Static task
static1
Behavioral task
behavioral1
Sample
66e82642f1a211a9609ee6fae5d0c889c29aa79ecc95862cfc367fbd69f13b3e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
66e82642f1a211a9609ee6fae5d0c889c29aa79ecc95862cfc367fbd69f13b3e.exe
Resource
win10v2004-20220812-en
General
-
Target
66e82642f1a211a9609ee6fae5d0c889c29aa79ecc95862cfc367fbd69f13b3e
-
Size
196KB
-
MD5
2bd0aa328501041774cbccf7446e7270
-
SHA1
b24dd5cbde1ea518d13742b54c10c93b20f4e9a0
-
SHA256
66e82642f1a211a9609ee6fae5d0c889c29aa79ecc95862cfc367fbd69f13b3e
-
SHA512
5dc61af00a5e985ccf7d724fe8d18b432556a3cbb6e0058d9f561c253be56143a573683b87b85d487b34b0ca45ae251137f06f683fa981db551fa20a8fcdda00
-
SSDEEP
3072:9HpWKqeR/nS9uAD0BosbiexLUbVmRvKAgH/B6gO6IW/p8z:FtSYAQouPWbVmxKT/BN5Iq6
Malware Config
Signatures
Files
-
66e82642f1a211a9609ee6fae5d0c889c29aa79ecc95862cfc367fbd69f13b3e.exe windows x86
536f9f7d3ec0e336cc0cbb92618a6f20
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
UnmapViewOfFile
_lopen
DeleteFileA
lstrcpynA
_lwrite
GetWindowsDirectoryA
_lread
LockResource
SystemTimeToFileTime
SetFileTime
CreateFileA
WriteFile
CloseHandle
ReadFile
GetSystemTime
_lclose
MapViewOfFile
GetCommandLineA
CreateFileMappingA
GetSystemDirectoryA
GetModuleFileNameA
LoadLibraryA
GetVersionExA
GetProcAddress
FreeLibrary
GetTempPathA
lstrcmpA
lstrcpyA
SizeofResource
lstrcatA
FindResourceA
_lcreat
LoadResource
LocalAlloc
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
GetCurrentProcess
TerminateProcess
ExitProcess
HeapCreate
GetVersion
GetStartupInfoA
GetModuleHandleA
HeapFree
GetACP
GetOEMCP
GetCPInfo
SetHandleCount
GetEnvironmentStringsW
GetFileType
GetStdHandle
HeapAlloc
lstrlenA
user32
DrawTextExA
GetWindowTextA
InflateRect
SetWindowTextA
SetWindowLongA
LoadIconA
SetRect
GetClientRect
GetMessageTime
SetWindowRgn
GetDlgItemTextA
MoveWindow
MessageBeep
SetActiveWindow
GetWindow
GetDesktopWindow
RegisterClassA
UnregisterClassA
ModifyMenuA
DestroyMenu
TrackPopupMenu
AppendMenuA
GetSubMenu
InvertRect
EndPaint
GetWindowRect
GetWindowLongA
FillRect
CopyRect
OffsetRect
DrawTextA
SetFocus
EndDialog
GetCursorPos
LoadCursorA
CharUpperA
FindWindowA
SetForegroundWindow
PostMessageA
GetForegroundWindow
CreateWindowExA
LoadImageA
DialogBoxParamA
TranslateMessage
DispatchMessageA
GetMessageA
ReleaseCapture
SetCapture
ClientToScreen
wsprintfA
CreateDialogParamA
ShowWindow
MessageBoxA
ExitWindowsEx
GetDC
SetDlgItemTextA
PtInRect
BeginPaint
LoadMenuA
CheckDlgButton
ReleaseDC
SendMessageA
EnableWindow
CheckRadioButton
GetDialogBaseUnits
SetWindowPos
WinHelpA
GetDlgItem
GetSystemMetrics
DefWindowProcA
DestroyWindow
PostQuitMessage
LoadBitmapA
DrawEdge
GetSysColor
GetSysColorBrush
DrawStateA
SetCursor
CreateDialogIndirectParamA
gdi32
AddFontResourceA
SelectObject
GetTextExtentPoint32A
CreateFontIndirectA
DeleteObject
CreateSolidBrush
SetTextColor
GetBkColor
SetBkMode
SetBkColor
BitBlt
CreateCompatibleDC
DeleteDC
LineTo
MoveToEx
GetObjectA
TextOutA
CreatePolygonRgn
CreatePen
EnumFontFamiliesA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA
shell32
ShellExecuteA
Shell_NotifyIconA
ole32
CoCreateInstance
CoInitialize
comctl32
ord17
Sections
pec1 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE