Static task
static1
Behavioral task
behavioral1
Sample
84974fa657b7ed762de72d50caad68c62c4adde05288cd1bfb6c7b28f785564c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
84974fa657b7ed762de72d50caad68c62c4adde05288cd1bfb6c7b28f785564c.exe
Resource
win10v2004-20221111-en
General
-
Target
84974fa657b7ed762de72d50caad68c62c4adde05288cd1bfb6c7b28f785564c
-
Size
322KB
-
MD5
b5c5eba2b23b04a5a33e006c502fe541
-
SHA1
16e86661492ca073923f0a92504e3ba81defe2d8
-
SHA256
84974fa657b7ed762de72d50caad68c62c4adde05288cd1bfb6c7b28f785564c
-
SHA512
ed1ab3d76de122d7b6cacf0a4be4823d308ebda898ca4b6328000767a6c6af2bcd2b6ba870f8168bcff76146f0f46b31910efcbc70dc58e06694e41601df9669
-
SSDEEP
6144:pIbvCmlyvzr8WGZgDTaxIpIYJjIcYJI8v8wecbHkLjGeFYr1j98:pI7hyPFGZgDT4w7RYJRPkLyvrv8
Malware Config
Signatures
Files
-
84974fa657b7ed762de72d50caad68c62c4adde05288cd1bfb6c7b28f785564c.exe windows x86
a4d6e18d9b66de724ee86bd8fca3618c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
RegisterClassExA
EndMenu
CreateWindowExW
CharLowerW
GetShellWindow
WinHelpW
MessageBoxW
GetWindowThreadProcessId
RegisterClassA
GetMonitorInfoW
advapi32
CryptDestroyKey
CryptGetHashParam
LookupPrivilegeValueW
RegCreateKeyW
RegOpenKeyExA
CryptSetProviderExW
gdi32
TextOutA
CreateBitmap
GetCharacterPlacementA
OffsetRgn
GetCharABCWidthsA
SetGraphicsMode
GetLogColorSpaceW
CreateScalableFontResourceA
MoveToEx
RemoveFontResourceW
comctl32
ImageList_Create
ImageList_LoadImageW
CreateToolbar
ImageList_DragEnter
ImageList_SetBkColor
ImageList_GetBkColor
CreateStatusWindowA
DrawStatusTextA
ImageList_SetDragCursorImage
ImageList_DragLeave
CreateToolbarEx
ImageList_LoadImageA
ImageList_Duplicate
ImageList_GetFlags
ImageList_Remove
CreatePropertySheetPageA
ImageList_DragMove
ImageList_DrawEx
ImageList_Write
InitMUILanguage
CreatePropertySheetPage
CreateUpDownControl
ImageList_DrawIndirect
InitCommonControlsEx
ImageList_Copy
ImageList_SetIconSize
wininet
RetrieveUrlCacheEntryFileA
comdlg32
GetFileTitleW
ChooseColorW
PageSetupDlgW
kernel32
GetCurrentProcessId
HeapSize
GetStartupInfoW
GetStringTypeW
GetLastError
InitializeCriticalSection
GetModuleFileNameA
HeapFree
FreeLibrary
GetModuleFileNameW
SetLastError
IsDebuggerPresent
HeapAlloc
OpenMutexA
CreateFileA
EnterCriticalSection
GetDateFormatA
GetVersionExA
GetStdHandle
CloseHandle
RtlUnwind
DeleteCriticalSection
QueryPerformanceCounter
UnhandledExceptionFilter
CompareStringA
CreateMutexA
GetStartupInfoA
GetACP
GetUserDefaultLCID
SetHandleCount
GetCommandLineA
GetProcAddress
SetFilePointer
LCMapStringW
FlushFileBuffers
GetCurrentThreadId
ReadConsoleOutputAttribute
GetTimeZoneInformation
GetLocaleInfoA
TlsSetValue
LeaveCriticalSection
VirtualFree
TlsFree
GetFileType
GetSystemTimeAsFileTime
InterlockedIncrement
VirtualQuery
SetStdHandle
TlsAlloc
GetCommandLineW
FreeEnvironmentStringsW
ExitProcess
GetTickCount
CompareStringW
WriteFile
GetStringTypeA
GetCPInfo
HeapCreate
GetModuleHandleA
GetCurrentProcess
GetOEMCP
GetEnvironmentStringsW
GetCurrentThread
MultiByteToWideChar
FreeEnvironmentStringsA
HeapDestroy
GetLocaleInfoW
ReadFile
TerminateProcess
TlsGetValue
IsValidLocale
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
EnumSystemLocalesA
InterlockedExchange
IsValidCodePage
HeapReAlloc
Sleep
GetEnvironmentStrings
GetConsoleMode
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
LoadLibraryA
GetConsoleOutputCP
GetConsoleCP
LCMapStringA
SetEnvironmentVariableA
GetTimeFormatA
GetSystemDirectoryW
GetProcessHeap
VirtualAlloc
InterlockedDecrement
Sections
.text Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ