Static task
static1
Behavioral task
behavioral1
Sample
80dc64841e1d6d6db2728dd275cacd1fbeefcdeac90b680301932b3ecee8ede1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
80dc64841e1d6d6db2728dd275cacd1fbeefcdeac90b680301932b3ecee8ede1.exe
Resource
win10v2004-20220812-en
General
-
Target
80dc64841e1d6d6db2728dd275cacd1fbeefcdeac90b680301932b3ecee8ede1
-
Size
402KB
-
MD5
9db5399d6950d4aca4dc4163bfeed567
-
SHA1
9abed8e7cd1de87e0947aa7b04f1d5a48045e222
-
SHA256
80dc64841e1d6d6db2728dd275cacd1fbeefcdeac90b680301932b3ecee8ede1
-
SHA512
5f11110e0b62ed8e2ff4cf398998aebb7fe309291668cb52eb15f566aeb880a025261a148cceedcccc63b63f68cfd6d034d0f8d8497c659005572c80f1e967ec
-
SSDEEP
6144:YkilMRK1EAY2Zf0/CKKz9hS0oMgPPHnV2xhx/2dC2jmG2IaksDUTlLttReNj+A1:Hk1Eo0/ZSO8/2ljsIaXDW/RGjR1
Malware Config
Signatures
Files
-
80dc64841e1d6d6db2728dd275cacd1fbeefcdeac90b680301932b3ecee8ede1.exe windows x86
d7410cff09fb351b7796cffd1e88a826
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
Sleep
HeapFree
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
LoadLibraryW
RtlUnwind
HeapSize
SetStdHandle
WriteConsoleW
LCMapStringW
GetStringTypeW
HeapReAlloc
FlushFileBuffers
CreateFileW
lstrcpyA
CloseHandle
FillConsoleOutputAttribute
GetModuleHandleA
GetConsoleScreenBufferInfo
GetLastError
GetStdHandle
MultiByteToWideChar
lstrcatA
FreeEnvironmentStringsW
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
WriteFile
ExitProcess
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
SetConsoleCursorPosition
HeapCreate
WideCharToMultiByte
GetCurrentProcess
HeapAlloc
lstrlenA
CreateFileA
TlsFree
FillConsoleOutputCharacterA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
user32
GetDC
CheckMenuItem
EndPaint
ClientToScreen
SetCursor
SetTimer
GetWindowRect
IsMenu
InsertMenuItemA
PostQuitMessage
TrackPopupMenu
KillTimer
GetSubMenu
LoadStringA
LoadBitmapA
LoadMenuA
LoadCursorA
IsWindowEnabled
wsprintfA
GetClientRect
SendMessageA
BeginPaint
MessageBeep
GetMenu
SetWindowLongA
MessageBoxA
InvalidateRect
GetWindowLongA
SetClassLongA
GetDlgItem
EndDialog
DefWindowProcA
GetSysColor
GetCursorPos
CreatePopupMenu
GetClassInfoA
IsWindow
MessageBoxW
SystemParametersInfoA
GetSystemMetrics
SetWindowTextA
LoadImageA
gdi32
CreateSolidBrush
SetTextColor
CreateFontA
CreateFontIndirectA
GdiFlush
DeleteObject
SelectObject
Rectangle
CreatePen
GetObjectA
GetStockObject
comdlg32
ChooseColorA
GetFileTitleA
advapi32
CloseServiceHandle
OpenServiceA
DeleteService
RegQueryValueExA
OpenSCManagerA
ControlService
RegCloseKey
shell32
SHGetFolderPathW
SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
SHGetFolderPathA
ws2_32
WSAAsyncGetProtoByNumber
psapi
GetModuleInformation
version
GetFileVersionInfoW
shlwapi
StrChrA
PathAppendA
comctl32
ImageList_AddMasked
ImageList_SetBkColor
ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_Create
ImageList_GetImageCount
imm32
ImmGetOpenStatus
Sections
.text Size: 357KB - Virtual size: 357KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ