?GetRegistrationInformation@@YGXPAD@Z
Static task
static1
Behavioral task
behavioral1
Sample
b87ade29a450a30736913f99e119e19b55c15acc5d00ffda59939a29323993ae.exe
Resource
win7-20221111-en
General
-
Target
b87ade29a450a30736913f99e119e19b55c15acc5d00ffda59939a29323993ae
-
Size
860KB
-
MD5
0c0b6217736ac9571ff53f09c1fb137c
-
SHA1
19b8297b792b35b37d275f916c0d1b3b2efdb029
-
SHA256
b87ade29a450a30736913f99e119e19b55c15acc5d00ffda59939a29323993ae
-
SHA512
6d258a2e48f678bcce46ee779f3d8955e51cd6338775917e058972c70a783ce03d8d4f56c357db503c692d53406dee6ded9bc2db08b9c067fefea942a661ee22
-
SSDEEP
12288:gEegwvqbPpo2FyMKjSKmxcserg1dnbGHdUQgOaYJKzU6ibZLp/KxyIqVjqnS8Yuw:PepvqbRonDT4zUzx1WyIq1qS8YSFzY
Malware Config
Signatures
Files
-
b87ade29a450a30736913f99e119e19b55c15acc5d00ffda59939a29323993ae.exe windows x86
ebd2caf26290b3c7ad0d0a151fd530db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
SetStdHandle
LCMapStringW
LCMapStringA
RaiseException
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FlushFileBuffers
GetFileAttributesA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleFileNameA
WriteFile
ReadFile
GetFileType
SetEndOfFile
SetHandleCount
SetFilePointer
HeapSize
GetProcAddress
HeapReAlloc
HeapAlloc
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
DeleteFileA
MoveFileA
GetCurrentProcess
TerminateProcess
ExitProcess
HeapFree
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
CompareStringA
CompareStringW
SetEnvironmentVariableA
MulDiv
GetCurrentDirectoryA
GetPrivateProfileStringA
Sleep
GetPrivateProfileIntA
MultiByteToWideChar
CreateFileA
GetFileTime
CloseHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatA
GetTimeFormatA
GetVersionExA
WideCharToMultiByte
GetStdHandle
GetLastError
user32
GetWindowRect
ClientToScreen
GetClientRect
ReleaseDC
GetDC
SetWindowTextA
SetDlgItemTextA
SendDlgItemMessageA
EndDialog
ShowWindow
EnableWindow
GetDlgItem
GetDlgItemTextA
PostMessageA
DefWindowProcA
DestroyCursor
LoadCursorFromFileA
LoadCursorA
ReleaseCapture
SetCapture
DrawMenuBar
RedrawWindow
GetSystemMetrics
SetCursorPos
PeekMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
PostQuitMessage
DialogBoxParamA
LoadIconA
RegisterClassA
CreateWindowExA
UpdateWindow
LoadAcceleratorsA
ShowCursor
SetCursor
GetForegroundWindow
WaitMessage
LoadStringA
MessageBoxA
winmm
timeBeginPeriod
timeEndPeriod
waveOutSetVolume
auxSetVolume
mciSendStringA
timeGetTime
comdlg32
GetOpenFileNameA
GetSaveFileNameA
ole32
CoCreateInstance
CoUninitialize
CoInitialize
advapi32
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
gdi32
SetTextColor
SetBkColor
SetTextAlign
SelectObject
ExtTextOutA
DeleteObject
DeleteDC
GetStockObject
GetPixel
CreateFontA
GetDeviceCaps
SetMapMode
CreateDIBSection
CreateCompatibleDC
GetTextExtentPoint32A
SetPixel
shell32
ShellExecuteA
d3d8
Direct3DCreate8
dsound
ord11
Exports
Exports
Sections
.text Size: 492KB - Virtual size: 489KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 72KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 196KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.srdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE