Static task
static1
Behavioral task
behavioral1
Sample
f136237c50d9ea8f7ca96ed4ff30de3392620a03d0528e504f91435c9040141e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f136237c50d9ea8f7ca96ed4ff30de3392620a03d0528e504f91435c9040141e.exe
Resource
win10v2004-20220812-en
General
-
Target
f136237c50d9ea8f7ca96ed4ff30de3392620a03d0528e504f91435c9040141e
-
Size
43KB
-
MD5
385f5eefc717d72b16010bbecf1fb3e9
-
SHA1
1e6abc2a02ab47f093a87954d104e798f68c2122
-
SHA256
f136237c50d9ea8f7ca96ed4ff30de3392620a03d0528e504f91435c9040141e
-
SHA512
da22a634360c9b304acfb947b650d093e1d652e32ddb414d52b7cf30e1e943403c80a61d74f31a3d473a7f74d2df95be79905f7a2a3f155b7b071ed95c804b00
-
SSDEEP
768:syMtnHtvgXT30XpU6URhEVzJ9MNd05zhJD0diphpKpSpL1v41:srHJg4ZPCE1JF7D0d+1vS
Malware Config
Signatures
Files
-
f136237c50d9ea8f7ca96ed4ff30de3392620a03d0528e504f91435c9040141e.exe windows x86
7deab2bc0a4f96eb555595bcbec07f5c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryW
ReadFile
GetCommandLineA
CreateFileW
LoadLibraryW
GetProcAddress
GetVersionExA
UnhandledExceptionFilter
CloseHandle
ReleaseMutex
GetFileAttributesA
GetLastError
FreeLibrary
LoadLibraryA
lstrlenW
WaitForSingleObject
CreateMutexA
ExitProcess
GetModuleHandleA
GetStartupInfoA
SetErrorMode
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
lstrcpynA
SetUnhandledExceptionFilter
lstrlenA
GetEnvironmentVariableA
GetModuleFileNameA
lstrcpyW
SetCurrentDirectoryW
GetFullPathNameW
HeapFree
HeapAlloc
GetProcessHeap
lstrcatW
GetSystemDirectoryW
GetFileAttributesW
GetSystemInfo
GetVersionExW
GetCurrentDirectoryW
lstrcmpW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesExW
GetDateFormatW
CompareStringW
CompareFileTime
SystemTimeToFileTime
DeleteFileW
LocalFree
FormatMessageW
WriteFile
GetTimeFormatW
GetFileSize
SetEndOfFile
SetFilePointer
MulDiv
CreateThread
FlushFileBuffers
FindClose
FindNextFileW
GetShortPathNameW
FindFirstFileW
user32
GetWindowThreadProcessId
SetForegroundWindow
SendMessageTimeoutA
LoadStringA
MessageBoxA
SetFocus
CreateWindowExW
MoveWindow
GetClientRect
GetWindowRect
wsprintfW
GetDlgItem
EndDialog
DestroyWindow
SetWindowLongW
EndPaint
GetSysColor
GetParent
BeginPaint
GetWindowLongW
DefWindowProcW
RegisterClassW
LoadCursorW
LoadStringW
MessageBoxW
PostMessageW
ShowWindow
WinHelpW
ChildWindowFromPoint
ScreenToClient
DestroyIcon
DialogBoxParamW
LoadIconW
FindWindowW
CharUpperBuffW
CharLowerBuffW
IsDlgButtonChecked
GetDlgItemTextW
CheckRadioButton
InvalidateRect
SetDlgItemTextW
EnableWindow
SendMessageW
SetClassLongW
CheckDlgButton
gdi32
GetStockObject
SetTextAlign
SelectObject
SetTextColor
SetBkColor
GetTextExtentPoint32W
ExtTextOutW
msvcrt
memcpy
_vsnprintf
_XcptFilter
_exit
_cexit
wcsstr
_wcsnicmp
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_c_exit
_wcsicmp
wcschr
advapi32
RegOpenKeyExW
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegOpenKeyW
RegSetValueExW
RegCreateKeyExW
shell32
SHGetFileInfoW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
shlwapi
SHGetValueA
StrCmpIW
SHSetValueA
StrStrIA
PathRemoveFileSpecA
comctl32
PropertySheetW
CreateStatusWindowW
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ