Static task
static1
Behavioral task
behavioral1
Sample
69ede3504511910aa8f2f2643b13f064aa78c43b11888d5508e5b12ac8a64f1d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
69ede3504511910aa8f2f2643b13f064aa78c43b11888d5508e5b12ac8a64f1d.exe
Resource
win10v2004-20220812-en
General
-
Target
69ede3504511910aa8f2f2643b13f064aa78c43b11888d5508e5b12ac8a64f1d
-
Size
48KB
-
MD5
20ceda4a441f9083829bfd5547822a6e
-
SHA1
8d3cb2777a1cfb8f93d1dd4bcd6e8d8ecc40fed3
-
SHA256
69ede3504511910aa8f2f2643b13f064aa78c43b11888d5508e5b12ac8a64f1d
-
SHA512
20e6d0938cf9b9edcc95b72303cda101685ca83659a479d8df5500701541099fa761b1d93a7c3634b86a39dda669756c32155f9833ccc1e93c0a0ea951a8d5a4
-
SSDEEP
768:d5GEWuttrTciJVPRTNyGLFJiVUpKQ3x1gzVO3ch6bkDucUWTOJDSyXN+qpRp7:d5JnrTcoppNnF0VuKQ30EbktUWTOJWyP
Malware Config
Signatures
Files
-
69ede3504511910aa8f2f2643b13f064aa78c43b11888d5508e5b12ac8a64f1d.exe windows x86
3b78927aa225c40375afb8d2004b5043
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
sqlunirl
_RegCreateKey_@12
_SendMessage@16
_GetWindowText@12
_GetSaveFileName@4
_GetFileAttributes_@4
_ChangeDisplaySettings_@8
_RegOpenKeyEx_@20
_PageSetupDlg_@4
_ReplaceText_@4
_EnumWindowStations_@8
_PostThreadMessage_@16
_NDdeGetShareSecurity_@24
_FindAtom_@4
_DefineDosDevice_@12
_Shell_NotifyIcon_@8
_IsBadStringPtr_@8
_lstrcpyn_@12
_CreateStatusWindow_@16
_RegReplaceKey_@16
_RegQueryMultipleValues_@20
_GetDlgItemText@16
_FatalAppExit_@8
shlwapi
StrCatBuffA
PathFindFileNameA
PathCommonPrefixA
StrFromTimeIntervalW
StrTrimW
PathRenameExtensionA
PathStripToRootW
SHRegGetPathW
SHOpenRegStream2W
StrSpnA
StrStrA
UrlIsA
StrRetToBufW
AssocQueryStringA
DelayLoadFailureHook
PathGetArgsW
SHEnumValueA
PathFindSuffixArrayA
PathRelativePathToW
StrChrW
inetcomm
EssMLHistoryEncodeEx
MimeOleGetAllocator
MimeOleGenerateCID
MimeOleDecodeHeader
HrSaveAttachmentAs
MimeOleSetPropW
MimeOleGenerateFileName
MimeOleEncodeHeader
MimeOleGetFileInfoW
MimeOleGetPropA
MimeOleSMimeCapGetHashAlg
EssSecurityLabelDecodeEx
MimeOleSetBodyPropW
CreateNNTPTransport
MimeOleSetPropA
MimeOleParseRfc822AddressW
MimeOleGetRelatedSection
CreateIMAPTransport2
MimeOleFindCharset
MimeOleCreatePropertySet
EssReceiptDecodeEx
GetDllMajorVersion
HrAttachDataFromFile
msvcrt
__getmainargs
_winmajor
_isatty
_mbsnbicmp
_mbsrev
__p__wpgmptr
_beginthread
abort
_mbcasemap
_errno
_winminor
_mbstrlen
_setmaxstdio
_mbspbrk
__threadid
vswprintf
_dup
iswdigit
kernel32
SetFileShortNameA
BaseCleanupAppcompatCacheSupport
QueryPerformanceCounter
ReadConsoleOutputAttribute
GetNativeSystemInfo
ConvertThreadToFiber
FindVolumeClose
GetCurrentThread
GetStartupInfoA
VirtualAlloc
GetVolumePathNamesForVolumeNameW
AddConsoleAliasA
SetFileAttributesA
SetLastError
AddAtomA
UnlockFile
GetTimeFormatW
FindClose
SleepEx
WritePrivateProfileSectionW
SetConsoleCursor
ConvertDefaultLocale
GetWindowsDirectoryW
SwitchToFiber
UTRegister
LoadLibraryA
GetSystemDefaultLCID
WriteConsoleOutputW
Heap32Next
d3d8thk
OsThunkDdColorControl
OsThunkDdSetColorKey
OsThunkD3dContextDestroyAll
OsThunkDdReleaseDC
OsThunkDdCreateDirectDrawObject
OsThunkDdGetMoCompBuffInfo
OsThunkDdGetDriverInfo
OsThunkDdBlt
OsThunkDdResetVisrgn
OsThunkDdGetAvailDriverMemory
OsThunkDdEndMoCompFrame
OsThunkDdCanCreateD3DBuffer
OsThunkDdCanCreateSurface
OsThunkDdUpdateOverlay
OsThunkDdGetMoCompGuids
OsThunkD3dContextCreate
user32
PostQuitMessage
RegisterClassW
DefWindowProcW
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mnjxuqg Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE