Static task
static1
Behavioral task
behavioral1
Sample
74c39126f27e36d582084af61afe00772b722db572edded4f3197ece44c36e6a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
74c39126f27e36d582084af61afe00772b722db572edded4f3197ece44c36e6a.exe
Resource
win10v2004-20220812-en
General
-
Target
74c39126f27e36d582084af61afe00772b722db572edded4f3197ece44c36e6a
-
Size
920KB
-
MD5
f251200975ae1eb1df4fab9c1b715b77
-
SHA1
d8a47c9f748d3e561e6e0c2d2e5c638708b6f05c
-
SHA256
74c39126f27e36d582084af61afe00772b722db572edded4f3197ece44c36e6a
-
SHA512
38717440a1254d61591cc7dd4bc66fab94d599eb30d176069f86ffdbe0135f19cc5f209430c2928d2f449276f669d931673323fd969cda648a22faca75e7b2d6
-
SSDEEP
24576:kr8/0SLiPVg2ruQFk28H4Z5fYySV7umi36+hn:kry0PV9FDgSG+l
Malware Config
Signatures
Files
-
74c39126f27e36d582084af61afe00772b722db572edded4f3197ece44c36e6a.exe windows x86
93a6e61cb3b44e4f651d90faf3c0ce1f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Create
InitCommonControlsEx
ImageList_Destroy
advapi32
CheckTokenMembership
RegQueryValueExA
ConvertSidToStringSidW
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegOpenKeyExA
RegEnumKeyExW
RegCloseKey
EqualSid
OpenServiceW
RegSetValueExW
RegOpenKeyExW
OpenProcessToken
user32
SetWindowTextW
GetDlgItem
GetClientRect
GetDC
GetWindow
GetWindowRect
SetForegroundWindow
FillRect
EndPaint
IsWindowVisible
PostQuitMessage
SetFocus
KillTimer
IsDlgButtonChecked
SetWindowTextA
SetTimer
UnregisterClassA
PeekMessageW
IsWindow
ShowWindow
RegisterClassW
SendDlgItemMessageW
LoadStringA
SetCursor
RegisterClassExA
GetParent
LoadIconA
MessageBoxA
GetKeyState
DestroyIcon
ReleaseDC
LoadCursorA
MsgWaitForMultipleObjects
gdi32
CreateFontIndirectW
DeleteObject
DeleteDC
CreateCompatibleDC
GetDeviceCaps
SelectObject
GetObjectW
kernel32
MulDiv
GetConsoleMode
OutputDebugStringW
GetCommandLineA
WriteConsoleW
GetCommandLineW
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 872KB - Virtual size: 872KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ