Static task
static1
Behavioral task
behavioral1
Sample
fd358f5a3946ab5d6e78d269e16b0b6d426dcfd3b6dc7ba6b42f2dd9ea44d1f9.exe
Resource
win7-20220812-en
General
-
Target
fd358f5a3946ab5d6e78d269e16b0b6d426dcfd3b6dc7ba6b42f2dd9ea44d1f9
-
Size
902KB
-
MD5
9868d086489a9265592193ddbe6f3fa0
-
SHA1
22f820d459cab4830894232ff09d7a484bbaa544
-
SHA256
fd358f5a3946ab5d6e78d269e16b0b6d426dcfd3b6dc7ba6b42f2dd9ea44d1f9
-
SHA512
6cc93112657ed25d4c28f0ad968548d5f287511c022aae0d380d8fce7da03a98884a2cf3303be6d592187e97dd235b03ed9dddd3ef68023b46ffddb62b49a6d7
-
SSDEEP
12288:GaaaaaaaaaXrvjcQPc6iUOl1FnCvdTCRYKuiWNYmOU+:vrJPc/FDYimO
Malware Config
Signatures
Files
-
fd358f5a3946ab5d6e78d269e16b0b6d426dcfd3b6dc7ba6b42f2dd9ea44d1f9.exe windows x86
071fd1ce696e86b718a20ff12d4dabd1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
LoadLibraryA
LocalAlloc
LocalFree
LocalLock
LocalUnlock
MulDiv
MultiByteToWideChar
OpenFile
QueryPerformanceCounter
RaiseException
SetFileAttributesA
SetUnhandledExceptionFilter
SystemTimeToFileTime
GlobalUnlock
UnhandledExceptionFilter
WaitForSingleObject
WideCharToMultiByte
_lclose
_lcreat
_llseek
_lopen
_lread
_lwrite
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemTime
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetLastError
GetFileAttributesA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetAtomNameA
GetACP
FreeLibrary
FindFirstFileA
FindClose
DeleteFileA
DeleteAtom
CreateThread
CreateFileW
CloseHandle
AddAtomA
Sleep
GetModuleHandleW
TerminateProcess
VirtualAllocEx
user32
GetSystemMetrics
GetTopWindow
GetWindowDC
InsertMenuA
InvalidateRect
IsClipboardFormatAvailable
IsDlgButtonChecked
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
LoadAcceleratorsA
LoadCursorA
LoadIconA
LoadStringA
LoadStringW
MessageBoxA
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
RegisterClassA
RegisterClipboardFormatA
ReleaseCapture
ReleaseDC
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendMessageA
SetCapture
SetClipboardData
SetCursor
SetDlgItemTextA
SetFocus
SetRect
SetRectEmpty
SetScrollPos
SetWindowPos
SetWindowTextA
ShowWindow
SystemParametersInfoA
TranslateAcceleratorA
TranslateMessage
UpdateWindow
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetMessageA
GetMenu
GetKeyState
GetDlgItem
GetDC
GetClipboardData
GetClientRect
FillRect
EnumThreadWindows
EndPaint
EndDialog
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextA
DrawIcon
DrawFocusRect
DispatchMessageA
DialogBoxParamA
DestroyWindow
DestroyMenu
DestroyIcon
DeleteMenu
DefWindowProcA
CreateWindowExA
CreatePopupMenu
CloseClipboard
CheckRadioButton
CheckDlgButton
CharUpperBuffA
CharNextA
CharLowerA
BringWindowToTop
BeginPaint
LoadIconW
LoadCursorW
GetDlgItemTextA
gdi32
SetTextAlign
TextOutA
SetWindowOrgEx
SetWindowExtEx
SetTextColor
SetLayout
SetBkMode
SetBkColor
SelectObject
PatBlt
GetTextExtentPoint32A
TranslateCharsetInfo
GetEnhMetaFileA
GetLayout
GetDeviceCaps
DeleteObject
CreateMetaFileA
CreateFontIndirectA
CopyMetaFileA
CloseMetaFile
GetEnhMetaFileW
GetStockObject
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegQueryValueA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegSetValueA
shell32
ShellAboutA
ExtractAssociatedIconA
DragQueryFileA
DragFinish
DragAcceptFiles
ShellExecuteExA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
shlwapi
PathFindExtensionW
msvcrt
_adjust_fdiv
strchr
memmove
exit
_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_vsnprintf
Sections
.text Size: 855KB - Virtual size: 855KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ