
SelectObject
CreateFontA
GetDCOrgEx
LineTo
SetColorAdjustment
OffsetRgn
GetICMProfileA
UpdateICMRegKeyW
GetTextExtentPointA
GetRgnBox
FixBrushOrgEx
kernel32
GetTimeFormatA
SetConsoleTitleW
VirtualFree
GetModuleFileNameA
GetSystemTimeAdjustment
GetOEMCP
GetCurrentThread
HeapValidate
SetConsoleCtrlHandler
RtlUnwind
GetModuleFileNameW
GetTimeZoneInformation
ReadFile
GetLastError
GetCurrentThreadId
GetPrivateProfileSectionW
GetModuleHandleA
EnumResourceNamesW
CompareStringW
DeleteCriticalSection
GetProcessHeap
CreateFileA
WaitNamedPipeA
GetConsoleCP
HeapAlloc
QueryPerformanceCounter
lstrcatA
GetDiskFreeSpaceExW
HeapFree
FindFirstFileW
GetStartupInfoW
lstrcpyn
GetAtomNameA
SetEnvironmentVariableA
FlushFileBuffers
LoadLibraryExA
CreateMutexA
GetCurrentProcessId
GetCommandLineA
InterlockedIncrement
GetCPInfo
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
OpenProcess
TerminateProcess
GetUserDefaultLCID
HeapCreate
CreateDirectoryExA
IsValidLocale
GetLocaleInfoW
SetComputerNameA
GetModuleHandleW
GetPrivateProfileIntA
CreateDirectoryW
LoadLibraryA
GetPrivateProfileSectionNamesA
WaitForMultipleObjectsEx
ReadFileEx
GetStringTypeA
GetProcessShutdownParameters
FindNextFileW
SetLastError
MapViewOfFileEx
IsValidCodePage
GetEnvironmentStrings
SetFileAttributesA
GetPrivateProfileIntW
InterlockedDecrement
SetFilePointer
ResetEvent
WriteConsoleA
GetStartupInfoA
GetStringTypeW
lstrcat
SetHandleCount
GetDateFormatA
GetACP
SetStdHandle
UnhandledExceptionFilter
GetLocaleInfoA
GlobalSize
EnumResourceLanguagesA
SetLocaleInfoA
SetLocalTime
GetStdHandle
LCMapStringA
ConnectNamedPipe
WriteFile
GetDiskFreeSpaceExA
SetFileTime
HeapDestroy
FindResourceW
TlsSetValue
SetConsoleWindowInfo
FreeEnvironmentStringsA
VirtualAlloc
ReadConsoleInputA
LeaveCriticalSection
ExitProcess
EnumCalendarInfoExA
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
GetProcAddress
GetSystemTimeAsFileTime
HeapReAlloc
CompareStringA
FindNextFileA
GetFileType
SetConsoleTitleA
OpenWaitableTimerW
IsBadReadPtr
GetConsoleMode
VirtualQuery
GetVolumeInformationA
GetCalendarInfoW
GetSystemDefaultLangID
CommConfigDialogA
lstrlen
TryEnterCriticalSection
FreeEnvironmentStringsW
GetProfileIntW
GetVersionExA
EnumSystemLocalesA
HeapSize
TlsGetValue
GetSystemDefaultLCID
GetEnvironmentStringsW
CloseHandle
SetThreadContext
GetConsoleOutputCP
GetTickCount
LocalFlags
CreateFileMappingA
GetLongPathNameW
InterlockedExchange
RtlZeroMemory
TlsAlloc
FreeLibrary
Sleep
EnumSystemCodePagesA
TlsFree
LCMapStringW
OpenMutexA
InitializeCriticalSection
WriteConsoleW
GetCurrentProcess
wininet
RetrieveUrlCacheEntryFileW
DeleteIE3Cache
HttpSendRequestExW
InternetCrackUrlW
FtpCreateDirectoryW
advapi32
CryptEnumProviderTypesW
LookupAccountSidA
CryptGetProvParam
RegQueryValueExA
LookupPrivilegeNameW
RegOpenKeyExW
LookupPrivilegeDisplayNameA
CryptSignHashA
LogonUserW
CryptSetProviderA
CryptContextAddRef
StartServiceA
LookupAccountNameW
InitiateSystemShutdownW
Sections
.text Size: 232KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ