Static task
static1
Behavioral task
behavioral1
Sample
42b3c2b77250f1ffb90299ffafed799890b175e555c368769105430a1a703d6e.exe
Resource
win7-20221111-en
General
-
Target
42b3c2b77250f1ffb90299ffafed799890b175e555c368769105430a1a703d6e
-
Size
772KB
-
MD5
25902635e9bf76834344d14722dfa7c0
-
SHA1
5be80039598c26e6b925a23a028577b1136a42ea
-
SHA256
42b3c2b77250f1ffb90299ffafed799890b175e555c368769105430a1a703d6e
-
SHA512
eccc60b61b1fee79c9745a3811246fdb36f1d4c43183379cd4b7554979bee5121966c7b510222fdb4f1a0edd5e5f1c1271942a52c4c14dc25dd9660f5f64f0a8
-
SSDEEP
12288:tZtn9+7f0VN8jFqcw13URDEa2lWiAgGsun0Zjh7XZRMwDA3mMbmEO+pblTEkImh:tf9+RatUBFM8su0ZjpXZN0FmEOGpYmh
Malware Config
Signatures
Files
-
42b3c2b77250f1ffb90299ffafed799890b175e555c368769105430a1a703d6e.exe windows x86
d031b2ae6d207dcf7f78782dfafac286
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
FormatMessageA
SetFileAttributesA
ReadFile
CreateFileA
SetFilePointer
GetSystemDefaultLangID
GetUserDefaultLangID
WriteFile
GetLastError
GetCurrentProcess
CopyFileA
ExitProcess
GetTempPathA
GetModuleFileNameA
GetModuleHandleA
GetCommandLineA
CreateProcessA
CloseHandle
CreateThread
CreateDirectoryA
IsDBCSLeadByte
GetSystemDirectoryA
GetWindowsDirectoryA
GetPrivateProfileStringA
GetExitCodeProcess
LoadLibraryA
GetProcAddress
FreeLibrary
WritePrivateProfileStringA
FindFirstFileA
FindNextFileA
FindClose
Sleep
RemoveDirectoryA
GetCurrentDirectoryA
GlobalFree
DeleteFileA
MultiByteToWideChar
WaitForSingleObject
GetDiskFreeSpaceA
GetTempFileNameA
GetFileType
HeapCreate
SetHandleCount
GetEnvironmentStringsW
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsW
GlobalAlloc
FreeEnvironmentStringsA
UnhandledExceptionFilter
TerminateProcess
HeapReAlloc
VirtualAlloc
HeapFree
VirtualFree
FlushFileBuffers
HeapDestroy
LCMapStringW
LCMapStringA
WideCharToMultiByte
GetOEMCP
GetACP
GetCPInfo
GetVersion
GetStartupInfoA
HeapAlloc
RtlUnwind
GetStringTypeA
GetStringTypeW
SetStdHandle
user32
ScreenToClient
DialogBoxParamA
MessageBoxA
SendMessageA
FindWindowA
DispatchMessageA
PeekMessageA
UpdateWindow
InvalidateRect
ShowWindow
EnableWindow
GetDlgItem
ExitWindowsEx
CharPrevA
CharNextA
LoadStringA
wsprintfA
GetDesktopWindow
SetWindowPos
SendDlgItemMessageA
IsDlgButtonChecked
GetAsyncKeyState
GetDlgItemTextA
GetParent
LoadIconA
SetClassLongA
SetDlgItemTextA
CreateDialogParamA
EndDialog
GetWindowRect
SetWindowTextA
DestroyWindow
gdi32
DeleteObject
SetTextColor
GetNearestColor
SetBkColor
GetStockObject
advapi32
RegCreateKeyA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegCloseKey
RegSetValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegQueryValueExA
RegOpenKeyExA
shell32
SHFileOperationA
SHGetSpecialFolderLocation
ShellExecuteA
SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA
ole32
CoInitialize
CoCreateInstance
OleInitialize
OleUninitialize
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.trdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE