Static task
static1
Behavioral task
behavioral1
Sample
7851f85e428f8f5452642ac81c7ac5d2ef4280e05639f6ce5d74d868e119a050.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7851f85e428f8f5452642ac81c7ac5d2ef4280e05639f6ce5d74d868e119a050.exe
Resource
win10v2004-20220812-en
General
-
Target
7851f85e428f8f5452642ac81c7ac5d2ef4280e05639f6ce5d74d868e119a050
-
Size
230KB
-
MD5
3d8da25b3bcc67d7bebc428268cfb8c0
-
SHA1
f5c561b3ab0b846fd5ed4ea5b1d5fe13931890ec
-
SHA256
7851f85e428f8f5452642ac81c7ac5d2ef4280e05639f6ce5d74d868e119a050
-
SHA512
fb8c79e87eaf32d22068d81a71abb441962a2be1ae0a46e421d82666be202e5b37646d9c3c4712590dc2ed1e2532964150b3a8bcf95d3b1cc628ec7547ef46bf
-
SSDEEP
6144:ElCVthFP1h0VayGsfyRZ8x8bsimkPQrbLVvh9:ElWtD0YypffFePOd
Malware Config
Signatures
Files
-
7851f85e428f8f5452642ac81c7ac5d2ef4280e05639f6ce5d74d868e119a050.exe windows x86
689d46a3fa0b734bf93fae81398a16ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsWindow
DialogBoxIndirectParamA
MessageBoxA
ShowWindow
SetWindowPlacement
GetForegroundWindow
WindowFromPoint
DialogBoxParamA
EnumChildWindows
CreateWindowExA
GetClipboardData
OpenClipboard
GetClientRect
gdi32
EndPage
EnumObjects
CloseEnhMetaFile
GdiComment
FrameRgn
GetBkMode
AddFontResourceW
GetStockObject
CreateFontW
AddFontResourceA
ExcludeClipRect
comctl32
ord17
ord5
ord14
CreatePropertySheetPageA
UninitializeFlatSB
CreatePropertySheetPageW
ord6
InitializeFlatSB
advapi32
RegOverridePredefKey
OpenProcessToken
RegOpenKeyExA
BackupEventLogA
SetTokenInformation
RegNotifyChangeKeyValue
RegLoadKeyA
shlwapi
StrChrA
StrCSpnW
StrCmpNA
StrChrIW
kernel32
HeapReAlloc
CreateSemaphoreA
GetTimeFormatA
SetEvent
GetProfileSectionA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetProfileIntA
WriteProfileSectionA
GetModuleHandleA
GetProcAddress
VirtualAllocEx
DeleteCriticalSection
IsValidLocale
InitializeCriticalSection
HeapFree
GlobalSize
GetStartupInfoA
VirtualUnlock
GetProcessHeap
HeapDestroy
PulseEvent
HeapCompact
netapi32
NetConfigGetAll
NetGroupAddUser
Netbios
NetFileEnum
NetAuditRead
NetErrorLogRead
NetGroupAdd
NetAuditClear
NetAuditWrite
NetGetJoinInformation
NetWkstaUserSetInfo
NetFileClose
NetConnectionEnum
msvcrt
exit
_XcptFilter
_exit
perror
__mb_cur_max
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_isctype
_pctype
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 201KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ