Static task
static1
Behavioral task
behavioral1
Sample
960c6cd16cdc6e4c549759bde371ba8a861b588c62acfef0af738ed7301ca7cb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
960c6cd16cdc6e4c549759bde371ba8a861b588c62acfef0af738ed7301ca7cb.exe
Resource
win10v2004-20220812-en
General
-
Target
960c6cd16cdc6e4c549759bde371ba8a861b588c62acfef0af738ed7301ca7cb
-
Size
408KB
-
MD5
8a61bd2dc05a9119eeb5aaa81045b413
-
SHA1
9735c03f6ef49d16d49e13388939482f53ff1835
-
SHA256
960c6cd16cdc6e4c549759bde371ba8a861b588c62acfef0af738ed7301ca7cb
-
SHA512
c1caebe8519b52f23a9887c7923845c0c69ee8b0fd47f82f150a069f05d2f069b0cf22d42b5adf72ae454744aa641964e13c284ad3bfc78176f4e8042511f7a7
-
SSDEEP
6144:pduO5HE15o55gjsSouDkEA2eQ7I1NRjfkYgcB7ZdSsyzOny15BEISK5Dp:HuGE1K55esWDrA2SRkcBXK6niEIT5N
Malware Config
Signatures
Files
-
960c6cd16cdc6e4c549759bde371ba8a861b588c62acfef0af738ed7301ca7cb.exe windows x86
64d15bd77ca04248e7a7044ce7e61942
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetImageRect
CreateToolbar
ImageList_SetBkColor
ImageList_GetFlags
ImageList_DrawIndirect
ImageList_SetOverlayImage
InitCommonControlsEx
ImageList_DragMove
DrawStatusTextW
ImageList_DrawEx
DrawInsert
DrawStatusText
user32
SubtractRect
SetMessageQueue
DeleteMenu
RegisterWindowMessageW
CreateWindowExA
FindWindowW
OemToCharBuffA
AppendMenuW
MapWindowPoints
IsDialogMessageW
BringWindowToTop
SetUserObjectSecurity
UnhookWinEvent
GetWindowPlacement
GetKeyboardLayout
AdjustWindowRectEx
OpenDesktopW
GetWindowLongA
GetClassNameW
TileChildWindows
SetRectEmpty
DestroyWindow
PtInRect
RegisterClassExA
CallWindowProcA
NotifyWinEvent
CallWindowProcW
GetMenuItemInfoA
GetDlgCtrlID
DestroyAcceleratorTable
CharPrevA
GetClipboardOwner
GetListBoxInfo
MessageBoxA
SetPropA
SetMenuItemBitmaps
ShowWindow
RemoveMenu
DefWindowProcW
AnyPopup
RegisterClassA
IsWindowEnabled
SetClassWord
EditWndProc
CharNextA
DefWindowProcA
DdeQueryConvInfo
SetDebugErrorLevel
ClientToScreen
InsertMenuW
ScrollWindowEx
DialogBoxIndirectParamW
GetDCEx
GetIconInfo
CreateDesktopA
CharLowerW
SetMenuDefaultItem
kernel32
GlobalSize
GetCurrentThreadId
HeapValidate
GetACP
GetVersionExA
VirtualAlloc
ReadFile
InterlockedIncrement
GetLocaleInfoW
GetSystemTimeAsFileTime
OpenMutexA
GetConsoleMode
LoadLibraryExW
GetEnvironmentStringsW
FlushFileBuffers
TlsFree
GetPrivateProfileSectionNamesW
SetLastError
ExitProcess
LoadLibraryA
GetTimeFormatA
HeapCreate
CloseHandle
GetUserDefaultLCID
HeapReAlloc
IsBadReadPtr
IsValidLocale
LocalCompact
GetCommandLineA
GetStartupInfoA
GetModuleFileNameA
GetCurrentProcess
GetStringTypeExA
SetStdHandle
EnterCriticalSection
WideCharToMultiByte
EnumSystemLocalesA
TerminateProcess
GetModuleHandleA
GetTimeZoneInformation
GetProcAddress
SetHandleCount
FreeEnvironmentStringsA
CompareStringW
IsBadWritePtr
SetFileAttributesA
VirtualProtect
FreeEnvironmentStringsW
GetStringTypeA
LeaveCriticalSection
GetStdHandle
HeapDestroy
HeapSize
MoveFileA
CompareStringA
GetSystemInfo
TlsAlloc
LCMapStringW
GetFileType
InterlockedDecrement
GetSystemDefaultLangID
LCMapStringA
IsValidCodePage
MultiByteToWideChar
InterlockedExchange
GetNamedPipeHandleStateA
CreateMutexA
LoadResource
SetFilePointer
UnhandledExceptionFilter
GetLastError
DeleteCriticalSection
VirtualQuery
SetConsoleCtrlHandler
HeapFree
GlobalUnlock
GetOEMCP
TlsSetValue
GetTickCount
GetCPInfo
VirtualFree
GetEnvironmentStrings
GetLocaleInfoA
GetDateFormatA
WriteFile
OutputDebugStringA
HeapAlloc
GetCurrentProcessId
TlsGetValue
SetEnvironmentVariableA
RtlUnwind
DebugBreak
DeleteFileA
lstrlen
QueryPerformanceCounter
InitializeCriticalSection
GetStringTypeW
GetCurrentThread
wininet
SetUrlCacheEntryGroup
InternetConfirmZoneCrossing
comdlg32
FindTextW
shell32
ExtractAssociatedIconW
DragQueryFileW
SHGetFileInfoW
advapi32
RegDeleteValueA
RegEnumKeyExA
RegQueryInfoKeyA
CryptSetProviderA
RegSaveKeyW
RegEnumKeyA
CryptContextAddRef
CryptGetHashParam
CryptEnumProviderTypesW
CryptHashData
RegCloseKey
LookupPrivilegeValueA
RevertToSelf
CryptDuplicateHash
RegRestoreKeyW
RegEnumValueA
RegOpenKeyExW
CryptGetDefaultProviderA
InitiateSystemShutdownA
GetUserNameW
LogonUserW
RegFlushKey
CryptDuplicateKey
RegCreateKeyExW
RegQueryValueExA
Sections
.text Size: 204KB - Virtual size: 201KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ