Static task
static1
Behavioral task
behavioral1
Sample
27ccec23932302077f646a1f2326bf4379386825a640eecffc01bf49f5f556a5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
27ccec23932302077f646a1f2326bf4379386825a640eecffc01bf49f5f556a5.exe
Resource
win10v2004-20220901-en
General
-
Target
27ccec23932302077f646a1f2326bf4379386825a640eecffc01bf49f5f556a5
-
Size
944KB
-
MD5
ab0651aa5f0c2ed359973c8681030a16
-
SHA1
e54679f0d5da08f9e64167bc552b9603fd05bfd9
-
SHA256
27ccec23932302077f646a1f2326bf4379386825a640eecffc01bf49f5f556a5
-
SHA512
913900cc120d58792501161c161ff910a5d047785846f39ebff137513e2104cbbe9d1dbd9efc84efe9518e110bfcaef98c5391f552867963cc6782f408e7f842
-
SSDEEP
24576:BlE16HKUkaFVqa8MHSmAgCTWjwC9M5cyBkC:jZdkO82fAgCTfCiS
Malware Config
Signatures
Files
-
27ccec23932302077f646a1f2326bf4379386825a640eecffc01bf49f5f556a5.exe windows x86
450f40b84b6e8d1c284cfb73de297738
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
FlushFileBuffers
SetStdHandle
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
SetFilePointer
VirtualQuery
InterlockedExchange
RtlUnwind
InitializeCriticalSection
Sleep
LoadLibraryA
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetOEMCP
GetACP
LCMapStringW
LCMapStringA
VirtualFree
HeapCreate
HeapDestroy
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
GetModuleHandleA
GetProcAddress
ExitProcess
GetStartupInfoA
GetProcessHeap
HeapAlloc
GetPrivateProfileIntA
lstrcmpiA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
lstrcatA
QueryPerformanceCounter
WideCharToMultiByte
MultiByteToWideChar
GetSystemTime
GetCurrentDirectoryA
GlobalAlloc
LoadLibraryExA
EnumResourceTypesA
FreeLibrary
EnumResourceNamesA
EnumResourceLanguagesA
FindResourceExA
SizeofResource
LoadResource
LockResource
FreeResource
GetTempFileNameA
GetTempPathA
MoveFileA
GlobalFree
SetLastError
GlobalLock
GlobalUnlock
_lclose
GetTickCount
GetFileInformationByHandle
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
_lread
_lwrite
_llseek
CreateProcessA
GetExitCodeProcess
WriteFile
GetShortPathNameA
GetSystemInfo
CreateDirectoryA
GetPrivateProfileSectionA
CopyFileA
GetLastError
FormatMessageA
SetFileAttributesA
ReadFile
DeleteFileA
WritePrivateProfileSectionA
GetFileAttributesA
GetModuleFileNameA
GetVersionExA
lstrcpynA
GetFullPathNameA
lstrlenA
lstrcpyA
GetCommandLineA
WritePrivateProfileStringA
IsDBCSLeadByte
FindFirstFileA
FindClose
GetPrivateProfileStringA
lstrcmpA
CreateFileA
CloseHandle
HeapFree
GetCurrentThreadId
LocalFree
InterlockedCompareExchange
user32
MessageBoxA
GetSystemMetrics
SendDlgItemMessageA
CharNextA
GetDC
ReleaseDC
SendMessageA
LoadStringA
MsgWaitForMultipleObjects
DispatchMessageA
MessageBeep
IsDlgButtonChecked
CheckDlgButton
ShowWindow
GetWindowRect
CheckRadioButton
PeekMessageA
wsprintfA
SetFocus
PostMessageA
GetParent
GetDlgItem
EnableWindow
SetWindowLongA
SetDlgItemTextA
GetDlgItemTextA
GetClientRect
CharPrevA
CallWindowProcA
GetWindowLongA
gdi32
DeleteObject
GetDeviceCaps
GetObjectA
GetStockObject
CreateFontIndirectA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
msvcrt
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
__setusermatherr
_exit
_cexit
__getmainargs
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
comctl32
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
setupapi
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
Sections
.text Size: 592KB - Virtual size: 591KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 268KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ