Static task
static1
Behavioral task
behavioral1
Sample
8290bb2c70cf263d895105229cf20e313da5c536eaeae71bc55589cca55a7a4d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8290bb2c70cf263d895105229cf20e313da5c536eaeae71bc55589cca55a7a4d.exe
Resource
win10v2004-20221111-en
General
-
Target
8290bb2c70cf263d895105229cf20e313da5c536eaeae71bc55589cca55a7a4d
-
Size
764KB
-
MD5
222303c3a757dafac69e7faac17daa20
-
SHA1
6e4853cdcf4ef578f7534db43cdab768eec92df7
-
SHA256
8290bb2c70cf263d895105229cf20e313da5c536eaeae71bc55589cca55a7a4d
-
SHA512
66f39cdb90ee6d7fcfe3115f2b894778c7ae49c4eed1c73c44d5afc46b132d7fd2b2dc65184953d6f1c476ede89a9d0a94199461a808c30e7779a63e50d0b46b
-
SSDEEP
3072:VXRzivV9X85MPSUyt6UwoBDuOrJGaAXxFVlqnVCy:PzigAyt6POrJGaAXzKV
Malware Config
Signatures
Files
-
8290bb2c70cf263d895105229cf20e313da5c536eaeae71bc55589cca55a7a4d.exe windows x86
178ce99588d11eed470ad92993175cd8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
msacm32
acmMetrics
acmFormatChooseA
olepro32
ord250
kernel32
lstrcpynA
GetProfileIntA
lstrlenA
LoadLibraryA
MulDiv
GetDiskFreeSpaceA
FreeLibrary
GetFullPathNameA
CloseHandle
GetFileSize
CreateFileA
GetCurrentProcessId
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
InterlockedIncrement
InterlockedDecrement
OpenFile
WriteProfileStringA
GetModuleFileNameA
GetLastError
LeaveCriticalSection
EnterCriticalSection
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
IsDBCSLeadByte
GetProfileStringA
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetFileType
lstrcatA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
WriteFile
HeapSize
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
HeapFree
RtlUnwind
GetStringTypeA
GetStringTypeW
GetCPInfo
LCMapStringA
LCMapStringW
SetStdHandle
GetModuleHandleA
GetProcAddress
DeleteCriticalSection
InitializeCriticalSection
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
FlushFileBuffers
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetSystemTimeAsFileTime
SetFilePointer
IsBadReadPtr
IsBadCodePtr
GetOEMCP
SetHandleCount
user32
DispatchMessageA
PeekMessageA
TranslateAcceleratorA
WaitMessage
LoadAcceleratorsA
LoadCursorA
LoadIconA
RegisterClassA
GetDC
ReleaseDC
CreateWindowExA
CharNextA
PostQuitMessage
IsZoomed
DefWindowProcA
BeginPaint
EndPaint
MoveWindow
GetAsyncKeyState
PostMessageA
SetTimer
UpdateWindow
IsCharAlphaA
IsCharAlphaNumericA
SetDlgItemInt
GetDlgItem
SetFocus
MessageBeep
GetWindowTextA
EnableWindow
TranslateMessage
GetMenuItemCount
SetMenuItemInfoA
KillTimer
InvalidateRect
GetWindowLongA
SetWindowLongA
ShowWindow
GetDlgItemInt
GetDlgItemTextA
IsDlgButtonChecked
SetDlgItemTextA
CheckDlgButton
DialogBoxParamA
EndDialog
MessageBoxA
wsprintfA
GetMenu
GetSubMenu
RemoveMenu
AppendMenuA
CreatePopupMenu
CheckMenuItem
GetClientRect
SetWindowPos
SetWindowTextA
GetWindowRect
GetSystemMetrics
EnableMenuItem
GetSysColor
GetMenuItemInfoA
gdi32
SetTextColor
ExtTextOutA
PatBlt
DeleteObject
CreateSolidBrush
CreateFontA
GetStockObject
SelectObject
GetTextMetricsA
SetBkColor
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegEnumKeyExA
RegQueryInfoKeyA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
ole32
MkParseDisplayName
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoUninitialize
CreateBindCtx
CoInitializeEx
oleaut32
VarUI4FromStr
SysFreeString
Sections
.text Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 636KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE