Static task
static1
Behavioral task
behavioral1
Sample
7fc5b78a8a626a1e4373af3e2dc28ef446df975bab98c47feaf9dd5d21e825ae.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7fc5b78a8a626a1e4373af3e2dc28ef446df975bab98c47feaf9dd5d21e825ae.exe
Resource
win10v2004-20221111-en
General
-
Target
7fc5b78a8a626a1e4373af3e2dc28ef446df975bab98c47feaf9dd5d21e825ae
-
Size
287KB
-
MD5
59eb6ead5a1bba132e3ea31a06ba0422
-
SHA1
263d47e6a5dcadbc352c49ccf4231ba23619be68
-
SHA256
7fc5b78a8a626a1e4373af3e2dc28ef446df975bab98c47feaf9dd5d21e825ae
-
SHA512
6ad4686432c9eee4ec1fa024bd3bab6e0dab35fce2ef5e395707472d9da1fe260f0478dd51f2525c877e111b043e6f951d036b80a62eb0cd9bc7d034d415bb1f
-
SSDEEP
6144:Eqz4e1WHMJrPTx2kA8jA9f0oJTBcSy6+asWqcnv5j5ic0lp/5TBcS:EA4e1WsJ712ZGAHJTeSpNsWV55K/5TWS
Malware Config
Signatures
Files
-
7fc5b78a8a626a1e4373af3e2dc28ef446df975bab98c47feaf9dd5d21e825ae.exe windows x86
178316d48ed4d94de5b5acbd3d17e471
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
time
srand
rand
malloc
free
memcpy
fopen
fread
fwrite
ftell
fseek
fclose
ferror
realloc
_stricmp
setlocale
atof
_strnicmp
strncmp
strncpy
_strdup
strlen
strcpy
strcat
memmove
sprintf
strcmp
fabs
ceil
floor
gmtime
localtime
mktime
kernel32
GetModuleHandleA
HeapCreate
CreateMutexA
GetLastError
Sleep
ReleaseMutex
CloseHandle
HeapDestroy
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
FormatMessageA
LocalFree
TlsFree
GetCurrentProcessId
GetCurrentProcess
SetProcessWorkingSetSize
GetFileAttributesA
CreateFileA
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
IsBadReadPtr
GetProcessHeap
HeapAlloc
FreeLibrary
HeapFree
GetCurrentThreadId
GetVersionExA
WideCharToMultiByte
HeapReAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetLastError
GlobalAlloc
GlobalFree
MulDiv
DeleteFileA
GetCurrentDirectoryA
GetDriveTypeA
FindFirstFileA
FindClose
WriteFile
ReadFile
SetFilePointer
DeleteCriticalSection
GetLocalTime
MultiByteToWideChar
user32
SendMessageA
SetWindowPos
keybd_event
LockWindowUpdate
RemovePropA
SetPropA
GetPropA
IsWindow
EnumPropsExA
GetWindowDC
ReleaseDC
CreateWindowExA
GetSysColor
GetKeyState
GetNextDlgTabItem
GetDlgCtrlID
GetWindowLongA
SetWindowLongA
CharToOemA
CharLowerA
MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
GetForegroundWindow
IsWindowEnabled
EnableWindow
EnumWindows
DestroyWindow
GetWindowRect
SetWindowTextA
GetWindowTextLengthA
GetWindowTextA
GetWindow
RedrawWindow
CallWindowProcA
ShowWindow
GetSysColorBrush
GetParent
GetDC
InflateRect
InvalidateRect
UpdateWindow
GetClientRect
GetIconInfo
DrawStateA
GetFocus
FrameRect
DrawFocusRect
ValidateRect
SetFocus
FillRect
DefWindowProcA
LoadCursorA
RegisterClassExA
SetClassLongA
GetSystemMetrics
MapWindowPoints
MoveWindow
DrawFrameControl
PeekMessageA
TranslateMessage
DispatchMessageA
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
RegisterClassA
AdjustWindowRectEx
GetActiveWindow
CreateAcceleratorTableA
MsgWaitForMultipleObjects
GetMessageA
TranslateAcceleratorA
EnumChildWindows
PostMessageA
DefFrameProcA
SetCursorPos
LoadImageA
SetCursor
SystemParametersInfoA
SetCapture
GetCursorPos
ReleaseCapture
IsChild
GetClassNameA
DestroyIcon
CreateIconFromResourceEx
CreateIconFromResource
gdi32
GetStockObject
SetBkColor
SetTextColor
ExcludeClipRect
CreateRectRgn
SelectClipRgn
GetObjectA
GetObjectType
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
CreateDCA
StretchBlt
CreatePen
MoveToEx
LineTo
CreateDIBSection
CreateSolidBrush
GetDIBits
CreateBitmap
SetPixel
SetDIBits
GetDeviceCaps
CreateFontA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
comctl32
InitCommonControlsEx
ImageList_Destroy
ImageList_Remove
ImageList_AddMasked
ImageList_Create
ImageList_Add
ImageList_ReplaceIcon
ImageList_GetIconSize
oleaut32
SysFreeString
VariantClear
DispGetParam
VariantInit
VariantChangeType
SysAllocString
VariantCopy
DispGetIDsOfNames
GetActiveObject
ole32
CoInitialize
CLSIDFromString
ProgIDFromCLSID
CLSIDFromProgID
CoGetClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetObject
RevokeDragDrop
winmm
timeBeginPeriod
timeEndPeriod
atl
AtlAxWinInit
AtlAxCreateControl
AtlAxGetControl
AtlAxGetHost
Sections
.code Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ