Static task
static1
Behavioral task
behavioral1
Sample
62b14c553a1217c797b44d8fd3e91307dcd0bc4649a197cfab5141a544369f34.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
62b14c553a1217c797b44d8fd3e91307dcd0bc4649a197cfab5141a544369f34.exe
Resource
win10v2004-20221111-en
General
-
Target
62b14c553a1217c797b44d8fd3e91307dcd0bc4649a197cfab5141a544369f34
-
Size
148KB
-
MD5
cd97d88bfafbe7b47d94f03fee7debc3
-
SHA1
5ea36924521507f6d5c82dcb706c19408d3d7283
-
SHA256
62b14c553a1217c797b44d8fd3e91307dcd0bc4649a197cfab5141a544369f34
-
SHA512
f4d0c0aed8f29caa28d4115e7d4264c5dd88160d9856c7cb96d83809c9ea4be607476b3b0e8822ecd3ab4163a60a5ca1989f4fb9c937cbaa5ab6c2cd828e9dd9
-
SSDEEP
3072:1RkSvnuqa6aMrKJnNDFbuLVop7PVoiaHyxhvcdIE3BMraVKthTARpwJ1MgRtRe6i:1RHvuqCMuxbuLKPVoiayjcdIZra8thTu
Malware Config
Signatures
Files
-
62b14c553a1217c797b44d8fd3e91307dcd0bc4649a197cfab5141a544369f34.exe windows x86
72eea3fb225a705456b3d41e1e057c1b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
CreateFileW
CreateProcessA
DeleteFileA
DeviceIoControl
DisableThreadLibraryCalls
DuplicateHandle
EnumCalendarInfoA
ExpandEnvironmentStringsA
FindClose
FindResourceW
FreeEnvironmentStringsA
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentVariableA
GetFileAttributesW
GetFileSize
GetFileTime
GetLocalTime
GetModuleHandleA
GetModuleHandleW
GetPrivateProfileStringA
GetProcessHeap
GetShortPathNameA
GetStringTypeA
GetStringTypeExA
GetSystemDefaultLCID
GetSystemDirectoryA
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameA
GetThreadLocale
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLangID
GetVersion
GetWindowsDirectoryA
GlobalAddAtomA
GlobalAlloc
GlobalFindAtomA
GlobalFree
GlobalHandle
GlobalLock
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
IsBadWritePtr
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryW
LocalFileTimeToFileTime
LockResource
OpenProcess
OutputDebugStringA
QueryPerformanceCounter
ReadFile
ResetEvent
RtlUnwind
SetEndOfFile
SetFileTime
SetStdHandle
SetThreadLocale
SetUnhandledExceptionFilter
SystemTimeToFileTime
TlsFree
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WriteFile
WritePrivateProfileStringA
lstrcmpA
lstrcmpiA
lstrcmpiW
lstrcpynA
lstrlenW
user32
BeginPaint
CallNextHookEx
CallWindowProcA
CharNextA
CheckMenuItem
DefWindowProcA
DeleteMenu
DestroyCursor
DestroyWindow
DrawIcon
DrawMenuBar
EnableMenuItem
EnableWindow
EndPaint
FillRect
FrameRect
GetCapture
GetCursorPos
GetDC
GetDlgItem
GetForegroundWindow
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMessagePos
GetPropA
GetScrollInfo
GetScrollPos
GetSysColor
GetSysColorBrush
GetSystemMenu
GetWindow
GetWindowLongA
IntersectRect
IsWindowVisible
IsZoomed
LoadCursorA
OffsetRect
PostMessageA
PtInRect
RedrawWindow
RegisterClassA
RegisterClipboardFormatA
ReleaseDC
SetActiveWindow
SetFocus
SetForegroundWindow
SetRect
SetScrollPos
SetScrollRange
SetWindowTextA
ShowCursor
ShowOwnedPopups
SystemParametersInfoA
TrackPopupMenu
WindowFromPoint
wsprintfA
gdi32
AddFontResourceA
BeginPath
CloseMetaFile
CopyMetaFileA
CreateCompatibleBitmap
CreateEllipticRgn
CreateFontA
CreateHatchBrush
CreateRoundRectRgn
DeleteEnhMetaFile
Ellipse
EndPath
EnumEnhMetaFile
EnumFontFamiliesA
EnumFontFamiliesExA
ExcludeClipRect
ExtEscape
ExtTextOutA
ExtTextOutW
FillPath
GetBrushOrgEx
GetClipBox
GetClipRgn
GetCurrentObject
GetEnhMetaFileBits
GetEnhMetaFileDescriptionA
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetMetaFileBitsEx
GetObjectW
GetPaletteEntries
GetROP2
GetRegionData
GetStockObject
GetTextAlign
GetTextColor
GetTextExtentExPointW
GetTextExtentPoint32W
GetTextExtentPointW
GetTextMetricsW
GetWinMetaFileBits
IntersectClipRect
LineDDA
LineTo
MaskBlt
PatBlt
PolyDraw
PtInRegion
RestoreDC
ScaleWindowExtEx
SetAbortProc
SetArcDirection
SetBrushOrgEx
SetColorAdjustment
SetDIBits
SetROP2
SetTextColor
SetWinMetaFileBits
SetWorldTransform
StartPage
StretchDIBits
TranslateCharsetInfo
UnrealizeObject
shell32
DoEnvironmentSubstW
DragAcceptFiles
DragQueryFileA
DragQueryFileW
ExtractAssociatedIconW
ExtractIconA
ExtractIconExW
ExtractIconW
FindExecutableW
SHAppBarMessage
SHBrowseForFolderA
SHGetFolderPathW
SHGetSettings
SHGetSpecialFolderPathW
ShellExecuteA
ShellExecuteExA
ShellExecuteExW
Shell_NotifyIconA
Shell_NotifyIconW
comctl32
CreatePropertySheetPageA
CreatePropertySheetPageW
CreateStatusWindowA
CreateToolbarEx
DestroyPropertySheetPage
ImageList_Add
ImageList_AddMasked
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragShowNolock
ImageList_Draw
ImageList_EndDrag
ImageList_GetDragImage
ImageList_GetIcon
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_Read
ImageList_Remove
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_SetOverlayImage
ImageList_Write
InitCommonControls
InitializeFlatSB
PropertySheetA
PropertySheetW
advapi32
AddAccessAllowedAce
AdjustTokenPrivileges
AllocateAndInitializeSid
CheckTokenMembership
CloseServiceHandle
ControlService
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptReleaseContext
DeregisterEventSource
GetLengthSid
InitializeAcl
InitiateSystemShutdownA
IsValidSid
LookupPrivilegeValueA
LookupPrivilegeValueW
OpenProcessToken
OpenSCManagerA
OpenServiceW
OpenThreadToken
QueryServiceStatus
RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExA
RegEnumKeyExW
RegEnumKeyW
RegEnumValueA
RegOpenKeyA
RegOpenKeyExA
RegOpenKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegQueryValueA
RegSetValueExW
RevertToSelf
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ