Static task
static1
Behavioral task
behavioral1
Sample
93475f844931d00622e7d0f361b5e3823df0a61c8c419e424ba9c793dd38d718.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
93475f844931d00622e7d0f361b5e3823df0a61c8c419e424ba9c793dd38d718.exe
Resource
win10v2004-20221111-en
General
-
Target
93475f844931d00622e7d0f361b5e3823df0a61c8c419e424ba9c793dd38d718
-
Size
809KB
-
MD5
f63af6bf62e0a46cf7037228460076bf
-
SHA1
447ff6f244866bcedd8d22bc87da8d2c3c2b6353
-
SHA256
93475f844931d00622e7d0f361b5e3823df0a61c8c419e424ba9c793dd38d718
-
SHA512
21a27c4a0629af1ee269b3f8f937d8281145faf478a9a594769b037ce15fd35a17e4ae9ba60dab15a44d62b398d2300eb94dd067b06963ee0f80357dbd097d81
-
SSDEEP
24576:CMKeKmwkhK6LvSDTAAa2YpXlAraUkfJjVQ0xT:CV14hKYvSParhrrxT
Malware Config
Signatures
Files
-
93475f844931d00622e7d0f361b5e3823df0a61c8c419e424ba9c793dd38d718.exe windows x86
0c526d03d9c7a15191b2fc55e1c423fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PostQuitMessage
SetWindowPos
GetDC
GetCursorPos
GetKeyState
GetParent
UpdateWindow
EnableWindow
TranslateMessage
EnableMenuItem
GetWindowLongA
EndPaint
SetFocus
BeginPaint
KillTimer
GetWindowRect
SetWindowLongA
DispatchMessageA
GetDlgItem
GetSysColor
SystemParametersInfoA
InvalidateRect
SendMessageA
GetClientRect
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteKeyW
RegCloseKey
kernel32
GetFileAttributesW
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetConsoleMode
GetLocaleInfoA
LocalAlloc
FreeEnvironmentStringsW
HeapDestroy
WideCharToMultiByte
GetStringTypeA
InterlockedExchange
WriteFile
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
SetEvent
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
SetStdHandle
HeapAlloc
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetTickCount
GetVersion
GetLastError
GetCommandLineA
ExitProcess
VirtualAlloc
GetOEMCP
FindResourceA
Sleep
VirtualFree
UnmapViewOfFile
GetACP
lstrcpynA
CloseHandle
SetFilePointer
TlsFree
RaiseException
GetCurrentThread
InterlockedCompareExchange
HeapSize
GetCurrentDirectoryA
GetCommandLineW
LockResource
GetEnvironmentStrings
lstrlenW
VirtualQuery
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
HeapCreate
LeaveCriticalSection
CreateFileA
TlsSetValue
GetFileType
GlobalLock
FindNextFileA
CompareStringA
GetDiskFreeSpaceA
FindFirstFileA
CompareStringW
GetProcessHeap
GetProcAddress
GetCPInfo
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
VirtualProtect
TlsAlloc
QueryPerformanceCounter
FreeLibrary
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
SetEndOfFile
GlobalAlloc
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
CreateThread
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
GetVersionExA
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
Sections
.text Size: 757KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ