Static task
static1
Behavioral task
behavioral1
Sample
7e84429996e1acff3c537683425950ad340130c1394e92a3f37ea488ced83ad4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7e84429996e1acff3c537683425950ad340130c1394e92a3f37ea488ced83ad4.exe
Resource
win10v2004-20220812-en
General
-
Target
7e84429996e1acff3c537683425950ad340130c1394e92a3f37ea488ced83ad4
-
Size
87KB
-
MD5
dfa26baa90ff1dd1ebdbbc1596414e49
-
SHA1
cdca65f5f3d66738793bcc6cbf6ba38a36ea0ca4
-
SHA256
7e84429996e1acff3c537683425950ad340130c1394e92a3f37ea488ced83ad4
-
SHA512
47da9131f624cb447c97eba1d20de67dbcce8752de24c2110d52c1a1b4422985b45bdd5170d397b6749ece378969488053c60a256872af7c668e77e8cb534578
-
SSDEEP
1536:bmdwlw8YpFdGRz8yxDATMTfk+uaW28XOcd4yER4lENjwRnUGU:bj67pFdGRzl7k+/Yecd4yE+2Vw1tU
Malware Config
Signatures
Files
-
7e84429996e1acff3c537683425950ad340130c1394e92a3f37ea488ced83ad4.exe windows x86
71f5d318d7cf833fcdb93803f42fabf1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
WritePrivateProfileStringA
GetLastError
GetLogicalDrives
lstrlenA
_lread
WritePrivateProfileSectionA
OpenFile
ExitThread
_lclose
WinExec
GetPrivateProfileStringA
GetExitCodeThread
GetPrivateProfileIntA
WaitForSingleObject
Sleep
MultiByteToWideChar
SetErrorMode
CreateThread
CloseHandle
ExitProcess
RtlMoveMemory
LocalFree
RtlZeroMemory
GetTickCount
InterlockedDecrement
GetCommandLineA
InterlockedIncrement
GetLocaleInfoA
GetUserDefaultLCID
SearchPathA
GetModuleHandleA
LocalAlloc
user32
SetTimer
DefWindowProcA
EnumChildWindows
GetSystemMetrics
SetFocus
MessageBoxA
ReleaseDC
EnableMenuItem
SetWindowPos
GetWindowRect
WinHelpA
DialogBoxParamA
PostMessageA
GetDC
DestroyWindow
GetMessageA
SetWindowTextA
GetWindowLongA
TranslateMessage
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetWindowDC
IsWindowVisible
wvsprintfA
CheckMenuItem
GetLastActivePopup
GetSubMenu
GetMenu
IsWindow
CreateDialogParamA
EnableWindow
GetWindowThreadProcessId
FindWindowA
GetWindowPlacement
WindowFromPoint
SendDlgItemMessageA
EndDialog
SetDlgItemTextA
InvalidateRect
UpdateWindow
SetCursor
ScreenToClient
PtInRect
ChildWindowFromPoint
RegisterWindowMessageA
SetCapture
ClientToScreen
GetParent
ReleaseCapture
GetCursorPos
DrawIcon
EndPaint
GetWindowTextA
BeginPaint
PeekMessageA
DrawTextA
SetDlgItemInt
GetDlgItemInt
RedrawWindow
BringWindowToTop
SetForegroundWindow
LoadIconA
LoadBitmapA
LoadCursorA
DefDlgProcA
RegisterClassA
GetForegroundWindow
CharUpperBuffA
IsIconic
SetWindowPlacement
LoadStringA
LoadAcceleratorsA
ShowWindow
GetFocus
GetDesktopWindow
GetDlgItemTextA
DispatchMessageA
TranslateAcceleratorA
IsDialogMessageA
wsprintfA
GetDlgCtrlID
CallWindowProcA
CopyRect
DrawFocusRect
RemovePropA
CreateWindowExA
GetDlgItem
SetPropA
SetWindowLongA
GetClientRect
MapWindowPoints
SendMessageA
GetPropA
SetRect
DrawEdge
GetSysColor
KillTimer
PostQuitMessage
DeleteMenu
crtdll
_exit
_amsg_exit
_XcptFilter
exit
_initterm
__GetMainArgs
_acmdln_dll
_commode_dll
_fmode_dll
_aexit_rtn_dll
_except_handler2
rand
strchr
strcspn
strspn
strncpy
sscanf
srand
gdi32
GetTextMetricsA
SaveDC
IntersectClipRect
RestoreDC
SetTextAlign
ExtTextOutA
SelectObject
DeleteObject
SetBkColor
CreateCompatibleDC
DeleteDC
CreateBitmap
PatBlt
CreateSolidBrush
BitBlt
CreateFontIndirectA
GetDeviceCaps
SetTextColor
GetObjectA
GetTextExtentPointA
GetStockObject
GetTextExtentPoint32A
comctl32
ord8
CreateToolbarEx
ord6
shell32
DragAcceptFiles
DragQueryFileA
SHGetFileInfo
DragFinish
ShellAboutA
winmm
mciSendCommandA
advapi32
RegCloseKey
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCreateKeyA
ole32
OleInitialize
CoCreateInstance
OleUninitialize
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.fuck Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE