Static task
static1
Behavioral task
behavioral1
Sample
d16e74f01e518de69886eeccc0d6fd8aab4df8fcbaa90ed50eec8e0b07e7ee85.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d16e74f01e518de69886eeccc0d6fd8aab4df8fcbaa90ed50eec8e0b07e7ee85.exe
Resource
win10v2004-20221111-en
General
-
Target
d16e74f01e518de69886eeccc0d6fd8aab4df8fcbaa90ed50eec8e0b07e7ee85
-
Size
148KB
-
MD5
552ec03f95c29e59cc7145efbb85d5c2
-
SHA1
c2dea83767058a0134ed72563af1f785e73dfc0b
-
SHA256
d16e74f01e518de69886eeccc0d6fd8aab4df8fcbaa90ed50eec8e0b07e7ee85
-
SHA512
159f31ea75d063e4ccb2f2d2b09a2c652d374493758f30ed042ae01b7901c07a5e8cf63f5ea2e8ef493310e72ba4d4d8f3a04c425d9b5c13a0e781b22c9215ca
-
SSDEEP
3072:56iDwKSntqKGAkINpnQaCWiGlyyKYpnleEfsezcltnIRnrN:OltqKGeiPyKYBVfHzktnIR
Malware Config
Signatures
Files
-
d16e74f01e518de69886eeccc0d6fd8aab4df8fcbaa90ed50eec8e0b07e7ee85.exe windows x86
89e158cc159f6dcb94dd5c13d9e099bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
CompareStringA
CompareStringW
CreateFileMappingA
CreateFileW
DisableThreadLibraryCalls
EnumCalendarInfoA
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceA
FindResourceW
FlushFileBuffers
FormatMessageA
FreeLibrary
GetACP
GetCPInfo
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesA
GetFileSize
GetFileTime
GetFileType
GetFullPathNameA
GetLocalTime
GetLocaleInfoA
GetModuleFileNameW
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeExA
GetStringTypeW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathW
GetUserDefaultLCID
GetVersion
GetWindowsDirectoryA
GlobalHandle
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InterlockedCompareExchange
InterlockedExchange
InterlockedIncrement
IsBadReadPtr
IsDebuggerPresent
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryW
LoadResource
LockResource
MapViewOfFile
QueryPerformanceCounter
ReadFile
ResumeThread
SetCurrentDirectoryA
SetEndOfFile
SetEvent
SetFileTime
SetLastError
TerminateProcess
TerminateThread
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
WritePrivateProfileStringA
lstrcpyA
user32
CallNextHookEx
CallWindowProcA
ClientToScreen
CloseClipboard
CreatePopupMenu
DefWindowProcA
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DrawEdge
DrawFrameControl
GetClassNameA
GetClientRect
GetCursorPos
GetDesktopWindow
GetForegroundWindow
GetIconInfo
GetKeyState
GetLastActivePopup
GetMenu
GetMenuItemID
GetMessageA
GetPropA
GetSystemMetrics
GetWindowDC
GetWindowTextA
GetWindowThreadProcessId
InsertMenuItemA
InvalidateRect
IsIconic
IsWindow
IsWindowEnabled
IsWindowVisible
KillTimer
MapWindowPoints
MessageBeep
RedrawWindow
ReleaseDC
SetCapture
SetClipboardData
SetForegroundWindow
SetRect
SetTimer
SetWindowLongA
SetWindowTextA
SetWindowsHookExA
ShowCursor
ShowOwnedPopups
ShowWindow
TrackPopupMenu
TranslateMessage
UpdateWindow
gdi32
Arc
BitBlt
CloseEnhMetaFile
CombineRgn
CreateBrushIndirect
CreateDCW
CreateDIBPatternBrushPt
CreateEllipticRgn
CreateHalftonePalette
CreatePatternBrush
CreatePenIndirect
CreateRectRgn
CreateRoundRectRgn
DeleteObject
EnumFontFamiliesA
EnumFontFamiliesExA
EnumFontFamiliesExW
ExtCreatePen
FillPath
FillRgn
FrameRgn
GdiFlush
GetBkMode
GetDCOrgEx
GetDIBColorTable
GetEnhMetaFileBits
GetObjectType
GetROP2
GetRgnBox
GetStockObject
GetStretchBltMode
GetTextMetricsA
GetViewportOrgEx
LineTo
MoveToEx
OffsetClipRgn
OffsetRgn
OffsetViewportOrgEx
PatBlt
PlayEnhMetaFile
PolylineTo
RectVisible
SaveDC
SelectObject
SetAbortProc
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetDIBitsToDevice
SetStretchBltMode
SetTextCharacterExtra
StartDocW
TranslateCharsetInfo
UnrealizeObject
shell32
CommandLineToArgvW
DragFinish
DragQueryFile
ExtractAssociatedIconW
ExtractIconA
ExtractIconExA
ExtractIconExW
ExtractIconW
SHAppBarMessage
SHBrowseForFolderW
SHCreateDirectoryExA
SHCreateDirectoryExW
SHGetDesktopFolder
SHGetDiskFreeSpaceExW
SHGetFileInfo
SHGetFolderLocation
SHGetFolderPathA
SHGetFolderPathW
SHGetMalloc
SHGetPathFromIDList
SHGetPathFromIDListA
SHGetPathFromIDListW
SHGetSettings
ShellExecuteA
ShellExecuteEx
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconA
Shell_NotifyIconW
comctl32
CreatePropertySheetPageA
CreatePropertySheetPageW
CreateStatusWindowA
CreateToolbarEx
DestroyPropertySheetPage
ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetIcon
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_LoadImageW
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetDragCursorImage
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_SetOverlayImage
ImageList_Write
InitCommonControls
InitializeFlatSB
PropertySheetA
PropertySheetW
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ