Static task
static1
Behavioral task
behavioral1
Sample
32a8bd2a32f38a42d5f350f5a61bddf792f9af241c7c26ef3ca1c7386fc38793.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
32a8bd2a32f38a42d5f350f5a61bddf792f9af241c7c26ef3ca1c7386fc38793.exe
Resource
win10v2004-20220812-en
General
-
Target
32a8bd2a32f38a42d5f350f5a61bddf792f9af241c7c26ef3ca1c7386fc38793
-
Size
688KB
-
MD5
4c48816e10c0611249644002285b7599
-
SHA1
e8bef8d58c964e90132371cf2edbe39a10a0a280
-
SHA256
32a8bd2a32f38a42d5f350f5a61bddf792f9af241c7c26ef3ca1c7386fc38793
-
SHA512
9bc8ee77cb13540606c2345a0383763ff34d95bbbcc4800f87d2b85dc44a27daf49bf29806e138e02b0e454200a733ac0184ac73f589f39a27d79668dbe30c6f
-
SSDEEP
12288:bJx06v0fl1Uwm/wdspsmaz4DRnRS8yfZ7vc4CaFyAy+A3y9T2uRIuIJZyy23mGxa:A00NnV41R8nfZo4XpSi91RiPUH
Malware Config
Signatures
Files
-
32a8bd2a32f38a42d5f350f5a61bddf792f9af241c7c26ef3ca1c7386fc38793.exe windows x86
4c2000905032d675d7b40c659d5d5479
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DefWindowProcW
SetProcessWindowStation
EnumDisplayDevicesA
MessageBoxW
DestroyWindow
GetMonitorInfoW
GetShellWindow
CharLowerBuffW
GetMenuStringW
SetKeyboardState
IsChild
GetAncestor
GetGuiResources
CreateWindowExW
RegisterClassExA
ShowWindow
GetKeyboardType
RegisterClassA
GetKeyboardLayoutList
DestroyCursor
GetDlgCtrlID
EnumDesktopsA
UnhookWindowsHookEx
comdlg32
ChooseFontA
ReplaceTextW
shell32
SheGetDirA
kernel32
lstrcpy
GetStdHandle
WriteFile
WritePrivateProfileStringA
HeapDestroy
GetSystemTime
SetComputerNameA
InterlockedExchange
ReadConsoleOutputCharacterA
GetStringTypeExA
DeleteCriticalSection
ExitProcess
GetEnvironmentStrings
GetThreadLocale
RtlZeroMemory
QueryPerformanceCounter
GetProcAddress
FormatMessageA
ReadConsoleOutputCharacterW
GetMailslotInfo
GetCurrentDirectoryA
SetThreadIdealProcessor
GetStartupInfoW
TlsGetValue
GetModuleFileNameA
WideCharToMultiByte
GetLocaleInfoA
GetComputerNameW
lstrcmpW
MultiByteToWideChar
EnterCriticalSection
HeapReAlloc
SleepEx
GetLocalTime
GetCommandLineW
VirtualFree
VirtualUnlock
LockFile
InterlockedIncrement
FlushInstructionCache
GetEnvironmentStringsW
CreateProcessW
lstrlenW
GlobalLock
GlobalDeleteAtom
FindClose
SetLastError
ReadConsoleInputA
GetConsoleTitleA
SystemTimeToTzSpecificLocalTime
lstrlen
IsBadWritePtr
LocalUnlock
MapViewOfFile
InterlockedDecrement
SetVolumeLabelA
FreeEnvironmentStringsW
GetTimeFormatA
SetConsoleCursorInfo
GetCPInfo
GetPrivateProfileStructA
GetModuleHandleA
CreateMutexA
TerminateProcess
VirtualProtectEx
CreateNamedPipeA
SetEnvironmentVariableA
LeaveCriticalSection
GetFileType
GetSystemTimeAsFileTime
SetStdHandle
GetTempPathW
InitializeCriticalSection
GetTickCount
GetSystemDirectoryW
GetCurrentProcessId
GetModuleFileNameW
GlobalUnlock
GetVersion
OpenProcess
GetModuleHandleW
CloseHandle
FreeEnvironmentStringsA
FlushFileBuffers
CompareStringA
GetPriorityClass
UnhandledExceptionFilter
SetConsoleOutputCP
VirtualAlloc
TlsFree
CompareStringW
LCMapStringA
SetConsoleMode
GetCurrentProcess
TryEnterCriticalSection
LoadLibraryA
ConnectNamedPipe
GetCurrentThread
CreateFileW
EnumCalendarInfoA
GetCurrentThreadId
HeapAlloc
HeapCreate
GetCommandLineA
GetTimeZoneInformation
TlsSetValue
LoadResource
ReadFile
WriteConsoleOutputAttribute
VirtualQuery
GetStartupInfoA
SetFilePointer
RtlUnwind
GetLastError
CreateEventW
LCMapStringW
GetStringTypeW
HeapFree
TlsAlloc
CommConfigDialogA
GetStringTypeA
OpenMutexA
WaitNamedPipeA
CreateMailslotW
SetHandleCount
ExpandEnvironmentStringsW
EnumResourceLanguagesA
DebugBreak
WriteConsoleW
UnlockFile
CreateNamedPipeW
GetPrivateProfileIntW
comctl32
MakeDragList
CreateStatusWindowA
DrawStatusText
ImageList_Copy
CreateToolbarEx
ImageList_Add
ImageList_Duplicate
ImageList_ReplaceIcon
ImageList_AddIcon
ImageList_EndDrag
_TrackMouseEvent
InitCommonControlsEx
ImageList_DragMove
CreateStatusWindowW
CreatePropertySheetPage
ImageList_DragEnter
ImageList_Draw
CreatePropertySheetPageA
ImageList_SetFlags
GetEffectiveClientRect
ImageList_Create
ImageList_GetImageInfo
DestroyPropertySheetPage
ImageList_GetImageRect
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 452KB - Virtual size: 451KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ