Static task
static1
Behavioral task
behavioral1
Sample
235933953c6b728b74826bea34e8125bac10ac29b7ddee1aa764fbc678733db3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
235933953c6b728b74826bea34e8125bac10ac29b7ddee1aa764fbc678733db3.exe
Resource
win10v2004-20220812-en
General
-
Target
235933953c6b728b74826bea34e8125bac10ac29b7ddee1aa764fbc678733db3
-
Size
336KB
-
MD5
8ba43c6e865fa5bc9cd64faf10cde105
-
SHA1
2d72f99948adf78c3ae077b91cff6584a961a5d4
-
SHA256
235933953c6b728b74826bea34e8125bac10ac29b7ddee1aa764fbc678733db3
-
SHA512
27564d0cc8135a5649a890d5d74172e7b289e0ffb6926714b9a90a5803d4819672d3de02e9be6e6a9ea6effc3bb1c127ab34f95309c528c175e4b63aaddb1f51
-
SSDEEP
6144:/bZo4idvoQLJqAzDK2mmo4IR6OCuJonu892MZB/xDPDDZ:T64idvdM7mjI9JoD4MP/xD
Malware Config
Signatures
Files
-
235933953c6b728b74826bea34e8125bac10ac29b7ddee1aa764fbc678733db3.exe windows x86
9b48d06361f7698c28b266692de98bb8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_DragEnter
CreateMappedBitmap
DrawStatusTextW
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Replace
ImageList_DragMove
_TrackMouseEvent
DrawStatusText
MakeDragList
ImageList_Create
ImageList_ReplaceIcon
ImageList_GetIconSize
InitCommonControlsEx
user32
ShowWindow
ScreenToClient
DdeAccessData
BroadcastSystemMessage
WaitMessage
GetForegroundWindow
CharToOemW
DestroyWindow
GetLastActivePopup
RemoveMenu
DlgDirListA
DefFrameProcA
TabbedTextOutA
GetCaretPos
SetDeskWallpaper
GetKeyboardLayoutList
GetMenuContextHelpId
GetWindowRgn
DdeConnectList
GetDlgItemTextA
OemToCharA
RegisterClassExA
PostQuitMessage
IsWindowUnicode
CreateDesktopA
SetDlgItemInt
GetTabbedTextExtentW
GetUserObjectInformationW
SetSysColors
DestroyMenu
RegisterClassA
DlgDirSelectComboBoxExA
GetClassInfoW
GetKeyboardLayoutNameA
CreateDesktopW
ReuseDDElParam
CheckDlgButton
CharNextA
GetMenuItemID
DialogBoxParamA
ExcludeUpdateRgn
CreateWindowExW
CallMsgFilterA
DlgDirListW
SetWindowContextHelpId
LockWindowUpdate
RegisterHotKey
MessageBoxA
AppendMenuW
SetDoubleClickTime
MapVirtualKeyW
DefMDIChildProcA
GetInputDesktop
BroadcastSystemMessageA
DefWindowProcW
DdeSetQualityOfService
UnregisterClassW
InvertRect
LoadStringA
CloseWindow
IsWindowEnabled
MessageBoxExA
IsRectEmpty
wininet
ShowClientAuthCerts
UrlZonesDetach
InternetSetDialState
InternetCloseHandle
FtpGetCurrentDirectoryW
FtpSetCurrentDirectoryA
CommitUrlCacheEntryW
InternetQueryOptionA
comdlg32
GetFileTitleW
advapi32
CryptGetDefaultProviderW
LookupPrivilegeDisplayNameW
RegDeleteValueW
CryptSetProviderExA
LogonUserA
RegReplaceKeyA
RegSetValueExW
kernel32
CreateDirectoryA
HeapDestroy
GetConsoleTitleA
EnumSystemLocalesA
FreeEnvironmentStringsA
LoadLibraryA
SetHandleCount
ExitProcess
GetCPInfo
GetCurrentThreadId
GetEnvironmentStrings
GlobalGetAtomNameW
Sleep
TlsGetValue
TlsFree
SetConsoleWindowInfo
GetConsoleOutputCP
ReadConsoleInputW
GetVersionExW
DeleteCriticalSection
HeapCreate
IsValidCodePage
LoadLibraryExA
GetCurrentProcess
SetUnhandledExceptionFilter
GetLocaleInfoW
UnhandledExceptionFilter
GetCurrentProcessId
GetStringTypeW
GetConsoleMode
WideCharToMultiByte
GetComputerNameA
SetEnvironmentVariableA
IsValidLocale
SetFilePointer
GetPrivateProfileIntW
TerminateProcess
LCMapStringW
FindAtomW
GetVersionExA
EnumResourceLanguagesW
GetLocaleInfoA
CreateEventA
SetConsoleCtrlHandler
RtlUnwind
HeapSize
WriteConsoleA
FlushFileBuffers
GetFullPathNameA
SetConsoleOutputCP
GetDateFormatA
CreateFileMappingW
LeaveCriticalSection
CompareStringW
MultiByteToWideChar
OutputDebugStringA
CreateMutexA
TlsAlloc
SetThreadPriority
InitializeCriticalSection
LCMapStringA
TlsSetValue
EnterCriticalSection
SetLastError
CreateFileA
GetProcessHeap
DeleteAtom
WriteFile
RemoveDirectoryA
GetUserDefaultLCID
GetTimeFormatA
GetModuleFileNameA
GetFileType
GetTimeZoneInformation
CloseHandle
InterlockedExchange
OpenMutexA
FreeLibrary
HeapAlloc
CreateMailslotW
GetCurrentThread
GetStartupInfoA
GetCommandLineA
GetModuleHandleA
WaitForDebugEvent
GetSystemTimeAsFileTime
GetEnvironmentStringsW
QueryPerformanceCounter
SetConsoleCursorInfo
VirtualQuery
InterlockedDecrement
FreeEnvironmentStringsW
WriteConsoleW
ReadFile
SetStdHandle
HeapFree
VirtualAlloc
IsDebuggerPresent
GetACP
WaitForSingleObjectEx
VirtualFree
GetConsoleCP
GetOEMCP
GetProcAddress
WriteProfileStringW
GetTickCount
GetLastError
GetStringTypeA
InterlockedIncrement
HeapReAlloc
CompareStringA
GetStdHandle
GetModuleFileNameW
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ