Static task
static1
Behavioral task
behavioral1
Sample
879278738f9a82850956dbfad96a5add78b05b99ef481ed30356c5cfd2422ac9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
879278738f9a82850956dbfad96a5add78b05b99ef481ed30356c5cfd2422ac9.exe
Resource
win10v2004-20220812-en
General
-
Target
879278738f9a82850956dbfad96a5add78b05b99ef481ed30356c5cfd2422ac9
-
Size
81KB
-
MD5
737db1867afa3633c2e835ae58aa44ec
-
SHA1
8e3a42fa0c022454baa6cb8484dffd3aee443b33
-
SHA256
879278738f9a82850956dbfad96a5add78b05b99ef481ed30356c5cfd2422ac9
-
SHA512
c3c1b914f82aa4fd23848c03294e1c2ab4958ea9176c4712c121a182b798d47f7fb4a6ec86a093ea9f3a83ff735ed8574f53c7b2f8d6bc472b9cb21d8e297ec0
-
SSDEEP
1536:Z7p8+PrPHYkuBop61nV+d3Hnt5D+wpIo70qu43dmuck:n8+jPYkuB06JM3HLbpIo043guH
Malware Config
Signatures
Files
-
879278738f9a82850956dbfad96a5add78b05b99ef481ed30356c5cfd2422ac9.exe windows x86
2b1455a8d180184397bf9e5d87029386
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
EqualRect
PostQuitMessage
EnumWindows
EnableMenuItem
SetWindowPos
FrameRect
GetSubMenu
GetScrollPos
GetSysColor
GetMessageA
GetSysColorBrush
SetWindowTextA
UnhookWindowsHookEx
kernel32
GetFileAttributesA
GetThreadLocale
ExitProcess
GetACP
VirtualAllocEx
GetTempPathA
RtlUnwind
GetSystemTime
GetCurrentProcessId
SetUnhandledExceptionFilter
GetStartupInfoA
GetTimeZoneInformation
FileTimeToSystemTime
InterlockedExchange
gdi32
DPtoLP
SelectClipPath
CreateCompatibleBitmap
FillRgn
ExcludeClipRect
CreateICW
SetViewportExtEx
CopyEnhMetaFileA
GetMapMode
ole32
StringFromGUID2
CoCreateInstance
CoInitialize
CoRevokeClassObject
CoInitializeSecurity
CoTaskMemRealloc
StgOpenStorage
OleRun
DoDragDrop
advapi32
CheckTokenMembership
GetSecurityDescriptorDacl
CryptHashData
RegQueryValueExW
RegCreateKeyExW
QueryServiceStatus
FreeSid
RegCreateKeyA
GetUserNameA
AdjustTokenPrivileges
msvcrt
fprintf
_fdopen
puts
_mbscmp
__initenv
_lock
strncpy
iswspace
signal
_strdup
strlen
__getmainargs
__setusermatherr
raise
strcspn
fflush
_flsbuf
_CIpow
comctl32
ImageList_GetIcon
ImageList_LoadImageA
ImageList_GetBkColor
InitCommonControls
CreatePropertySheetPageA
ImageList_Destroy
ImageList_SetIconSize
ImageList_DragEnter
ImageList_Write
ImageList_DrawEx
ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_GetIconSize
shell32
DragQueryFileA
SHBrowseForFolderA
DragAcceptFiles
ShellExecuteEx
CommandLineToArgvW
ExtractIconExW
ShellExecuteW
ExtractIconW
DoEnvironmentSubstW
DragQueryFileW
SHGetPathFromIDList
oleaut32
VariantCopy
SysReAllocStringLen
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayCreate
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayRedim
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE