Static task
static1
Behavioral task
behavioral1
Sample
195af6f99a32d9cc2505dff3db9c2a576f91ec613cb968fd5b006a555da55e46.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
195af6f99a32d9cc2505dff3db9c2a576f91ec613cb968fd5b006a555da55e46.exe
Resource
win10v2004-20221111-en
General
-
Target
195af6f99a32d9cc2505dff3db9c2a576f91ec613cb968fd5b006a555da55e46
-
Size
586KB
-
MD5
40c4249e162f59059799570dfb0865f0
-
SHA1
75abb3d9b6a5be0fe46e3c21d056f168229ac15b
-
SHA256
195af6f99a32d9cc2505dff3db9c2a576f91ec613cb968fd5b006a555da55e46
-
SHA512
2b0db18c6ac1bdd128146a4eaf15e542cc03b39db516cbe97db5797ab91ede003f80018e3c09ed18f5c55d12f4a37d8ef14a85f8110df0b506d57b71ac4bdbce
-
SSDEEP
12288:4VZg5RuXViO8UGYfFF3NOhsHuIf8YKmwKF0wV88PlHZtpaDN:4rg5CVnFiqHuIkFmTB8WtiN
Malware Config
Signatures
Files
-
195af6f99a32d9cc2505dff3db9c2a576f91ec613cb968fd5b006a555da55e46.exe windows x86
d9c712fab2f5f77e83f92eab2f7f85f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDeviceCaps
DeleteDC
SetTextColor
CreateCompatibleDC
BitBlt
CreateSolidBrush
kernel32
GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
LoadLibraryExW
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
GetCommandLineW
LockResource
GetCurrentProcessId
GetEnvironmentStrings
FileTimeToLocalFileTime
Sleep
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
HeapReAlloc
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
LCMapStringW
GetLastError
InterlockedIncrement
GetCurrentThreadId
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetDriveTypeA
GetTimeZoneInformation
WaitForMultipleObjects
DuplicateHandle
FindNextFileA
CreateFileMappingA
CompareStringA
lstrcpyA
FindFirstFileA
lstrcmpA
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileW
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
IsBadWritePtr
GetTickCount
QueryPerformanceCounter
FreeLibrary
GetVersionExW
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
GetLocaleInfoA
SetEndOfFile
CreateEventW
GetConsoleMode
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
InterlockedDecrement
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
GetVersionExA
ExitProcess
IsDebuggerPresent
VirtualProtect
GetModuleFileNameW
lstrlenW
GetEnvironmentVariableA
SetLastError
OutputDebugStringA
GetVersion
TlsGetValue
FindClose
GlobalLock
LoadResource
InitializeCriticalSection
GetExitCodeProcess
FormatMessageW
LocalFree
SetEvent
GetFullPathNameA
GetStringTypeW
GetDiskFreeSpaceA
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
lstrcmpiA
WideCharToMultiByte
SetStdHandle
MultiByteToWideChar
FreeEnvironmentStringsW
SetErrorMode
CreateFileA
ExpandEnvironmentStringsA
lstrcatA
LocalAlloc
GetCurrentDirectoryA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapAlloc
FindFirstFileW
HeapDestroy
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
RtlUnwind
ResetEvent
GetOEMCP
VirtualAlloc
VirtualFree
HeapCreate
IsValidCodePage
CreateProcessA
SizeofResource
FindResourceA
FormatMessageA
oleaut32
SysAllocStringLen
SysFreeString
SysAllocString
SysStringLen
user32
DialogBoxParamA
MessageBoxA
MessageBeep
SetForegroundWindow
GetDesktopWindow
TrackPopupMenu
LoadCursorA
ScreenToClient
GetDlgItem
SetTimer
GetSubMenu
CheckMenuItem
SetWindowTextA
EndDialog
SetWindowLongA
PostMessageA
GetWindowRect
GetSystemMetrics
DefWindowProcA
BeginPaint
PeekMessageA
MapWindowPoints
FillRect
CreateWindowExA
GetSysColor
RegisterClassA
LoadStringA
GetWindow
IsWindowEnabled
TranslateMessage
EnableWindow
SetCapture
ShowWindow
GetParent
DestroyWindow
GetCursorPos
GetDC
EndPaint
DispatchMessageA
IsWindow
SetWindowPos
LoadBitmapA
PostQuitMessage
SetFocus
CallWindowProcA
GetFocus
ReleaseDC
SetCursor
SystemParametersInfoA
IsWindowVisible
InvalidateRect
SendMessageA
GetWindowLongA
GetClientRect
advapi32
RegDeleteKeyA
RegSetValueExW
RegCreateKeyExA
RegQueryValueExA
RegCreateKeyExW
RegOpenKeyExA
RegCloseKey
RegOpenKeyExW
RegSetValueExA
Sections
.text Size: 461KB - Virtual size: 461KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ