Static task
static1
Behavioral task
behavioral1
Sample
556483805144fc1eca7ab0100326f45fed9ea77f95ad5ec8ca0dfdaa3578edf7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
556483805144fc1eca7ab0100326f45fed9ea77f95ad5ec8ca0dfdaa3578edf7.exe
Resource
win10v2004-20221111-en
General
-
Target
556483805144fc1eca7ab0100326f45fed9ea77f95ad5ec8ca0dfdaa3578edf7
-
Size
756KB
-
MD5
99cef00e29670da8d3a4ff35916ca752
-
SHA1
48c633d7811e43a33213e3cce6f343c714361b2b
-
SHA256
556483805144fc1eca7ab0100326f45fed9ea77f95ad5ec8ca0dfdaa3578edf7
-
SHA512
4c79d30b6bc7592daa2e4c375d5dbb454787ce87f6908d027a4e1e027aa0ae2a8dbf676ca406ec50e37d94da331951c9fb1feacb3e900342d4bba110ffbabe56
-
SSDEEP
12288:/rS20Tf1AAHd6x/HkvNfMOt4js39S6YtCKRdvmIAoqtS9/XVtYAS9MOIvw+JZ49r:/e20Tf1AA9CyFt46T8C099/cMOI54CXz
Malware Config
Signatures
Files
-
556483805144fc1eca7ab0100326f45fed9ea77f95ad5ec8ca0dfdaa3578edf7.exe windows x86
e683674569025f8f2d0e3d08ea224c8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Add
ImageList_Replace
ImageList_SetIconSize
CreateStatusWindowW
ImageList_SetBkColor
DrawStatusTextA
ImageList_LoadImageW
InitCommonControlsEx
CreatePropertySheetPageA
ImageList_Write
ImageList_GetIcon
CreatePropertySheetPageW
ImageList_SetFilter
ImageList_Merge
ImageList_GetDragImage
user32
CreateWindowExW
RegisterClassA
GetCursorInfo
SetProcessDefaultLayout
DestroyWindow
MessageBoxA
DdeFreeStringHandle
MessageBeep
SetMessageExtraInfo
LoadKeyboardLayoutA
SendMessageTimeoutA
DdeCreateDataHandle
ShowWindow
DefWindowProcA
RegisterClassExA
UnhookWindowsHookEx
ToAsciiEx
DestroyCursor
ExcludeUpdateRgn
FindWindowExA
UnpackDDElParam
IsDialogMessageA
IsMenu
SetWindowsHookA
CallWindowProcW
DlgDirListComboBoxW
DdeGetData
shell32
ShellHookProc
DragQueryFileA
DragQueryFileW
advapi32
RegEnumValueW
CryptEnumProvidersA
RegRestoreKeyW
CryptGetUserKey
RegQueryValueExA
RegEnumKeyExA
CryptDecrypt
kernel32
FreeEnvironmentStringsA
VirtualFree
SetFilePointer
TlsFree
SetStdHandle
GetSystemTimeAsFileTime
GetModuleFileNameA
OpenSemaphoreA
GetStartupInfoW
EnterCriticalSection
GetFileType
CommConfigDialogW
SetEnvironmentVariableA
GetStartupInfoA
GetPrivateProfileStructA
CreateRemoteThread
GetCurrentProcessId
WriteConsoleOutputA
TlsSetValue
GetProcAddress
ExitProcess
GetCPInfo
LCMapStringW
GetStringTypeW
HeapFree
FlushConsoleInputBuffer
UnhandledExceptionFilter
QueryPerformanceCounter
SetConsoleCursorInfo
SetHandleCount
ExitThread
GetCurrentThread
GetCurrentProcess
HeapReAlloc
HeapCreate
CloseHandle
VirtualAlloc
SetLastError
SystemTimeToFileTime
TlsAlloc
GetStdHandle
GetFileSize
CompareStringA
FlushFileBuffers
HeapAlloc
GetPrivateProfileIntA
ContinueDebugEvent
OpenMutexA
GetEnvironmentStringsW
InterlockedDecrement
IsBadWritePtr
InitializeCriticalSection
InterlockedExchange
FindClose
WriteProfileStringA
LoadLibraryA
EnumCalendarInfoW
GetCommandLineW
DeleteCriticalSection
VirtualFreeEx
RtlUnwind
LocalReAlloc
GetTickCount
WideCharToMultiByte
EnumResourceTypesW
TlsGetValue
CreateMutexA
TerminateProcess
FreeEnvironmentStringsW
GetEnvironmentVariableW
GetLastError
GetFileTime
GetModuleHandleA
GetStringTypeA
VirtualQuery
InterlockedIncrement
MultiByteToWideChar
GetEnvironmentStrings
ReadFile
GetProfileSectionW
CreateNamedPipeA
WritePrivateProfileSectionA
GetLocalTime
GetTimeZoneInformation
GetModuleFileNameW
FillConsoleOutputAttribute
CompareStringW
LoadModule
LCMapStringA
GetSystemTime
GetVersion
LeaveCriticalSection
LocalCompact
GetCurrentThreadId
WriteFile
GetCommandLineA
HeapDestroy
Sections
.text Size: 168KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384KB - Virtual size: 383KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ