Static task
static1
Behavioral task
behavioral1
Sample
b843e02f3ad65baa614f6bbecb4950ffc370bbcd56e68a43138a50875b1a69c8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b843e02f3ad65baa614f6bbecb4950ffc370bbcd56e68a43138a50875b1a69c8.exe
Resource
win10v2004-20220812-en
General
-
Target
b843e02f3ad65baa614f6bbecb4950ffc370bbcd56e68a43138a50875b1a69c8
-
Size
108KB
-
MD5
82e4b2a47e83fccb75c1e3e551cff727
-
SHA1
7c8752eb5cca007be0998d17918c0fa5661af0eb
-
SHA256
b843e02f3ad65baa614f6bbecb4950ffc370bbcd56e68a43138a50875b1a69c8
-
SHA512
725f976966305345919ec73f22550f5891e6ff201ed1643abbb2d1d573412382253cf191ba311a27b76eccfd7b21d48f60ce7b78b279055fe10a0f0fc12a8d74
-
SSDEEP
3072:YZfYznexZKRQNLXt/cA38sWTfAe4v2aSRo:YtyexZDBJcA3u/W
Malware Config
Signatures
Files
-
b843e02f3ad65baa614f6bbecb4950ffc370bbcd56e68a43138a50875b1a69c8.exe windows x86
33b0262c0e31183c3fe4409c1c8caf39
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileSectionA
WritePrivateProfileStringA
GetLogicalDrives
GetDriveTypeA
lstrlenA
OpenFile
_lread
_lclose
WinExec
ExitThread
GetExitCodeThread
GetPrivateProfileIntA
GetPrivateProfileStringA
Sleep
MultiByteToWideChar
WaitForSingleObject
CreateThread
CloseHandle
SetErrorMode
ExitProcess
SearchPathA
GetUserDefaultLCID
GetLastError
GetLocaleInfoA
LocalFree
RtlZeroMemory
RtlMoveMemory
GetProcAddress
GetModuleHandleA
InterlockedDecrement
GetCommandLineA
InterlockedIncrement
GetTickCount
LocalAlloc
user32
GetWindowThreadProcessId
IsIconic
FindWindowA
MessageBoxA
SetFocus
GetLastActivePopup
GetForegroundWindow
SetTimer
EnumChildWindows
ReleaseDC
GetDC
EnableMenuItem
SetWindowPos
DispatchMessageA
DefWindowProcA
PostMessageA
DialogBoxParamA
DestroyWindow
SetWindowTextA
GetWindowLongA
KillTimer
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetWindowDC
LoadCursorA
wvsprintfA
CheckMenuItem
DeleteMenu
PostQuitMessage
DefDlgProcA
GetDesktopWindow
LoadIconA
BringWindowToTop
CharUpperBuffA
SetWindowPlacement
GetWindowPlacement
WindowFromPoint
SendDlgItemMessageA
EndDialog
SetDlgItemTextA
TranslateAcceleratorA
GetDlgItemTextA
SetCursor
ScreenToClient
PtInRect
ChildWindowFromPoint
RegisterWindowMessageA
SetCapture
ClientToScreen
GetParent
ReleaseCapture
GetCursorPos
DrawIcon
EndPaint
GetWindowTextA
BeginPaint
PeekMessageA
DrawTextA
SetDlgItemInt
GetDlgItemInt
RedrawWindow
RegisterClassA
CreateDialogParamA
LoadStringA
LoadAcceleratorsA
ShowWindow
UpdateWindow
SetForegroundWindow
GetFocus
LoadBitmapA
EnableWindow
TranslateMessage
GetMessageA
IsDialogMessageA
GetSubMenu
GetMenu
InvalidateRect
GetWindowRect
GetSystemMetrics
wsprintfA
GetDlgCtrlID
CallWindowProcA
CopyRect
DrawFocusRect
RemovePropA
CreateWindowExA
GetDlgItem
SetPropA
SetWindowLongA
GetClientRect
MapWindowPoints
SendMessageA
GetPropA
SetRect
DrawEdge
GetSysColor
IsWindow
WinHelpA
IsWindowVisible
crtdll
_amsg_exit
_XcptFilter
exit
_except_handler2
_exit
_initterm
_acmdln_dll
_commode_dll
_fmode_dll
_aexit_rtn_dll
__GetMainArgs
rand
strchr
strcspn
strspn
strncpy
sscanf
srand
gdi32
SaveDC
IntersectClipRect
RestoreDC
SetTextAlign
GetTextMetricsA
ExtTextOutA
SetBkColor
SelectObject
DeleteObject
CreateBitmap
CreateCompatibleDC
DeleteDC
BitBlt
PatBlt
CreateSolidBrush
SetTextColor
CreateFontIndirectA
GetDeviceCaps
GetTextExtentPoint32A
GetTextExtentPointA
GetStockObject
GetObjectA
comctl32
ord8
CreateToolbarEx
ord6
shell32
DragAcceptFiles
DragQueryFileA
SHGetFileInfoA
DragFinish
ShellAboutA
winmm
mciSendCommandA
advapi32
RegCloseKey
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCreateKeyA
ole32
CoCreateInstance
OleInitialize
OleUninitialize
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 20B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE