Static task
static1
Behavioral task
behavioral1
Sample
8097fb17bad8d26178d212168bad695ebdda7606f2b2c044ad72df2a65d54db9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8097fb17bad8d26178d212168bad695ebdda7606f2b2c044ad72df2a65d54db9.exe
Resource
win10v2004-20220812-en
General
-
Target
8097fb17bad8d26178d212168bad695ebdda7606f2b2c044ad72df2a65d54db9
-
Size
55KB
-
MD5
df8ef370c1762a266d2961b9d32df120
-
SHA1
2c531cf533ead0272278770a575203efee215a45
-
SHA256
8097fb17bad8d26178d212168bad695ebdda7606f2b2c044ad72df2a65d54db9
-
SHA512
9feaa90ed9db75a1f8e95244cb7e0005ae4ccab376cf1cb6157b974d7f21699c278f2fa9ff4a96a86db5490fe762b9a6cd9712d1fc49a4aea2d3a732d66e814b
-
SSDEEP
1536:Llv0CW1DxVgKb2nsAX1MXWLb+Qlz7icqZXyezq:pv0CcZ2sAFMXC3zOcqo6
Malware Config
Signatures
Files
-
8097fb17bad8d26178d212168bad695ebdda7606f2b2c044ad72df2a65d54db9.exe windows x86
f48ace1832d0dcf21f17f4a7cf7e2ee1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
GetUserNameA
CopySid
GetLengthSid
RegCreateKeyA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
RegCreateKeyExA
msimg32
AlphaBlend
GradientFill
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
comdlg32
ChooseColorA
ChooseFontA
GetOpenFileNameA
GetSaveFileNameA
gdi32
CreateBitmap
IntersectClipRect
ExcludeClipRect
UpdateColors
DeleteDC
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetBkColor
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
SelectObject
CreateFontIndirectA
GetTextExtentExPointA
SetMapMode
GetDeviceCaps
GetTextMetricsA
CreateFontA
RealizePalette
SelectPalette
CreatePalette
ExtTextOutA
GetCharacterPlacementW
SetBkMode
GetBkMode
ExtTextOutW
GetCharABCWidthsFloatA
GetPixel
SetTextAlign
CreateCompatibleBitmap
TranslateCharsetInfo
GetObjectA
LineTo
MoveToEx
CreatePen
SetPixel
Polyline
GetCharWidthW
GetCharWidth32W
GetCharWidthA
GetCharWidth32A
SetPaletteEntries
UnrealizeObject
crypt32
CryptMemRealloc
CryptMsgCalculateEncodedLength
CryptMsgClose
CryptMsgControl
CryptMsgCountersign
ntdll
CsrAllocateCaptureBuffer
CsrAllocateMessagePointer
CsrCaptureMessageBuffer
shell32
ShellExecuteA
winmm
PlaySoundA
kernel32
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapSize
SetEndOfFile
InterlockedExchange
RtlUnwind
SetFilePointer
SetStdHandle
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapSize
SetEndOfFile
InterlockedExchange
RtlUnwind
SetFilePointer
SetStdHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetTimeZoneInformation
FlushFileBuffers
GetStringTypeW
GetStringTypeA
GetCommandLineA
GetStartupInfoA
GetSystemTimeAsFileTime
DeleteFileA
TerminateProcess
ExitProcess
HeapFree
HeapReAlloc
HeapAlloc
GetDateFormatA
GetTimeFormatA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetACP
GetLocalTime
GetEnvironmentVariableA
SetCommBreak
CreateFileA
GetCommState
SetCommState
SetCommTimeouts
ClearCommBreak
CreatePipe
SetHandleInformation
GetCurrentThreadId
OpenProcess
LocalAlloc
LocalFree
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetCurrentProcessId
QueryPerformanceCounter
GlobalMemoryStatus
GetCurrentThread
GetThreadTimes
GetCurrentProcess
GetProcessTimes
GetSystemTime
GetSystemTimeAdjustment
GetSystemDirectoryA
WriteFile
CreateEventA
_lread
GetLastError
WaitForSingleObject
GetOverlappedResult
SetEvent
LoadLibraryA
Sections
.text Size: 512B - Virtual size: 489B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ