Static task
static1
Behavioral task
behavioral1
Sample
d8298bac0645484b80a357c312265818b6e06ab07f300ba7ea7bf14d58ff253a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d8298bac0645484b80a357c312265818b6e06ab07f300ba7ea7bf14d58ff253a.exe
Resource
win10v2004-20220812-en
General
-
Target
d8298bac0645484b80a357c312265818b6e06ab07f300ba7ea7bf14d58ff253a
-
Size
682KB
-
MD5
037ca78e3d08e7dd87c03474f18b0f55
-
SHA1
7641c07236dd31d289183db98a67afbe5e6ac2d1
-
SHA256
d8298bac0645484b80a357c312265818b6e06ab07f300ba7ea7bf14d58ff253a
-
SHA512
ed7ab1ed63f3ca289c84d3e58a50ddaa7dfd9d31138726352438651fc83bf175d752e2e18204d80441a80ff04d83bdcbc39ed8ffb21aa19c3ad0c4a42194a095
-
SSDEEP
12288:3V6qzIYcYNl6mAQVOAJ7qEqwDfPEDgSXNZUS43R++JLaU2LlnMvK/nSj9z:3sqsLYeZAJ7qEqwTPEfgSCNUlMvPz
Malware Config
Signatures
Files
-
d8298bac0645484b80a357c312265818b6e06ab07f300ba7ea7bf14d58ff253a.exe windows x86
62fdd955c80dc7a2039f052aedf0c785
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
FindResourceA
Sleep
VirtualFree
HeapCreate
GetEnvironmentStrings
SetStdHandle
GetModuleHandleW
GetACP
CloseHandle
ReadFile
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
WideCharToMultiByte
GetCommandLineW
SizeofResource
FileTimeToLocalFileTime
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
LCMapStringW
LeaveCriticalSection
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GlobalLock
DuplicateHandle
FindFirstFileW
CreateFileMappingA
CompareStringA
lstrcpyA
FindFirstFileA
CompareStringW
GetProcAddress
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetVersionExA
TlsAlloc
GetProcessHeap
SetEvent
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
GetLocaleInfoA
SetEndOfFile
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
IsDebuggerPresent
GetModuleFileNameW
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
GetOEMCP
GetFullPathNameA
GetStringTypeW
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
lstrcmpiA
GetCPInfo
FreeEnvironmentStringsW
lstrcatA
GetCurrentProcess
DeleteCriticalSection
GetFileAttributesW
HeapDestroy
FindNextFileA
LockResource
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
HeapAlloc
ExitProcess
GetModuleHandleA
GetCurrentProcessId
GetVersion
GetLastError
GetTickCount
GetCurrentThread
GetCommandLineA
QueryPerformanceCounter
GetCurrentThreadId
gdi32
DeleteObject
DeleteDC
SetTextColor
SetBkMode
SetBkColor
ole32
CoInitialize
CoTaskMemFree
user32
DrawTextA
SendMessageA
wsprintfA
IsWindowVisible
GetSysColor
MessageBoxA
MoveWindow
GetFocus
GetDesktopWindow
TrackPopupMenu
LoadCursorA
ScreenToClient
CreateWindowExA
GetSubMenu
SetWindowTextA
SetWindowLongA
ReleaseCapture
SetCapture
IsIconic
GetSystemMetrics
SetFocus
FillRect
SetTimer
GetWindowLongA
EnableMenuItem
GetWindow
IsWindowEnabled
TranslateMessage
EnableWindow
ShowWindow
UpdateWindow
GetParent
GetKeyState
ReleaseDC
GetCursorPos
GetDC
EndPaint
IsWindow
PostQuitMessage
SetForegroundWindow
SetCursor
GetClientRect
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegDeleteKeyA
Sections
.text Size: 638KB - Virtual size: 961KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ