Static task
static1
Behavioral task
behavioral1
Sample
0dbd5c5b1c6f6a77849b1e322209799426cbd752eb2d3e61336c7bf7243414a9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0dbd5c5b1c6f6a77849b1e322209799426cbd752eb2d3e61336c7bf7243414a9.exe
Resource
win10v2004-20220812-en
General
-
Target
0dbd5c5b1c6f6a77849b1e322209799426cbd752eb2d3e61336c7bf7243414a9
-
Size
808KB
-
MD5
8f27038c92e7b41a45532a5452fdd4ac
-
SHA1
773345766bce27735e19215e194a09984d9928cf
-
SHA256
0dbd5c5b1c6f6a77849b1e322209799426cbd752eb2d3e61336c7bf7243414a9
-
SHA512
95ee2fd84149e9ce9cc1969845930e0f40335b2cf5ef9d11f2707ff6e89191c6b1470f3abdf0502d7a35b4513d3c6270cf85558e10cd65d29cf3136f18327139
-
SSDEEP
12288:GB8N1cpNME2KS3qepPndfbuM4bDlriPTJznA40S3jl6MnwwnNwSSJf:Gi1cjME2/qe5nVa/kPNzN0SEsHNfS
Malware Config
Signatures
Files
-
0dbd5c5b1c6f6a77849b1e322209799426cbd752eb2d3e61336c7bf7243414a9.exe windows x86
7cb2c236488838ad0d9cef0ee8c93f13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
DrawInsert
ImageList_ReplaceIcon
ImageList_GetImageRect
ImageList_Add
ImageList_DrawEx
InitCommonControlsEx
CreateUpDownControl
ImageList_GetFlags
CreateStatusWindowA
advapi32
CryptExportKey
RegRestoreKeyW
CryptSignHashA
RegCreateKeyA
CryptEnumProviderTypesW
CryptGetKeyParam
CryptGetUserKey
RegReplaceKeyA
RegCreateKeyW
RegSaveKeyA
CreateServiceA
RegQueryInfoKeyW
RegDeleteValueA
RegEnumKeyExA
StartServiceA
RegDeleteKeyA
LookupPrivilegeValueA
CryptAcquireContextA
RegRestoreKeyA
RegReplaceKeyW
GetUserNameA
RegQueryInfoKeyA
RegNotifyChangeKeyValue
RegDeleteKeyW
ReportEventW
shell32
SHGetSpecialFolderPathA
SHQueryRecycleBinW
SHFileOperation
FreeIconList
RealShellExecuteA
user32
EqualRect
SetScrollInfo
PtInRect
SetDlgItemTextA
CreateWindowExA
DdeInitializeA
RemoveMenu
GetMenuState
DefDlgProcA
InsertMenuA
ShowWindow
RegisterClipboardFormatW
SetDlgItemTextW
RegisterClipboardFormatA
LoadMenuA
BringWindowToTop
ReuseDDElParam
AnimateWindow
GetIconInfo
VkKeyScanExW
SetMenuContextHelpId
SetClassLongA
RegisterClassA
IsWindow
DdeFreeStringHandle
SetClassLongW
RegisterClassExA
DefFrameProcW
DrawStateW
SetCursorPos
SendDlgItemMessageA
GetUpdateRect
UpdateWindow
IsChild
SetClipboardData
MessageBoxW
InsertMenuItemA
SetParent
DefWindowProcA
SetMessageExtraInfo
TranslateAcceleratorA
GetClassInfoExA
GetDlgItemTextW
SetScrollRange
EnumDisplaySettingsExW
DestroyWindow
OemToCharBuffW
GetTabbedTextExtentA
ChangeDisplaySettingsExW
GetWindowDC
comdlg32
PrintDlgA
GetFileTitleW
GetFileTitleA
PrintDlgW
kernel32
TerminateProcess
GetCPInfo
LCMapStringA
GetCommandLineA
GetCurrentProcess
GetDateFormatA
WritePrivateProfileStringW
GetStringTypeA
HeapFree
TlsGetValue
ExpandEnvironmentStringsA
SetFilePointer
CreateMutexA
FreeEnvironmentStringsA
LoadLibraryA
GetStartupInfoA
HeapAlloc
GetSystemTimeAsFileTime
Sleep
WideCharToMultiByte
GetModuleFileNameA
InterlockedExchange
HeapDestroy
GetOEMCP
VirtualAlloc
GetUserDefaultLCID
GetFileType
FlushFileBuffers
HeapCreate
GetTickCount
GetTimeFormatA
GetStartupInfoW
IsDebuggerPresent
HeapSize
SetConsoleCtrlHandler
GetEnvironmentStrings
VirtualFree
ExitProcess
GetVersionExA
CompareStringA
GetProcAddress
UnhandledExceptionFilter
SetStdHandle
SetLastError
WriteFile
LCMapStringW
EnumSystemLocalesA
GetEnvironmentStringsW
GetModuleFileNameW
RtlZeroMemory
FreeEnvironmentStringsW
InitializeCriticalSection
OpenSemaphoreW
GetModuleHandleA
SetUnhandledExceptionFilter
LeaveCriticalSection
TlsFree
GetProcessHeap
VirtualQuery
TlsAlloc
CloseHandle
WriteConsoleA
GetTempFileNameA
EnterCriticalSection
WriteConsoleW
RtlUnwind
GetStringTypeW
GetCurrentThreadId
GetACP
QueryPerformanceCounter
CreateFileA
SetHandleCount
CompareStringW
HeapReAlloc
GetCommandLineW
GetLastError
GetThreadContext
GetPrivateProfileSectionNamesA
GetCurrentProcessId
VirtualFreeEx
MultiByteToWideChar
GetCurrencyFormatA
OpenMutexA
GetConsoleOutputCP
GetTimeFormatW
GetTimeZoneInformation
LocalCompact
FreeLibrary
CreateThread
IsValidCodePage
TlsSetValue
GetStdHandle
GetConsoleCP
GetConsoleMode
IsValidLocale
GetLocaleInfoA
SetEnvironmentVariableA
ReadFile
DeleteCriticalSection
GetLocaleInfoW
InterlockedIncrement
GetCurrentThread
InterlockedDecrement
Sections
.text Size: 208KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 396KB - Virtual size: 395KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ