Static task
static1
Behavioral task
behavioral1
Sample
91b8e680d5b99e4e009ea0f8ec12b998817c099d54db3cd946ab1344bd6401ff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
91b8e680d5b99e4e009ea0f8ec12b998817c099d54db3cd946ab1344bd6401ff.exe
Resource
win10v2004-20220812-en
General
-
Target
91b8e680d5b99e4e009ea0f8ec12b998817c099d54db3cd946ab1344bd6401ff
-
Size
211KB
-
MD5
4f864a9bd69ada62b1414cafaec34bf9
-
SHA1
6ea60a5650833d52b797028caf79980231d63849
-
SHA256
91b8e680d5b99e4e009ea0f8ec12b998817c099d54db3cd946ab1344bd6401ff
-
SHA512
d639856f31398fe085a4b4db2c3bb6494f9a176b8176ecc6d103256a8181892a146477340e7ea21db6317c2cecaea983b9ef5a5bbc68a8a94c8a759ac925938f
-
SSDEEP
1536:EIxTORpNryaL+lQbFqFkJ5CXYRXR3C0k43JRPgTJAhneXC9:EIxTOFeaL+a+k3CXYn/k4fgTCney9
Malware Config
Signatures
Files
-
91b8e680d5b99e4e009ea0f8ec12b998817c099d54db3cd946ab1344bd6401ff.exe windows x86
8678e79287ad1751dd0d6b6a1eb71bfa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteObject
PatBlt
SetBkMode
CreateSolidBrush
BitBlt
CreateBitmap
CreateFontIndirectW
LineTo
TextOutW
CreateCompatibleDC
GetTextMetricsW
CreateCompatibleDC
DeleteDC
SetBkMode
CreateCompatibleBitmap
SetBkMode
TextOutW
GetTextMetricsW
MoveToEx
SetTextColor
StretchBlt
DeleteDC
LineTo
CreateSolidBrush
LineTo
GetTextExtentPoint32W
kernel32
HeapFree
WaitForSingleObject
lstrcpyW
InterlockedDecrement
GetProcAddress
GetSystemTimeAsFileTime
GetModuleHandleW
LoadLibraryA
GetTickCount
LeaveCriticalSection
VirtualFree
CloseHandle
GetModuleFileNameA
VirtualFree
InterlockedDecrement
LocalFree
GetCommandLineW
WideCharToMultiByte
CloseHandle
UnhandledExceptionFilter
FormatMessageW
GetCommandLineA
LeaveCriticalSection
GetProcessHeap
ExitProcess
GetModuleHandleW
GetStartupInfoA
GetStartupInfoA
GetTickCount
HeapAlloc
HeapFree
LocalFree
UnhandledExceptionFilter
SetLastError
LocalFree
SetLastError
VirtualFree
DeleteCriticalSection
InterlockedDecrement
GetProcAddress
InterlockedDecrement
lstrcmpiW
LocalAlloc
GetProcAddress
SetFilePointer
GetSystemTimeAsFileTime
GetVersionExA
SetUnhandledExceptionFilter
LocalFree
GetCurrentThreadId
user32
DestroyIcon
CreateDialogParamW
PostQuitMessage
CheckDlgButton
EndDialog
wsprintfA
GetWindow
DestroyIcon
wsprintfW
DispatchMessageA
PeekMessageW
ShowWindow
SetTimer
GetMenu
IsIconic
DestroyWindow
MessageBoxW
MoveWindow
SetForegroundWindow
DispatchMessageW
IsDialogMessageW
GetParent
GetDlgItem
DestroyIcon
EndDialog
SetWindowTextW
GetKeyState
DispatchMessageW
CopyRect
CopyRect
SetRect
GetCursorPos
SetCapture
DestroyMenu
CharNextW
CheckDlgButton
GetSubMenu
BeginPaint
LoadCursorW
SendMessageA
SetForegroundWindow
GetParent
SetWindowPos
IsIconic
GetMessageW
CheckDlgButton
FillRect
IsWindowVisible
FillRect
DispatchMessageW
DialogBoxParamW
DispatchMessageW
DialogBoxParamW
PostMessageW
FindWindowW
MoveWindow
ShowWindow
GetDlgItem
GetKeyState
GetParent
GetDesktopWindow
GetDesktopWindow
GetKeyState
MessageBoxW
SetCapture
PtInRect
InvalidateRect
LoadAcceleratorsW
GetMessageW
PostMessageW
GetSystemMetrics
FillRect
OffsetRect
MessageBoxW
DestroyWindow
GetWindow
KillTimer
IsWindow
OffsetRect
DrawTextW
IsIconic
wsprintfW
IsWindowVisible
LoadCursorW
DefWindowProcW
SetDlgItemTextW
SetRect
GetClientRect
MessageBoxA
SetWindowPos
IsWindow
GetFocus
LoadImageW
MoveWindow
SetCapture
wsprintfA
LoadMenuW
TranslateMessage
Sections
.idata Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.fdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.fdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE