Static task
static1
Behavioral task
behavioral1
Sample
43f5c29a971db8ab6c5c6ad4be25f8871f2d941daeb5401dfc6490c965817099.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
43f5c29a971db8ab6c5c6ad4be25f8871f2d941daeb5401dfc6490c965817099.exe
Resource
win10v2004-20220812-en
General
-
Target
43f5c29a971db8ab6c5c6ad4be25f8871f2d941daeb5401dfc6490c965817099
-
Size
768KB
-
MD5
13737ae9daad7a4798b7f3a0b89213f9
-
SHA1
6a52e6008a1fee8e6878a0966b5caad83a7d9996
-
SHA256
43f5c29a971db8ab6c5c6ad4be25f8871f2d941daeb5401dfc6490c965817099
-
SHA512
a918e18855c283c00f3f55d908d08e0838eab3b4742e36606fa1fdfe313dd83d8c7e6c69832085f0e2e8829bbf0ad74213b790fea1350683001d7ec6e23853e8
-
SSDEEP
12288:DEjUHsQDHvJjJy1JD0e1i5d9DSd8WHQXY+7fcLgNp23jtdVRr0pLFz78RENoH7g1:CUXrJjJy1JD0z90QXYIE6p23jtHm7z7t
Malware Config
Signatures
Files
-
43f5c29a971db8ab6c5c6ad4be25f8871f2d941daeb5401dfc6490c965817099.exe windows x86
7147b4667957a1f9cdb95440e19ad9f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
ImpersonateDdeClientWindow
GetWindowThreadProcessId
EnumWindows
CallWindowProcA
GetDlgItemTextA
DestroyCursor
CopyIcon
RegisterClassExA
SetUserObjectInformationA
DefWindowProcA
ValidateRgn
OemKeyScan
RegisterClassA
IsWindowVisible
IsChild
CheckRadioButton
AppendMenuA
GetProcessDefaultLayout
CharLowerA
SetPropA
OpenWindowStationA
GetDlgItem
CreateWindowExA
GetClipboardSequenceNumber
GetQueueStatus
WINNLSEnableIME
GetAncestor
CallMsgFilterW
TrackPopupMenu
ClipCursor
CreateCaret
MapWindowPoints
GetSystemMetrics
EnumClipboardFormats
SubtractRect
SetMessageExtraInfo
DdeFreeDataHandle
RegisterHotKey
GetKeyboardType
GetWindow
MessageBoxA
SetMenuInfo
DdeCreateStringHandleW
DestroyWindow
EmptyClipboard
DdeDisconnect
ModifyMenuA
FrameRect
EndDeferWindowPos
TranslateMessage
GetAltTabInfo
DrawTextExA
DdeUninitialize
FreeDDElParam
wvsprintfA
BroadcastSystemMessageA
LookupIconIdFromDirectoryEx
GetMenuCheckMarkDimensions
RegisterClassW
DrawTextW
wininet
FtpSetCurrentDirectoryA
FtpCreateDirectoryA
InternetQueryDataAvailable
kernel32
SetHandleCount
EnumSystemLocalesA
GetStdHandle
ReadFile
VirtualLock
HeapFree
LeaveCriticalSection
GetShortPathNameA
MoveFileExA
TlsAlloc
WriteConsoleOutputAttribute
VirtualFree
GetThreadPriorityBoost
UnhandledExceptionFilter
FoldStringA
GetDiskFreeSpaceExW
GetSystemTimeAsFileTime
ReadConsoleOutputCharacterW
GetCommandLineA
GetFileAttributesW
LCMapStringA
GetEnvironmentStringsW
WriteFile
IsValidLocale
SetThreadIdealProcessor
WideCharToMultiByte
GetCommandLineW
GetNamedPipeInfo
CloseHandle
HeapSize
MoveFileA
FreeEnvironmentStringsA
GetEnvironmentStrings
IsValidCodePage
HeapReAlloc
IsDebuggerPresent
OpenMutexA
GetOEMCP
GetSystemInfo
TransactNamedPipe
VirtualProtect
GetLocaleInfoW
HeapAlloc
TlsSetValue
VirtualProtectEx
SleepEx
GetStringTypeW
GetCurrentThreadId
MultiByteToWideChar
QueryPerformanceCounter
DeleteCriticalSection
CreateFileW
GlobalFlags
GetACP
GetTimeFormatA
GetEnvironmentVariableA
GetVersionExA
CreateSemaphoreW
InterlockedExchange
CompareStringW
SetEnvironmentVariableW
WritePrivateProfileStringW
EnumResourceLanguagesW
GetTimeZoneInformation
GetCPInfo
ReadFileEx
GetLastError
GetProcAddress
WriteConsoleOutputCharacterW
FlushViewOfFile
LoadLibraryA
GetModuleHandleA
VirtualQueryEx
lstrlenA
GetUserDefaultLCID
GetPrivateProfileStructW
HeapDestroy
GetStartupInfoA
InitializeCriticalSection
VirtualQuery
FindResourceW
GetCurrentThread
GlobalAlloc
ConnectNamedPipe
GetStringTypeA
FindResourceExW
CopyFileExA
GetModuleFileNameA
SetStdHandle
GetCurrentDirectoryW
GetShortPathNameW
GetFileType
TlsGetValue
OpenFileMappingA
IsBadWritePtr
GetModuleFileNameW
GetCurrentProcess
SetConsoleScreenBufferSize
GetFileTime
ExitProcess
GetCalendarInfoW
CreateMutexA
TlsFree
SetEnvironmentVariableA
GetStartupInfoW
VirtualAlloc
lstrcpyW
GetLocaleInfoA
EnterCriticalSection
GetDateFormatA
GetCurrentProcessId
SetEndOfFile
RtlZeroMemory
GetModuleHandleW
SetFilePointer
GetPrivateProfileIntA
FlushFileBuffers
CompareStringA
ReleaseMutex
TerminateProcess
SetLocaleInfoA
HeapCreate
RtlUnwind
GlobalGetAtomNameW
LCMapStringW
GlobalGetAtomNameA
GetTickCount
SetSystemTime
SetLastError
GetProcessAffinityMask
FreeEnvironmentStringsW
comctl32
ImageList_SetIconSize
CreatePropertySheetPageW
InitCommonControlsEx
CreateStatusWindowA
Sections
.text Size: 188KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 404KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ