Static task
static1
Behavioral task
behavioral1
Sample
63b6230e73b6b0feaa7da7f26b27183b1b24a4eea6a80c1ce29b9193c034d48c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
63b6230e73b6b0feaa7da7f26b27183b1b24a4eea6a80c1ce29b9193c034d48c.exe
Resource
win10v2004-20221111-en
General
-
Target
63b6230e73b6b0feaa7da7f26b27183b1b24a4eea6a80c1ce29b9193c034d48c
-
Size
196KB
-
MD5
020083a5a93e461ada1bac5ddd4eb030
-
SHA1
62d789bfc74436bc54b5d890dd39c10d0f3e0e5f
-
SHA256
63b6230e73b6b0feaa7da7f26b27183b1b24a4eea6a80c1ce29b9193c034d48c
-
SHA512
692766b6978296a1649887d86e13863ce82582b6bc0240e462c84a652ea84ddc2327535fee9a0674b7103c41a36324d8f0db2bfa494f99e810c7701f91aafe10
-
SSDEEP
6144:+k367Hqt2jycgL+rhHKKV2BsdZhgTj8N9BC:NiHKp+lrmsbhgTj8FC
Malware Config
Signatures
Files
-
63b6230e73b6b0feaa7da7f26b27183b1b24a4eea6a80c1ce29b9193c034d48c.exe windows x86
e97c456eff8a4b1fba5d60ca58d6cd00
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetDlgItemTextW
wsprintfW
LoadIconW
DialogBoxParamW
ReleaseDC
SendDlgItemMessageW
SetCursor
MessageBoxW
EndDialog
LoadStringW
SetWindowLongW
GetDlgItemTextA
RegisterClipboardFormatW
GetParent
LoadCursorW
PostMessageW
SetFocus
GetWindowLongW
InsertMenuItemW
SystemParametersInfoW
WinHelpW
LoadBitmapW
EnableWindow
GetDlgItem
LoadImageW
GetDC
SendMessageW
SetWindowTextW
kernel32
WideCharToMultiByte
DeleteCriticalSection
IsValidCodePage
lstrcmpiW
OutputDebugStringW
GetStartupInfoA
GlobalUnlock
GetComputerNameW
LocalReAlloc
GetCPInfo
LoadLibraryW
CloseHandle
DeleteFileA
LocalFree
CreateFileW
GetCurrentProcess
InterlockedDecrement
GetEnvironmentStringsA
lstrlenW
SetUnhandledExceptionFilter
GetProcAddress
InitializeCriticalSection
GlobalLock
GetSystemTimeAsFileTime
MultiByteToWideChar
GetModuleFileNameW
GlobalAlloc
IsBadReadPtr
GetTickCount
FileTimeToSystemTime
FormatMessageW
lstrcpyW
GetDateFormatW
OutputDebugStringA
GetModuleHandleA
GetSystemWindowsDirectoryW
QueryPerformanceCounter
FileTimeToLocalFileTime
SetLastError
InterlockedIncrement
GetLastError
GlobalFree
certcli
CAGetCertTypeProperty
CAEnumNextCertType
CAFreeCertTypeExtensions
CAFindCertTypeByName
CASetCertTypeProperty
CAUpdateCertType
CAGetCertTypePropertyEx
CAFindByName
CASetCertTypeFlags
CACloseCA
CACreateCertType
CAGetCertTypeFlags
CAGetCAProperty
CACertTypeSetSecurity
CACertTypeGetSecurity
CAFreeCAProperty
CACloseCertType
CARemoveCACertificateType
CAFreeCertTypeProperty
CASetCertTypeKeySpec
CAAddCACertificateType
CASetCertTypeExtension
CAEnumCertTypes
CAGetCertTypeKeySpec
CAGetCertTypeExtensions
CAUpdateCA
CAEnumCertTypesForCA
msvcrt
_adjust_fdiv
_wcsicmp
_purecall
wcsstr
vswprintf
wcstoul
_initterm
malloc
??1type_info@@UAE@XZ
wcschr
memmove
wcscpy
wcslen
__dllonexit
?terminate@@YAXXZ
_wcsupr
_onexit
__RTDynamicCast
??3@YAXPAX@Z
wcsrchr
wcscat
free
mbstowcs
_except_handler3
??2@YAPAXI@Z
wcscmp
shell32
ShellExecuteW
ShellExecuteExW
advapi32
RegDeleteValueW
RegEnumKeyExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegDeleteKeyW
gdi32
CreateFontIndirectW
DeleteObject
GetDeviceCaps
comctl32
PropertySheetW
CreatePropertySheetPageW
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hdata Size: 78KB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ