Static task
static1
Behavioral task
behavioral1
Sample
29c5f01e7272b5cb94fdb4fa3c3075ab3e38e906135042a78a3ef88fdad1a17c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29c5f01e7272b5cb94fdb4fa3c3075ab3e38e906135042a78a3ef88fdad1a17c.exe
Resource
win10v2004-20220901-en
General
-
Target
29c5f01e7272b5cb94fdb4fa3c3075ab3e38e906135042a78a3ef88fdad1a17c
-
Size
392KB
-
MD5
d9974753a549999108481442eae8ed81
-
SHA1
26545571623d6543463fd8c870f4081ef8bd5476
-
SHA256
29c5f01e7272b5cb94fdb4fa3c3075ab3e38e906135042a78a3ef88fdad1a17c
-
SHA512
5777846f2cbb88bed57317ae777929a2f02f8605f058116ed041bd35cf722d2af728636422a2219f8ad2680ae092fa93a19d16fde730ddc7e5af324f2a87af6b
-
SSDEEP
6144:FQ69my11hJQWogylCnmA+qznd7+mj4rfYYUblt0tECD6bWyXjd3YOplLbQ9:FQ69b11hJEDlCnHt5ofj0j0d633YOL
Malware Config
Signatures
Files
-
29c5f01e7272b5cb94fdb4fa3c3075ab3e38e906135042a78a3ef88fdad1a17c.exe windows x86
aadca1211d6f8b3268853f432b5c8fc2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseColorA
PrintDlgA
GetSaveFileNameA
GetFileTitleA
gdi32
SetPolyFillMode
SetMetaFileBitsEx
ExtCreateRegion
Chord
CreateFontA
comctl32
ImageList_SetFilter
CreateMappedBitmap
ImageList_LoadImageA
DrawInsert
ImageList_DragEnter
ImageList_EndDrag
ImageList_DrawIndirect
ImageList_Merge
ImageList_SetDragCursorImage
MakeDragList
ImageList_Draw
ImageList_Read
ImageList_DragShowNolock
ImageList_LoadImage
CreateStatusWindowA
ImageList_SetOverlayImage
DestroyPropertySheetPage
ImageList_SetFlags
InitCommonControlsEx
ImageList_SetIconSize
user32
IsCharUpperW
GetMonitorInfoA
CreateMDIWindowW
SetMenuItemInfoW
DrawAnimatedRects
DdeGetLastError
IsWindowUnicode
RegisterClassA
SetMenuItemBitmaps
EnumChildWindows
GetKeyNameTextW
DdeCmpStringHandles
LoadIconA
SetMenuItemInfoA
DdeQueryConvInfo
LoadBitmapW
SetMenu
LoadIconW
GetClipboardSequenceNumber
DdeInitializeA
CreateIconIndirect
GetMessageA
EndDeferWindowPos
VkKeyScanExW
CharPrevA
CharPrevExA
RegisterClassExA
kernel32
GetStringTypeA
CreateThread
GetFileType
WaitForDebugEvent
RtlUnwind
HeapSize
InitializeCriticalSection
GetEnvironmentStrings
GetCommandLineW
CloseHandle
ReadConsoleA
FlushInstructionCache
ConnectNamedPipe
WritePrivateProfileStringA
SetSystemTime
FindAtomW
FreeEnvironmentStringsA
GetEnvironmentStringsW
FindFirstFileA
GetProcAddress
SetTimeZoneInformation
TlsFree
LCMapStringW
HeapReAlloc
DeleteFileW
GetLocalTime
CompareStringA
GetTickCount
SetConsoleCtrlHandler
InterlockedIncrement
FreeEnvironmentStringsW
OpenEventW
VirtualQuery
SetFileAttributesA
GetLastError
SetThreadLocale
CreateNamedPipeW
TerminateProcess
LocalReAlloc
InterlockedExchange
VirtualAlloc
lstrcpynW
GetDriveTypeA
WaitCommEvent
SetStdHandle
GetStartupInfoA
GetFileAttributesA
WriteFile
VirtualFree
OpenMutexA
CreateMutexA
GetConsoleTitleA
SetEnvironmentVariableA
SetHandleCount
SetFilePointer
GetPriorityClass
SetConsoleCP
GetVersion
FlushFileBuffers
GetModuleHandleA
HeapCreate
GetDateFormatW
GetModuleFileNameA
GetSystemDefaultLangID
GetTimeZoneInformation
GetLogicalDriveStringsA
GetExitCodeProcess
OpenSemaphoreA
GetCurrentThreadId
GetStartupInfoW
LoadLibraryA
TlsGetValue
ExitProcess
WritePrivateProfileSectionA
QueryPerformanceCounter
GetModuleFileNameW
GetSystemTimeAsFileTime
GetWindowsDirectoryA
ReadFile
HeapAlloc
LocalAlloc
GetCPInfo
TlsSetValue
TlsAlloc
HeapFree
CompareStringW
GetCurrentThread
UnhandledExceptionFilter
GetCommandLineA
InterlockedDecrement
MultiByteToWideChar
DeleteCriticalSection
GetStringTypeW
GetSystemTime
WideCharToMultiByte
LCMapStringA
RaiseException
DebugActiveProcess
GetCurrentProcess
GetStdHandle
HeapDestroy
SetLastError
OpenWaitableTimerA
IsBadWritePtr
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
FoldStringW
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ