Static task
static1
Behavioral task
behavioral1
Sample
a586cf618d1be4f71d3e5c10678aed17b92b38cece889956beb0d20b9a88b2f3.exe
Resource
win7-20220812-en
General
-
Target
a586cf618d1be4f71d3e5c10678aed17b92b38cece889956beb0d20b9a88b2f3
-
Size
348KB
-
MD5
c259e9438ef53e09d715f96cfef65d8b
-
SHA1
61a668fe778894f12db50b80ed04ecd41342167b
-
SHA256
a586cf618d1be4f71d3e5c10678aed17b92b38cece889956beb0d20b9a88b2f3
-
SHA512
63af6692986ed583d5e343afbf8679367eca904dbf208937fdc68143f189dc533d30ea46189c38efbe2ac72be5153406c8b4118414749afdd9ca9bf44537d9da
-
SSDEEP
3072:+b3jvu3gMxw9dmWhoBlZq2jQwEgsNdQ5V/2p6qRHXT4/4qx/dfQubuOElB8R6Zm3:yju3gMxwDoBlQ2blV//qlKTbEl6O
Malware Config
Signatures
Files
-
a586cf618d1be4f71d3e5c10678aed17b92b38cece889956beb0d20b9a88b2f3.exe windows x86
842e32110d6cd761a61cf93889fd18b6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
RtlUnwind
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
LCMapStringW
GetSystemTimeAsFileTime
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
WriteFile
ExitProcess
GetProcAddress
GetCurrentThreadId
SetLastError
GetModuleHandleW
TlsFree
DecodePointer
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
IsValidCodePage
GetOEMCP
GetACP
GetSystemTime
GetCurrentProcessId
CloseHandle
EnumDateFormatsA
FindNextFileA
FindClose
GetLastError
FindFirstFileA
GlobalUnlock
CreateFileA
SetConsoleTitleA
ReadFile
HeapCreate
Sleep
GlobalAlloc
GetConsoleTitleA
GetTickCount
GlobalLock
GetCurrentProcess
HeapAlloc
GetFileSize
GetEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
GetCPInfo
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
MultiByteToWideChar
HeapFree
GetCommandLineA
HeapSetInformation
HeapSize
user32
CopyRect
GetWindowThreadProcessId
MoveWindow
DestroyWindow
SetCursor
DdeSetQualityOfService
ScreenToClient
GetWindowRect
FillRect
GetMenuItemID
GetParent
ChildWindowFromPointEx
LoadCursorW
wsprintfA
GetClientRect
GetMenuCheckMarkDimensions
GetClassLongW
GetDC
OffsetRect
SetRect
SetWindowLongA
MessageBoxA
InvalidateRect
GetWindowLongA
GetDlgItem
EndDialog
GetDesktopWindow
GetSysColor
GetMenuStringA
CreateDialogParamW
WindowFromDC
GetMenuItemCount
IsWindow
PostMessageA
SendMessageW
FindWindowA
LoadCursorA
GetDlgCtrlID
GetDialogBaseUnits
gdi32
MoveToEx
BitBlt
PatBlt
LineTo
SetTextColor
DeleteDC
CreateFontIndirectW
StretchBlt
SetBkColor
DeleteObject
SelectObject
CreateCompatibleDC
Rectangle
SetDCPenColor
CreateBitmapIndirect
GetObjectW
CreateICA
GetObjectA
GetStockObject
CreateSolidBrush
CreateBitmap
advapi32
CryptExportKey
shell32
ShellExecuteW
ole32
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
OleSavePictureFile
dbghelp
EnumerateLoadedModules
Sections
.text Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ