Static task
static1
Behavioral task
behavioral1
Sample
827fade30523b48ac41303919fcee889029389e085664a14714ea424c2f41de7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
827fade30523b48ac41303919fcee889029389e085664a14714ea424c2f41de7.exe
Resource
win10v2004-20221111-en
General
-
Target
827fade30523b48ac41303919fcee889029389e085664a14714ea424c2f41de7
-
Size
86KB
-
MD5
8e19e057ea20827fd20c7c220f9c109d
-
SHA1
db7bb44c127f24b9367e472131747c490549e1c9
-
SHA256
827fade30523b48ac41303919fcee889029389e085664a14714ea424c2f41de7
-
SHA512
6aac6572c72978f06e3faebf712e44b2c1fbccdd9728f976a0982bce74f4f3eebbbaa7a50ca6af7c6ee1a1060e450a4c9567de7366f1069f2c99184e4bd213ea
-
SSDEEP
1536:Dt8HRvI7BaLJKMou95ukHqe8QjWU1ADz+bgAoA7hQ+2zzQ//zuDaoU4:iHKa1N9kQf8OGiHhms/aDaoH
Malware Config
Signatures
Files
-
827fade30523b48ac41303919fcee889029389e085664a14714ea424c2f41de7.exe windows x86
514f7ad08e42b1a6ae85a9efa70ade91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
SetWindowTextA
GetSubMenu
SetWindowPos
EqualRect
PostQuitMessage
GetSysColor
EnumWindows
GetScrollPos
EnableMenuItem
UnhookWindowsHookEx
GetMessageA
FrameRect
GetSysColorBrush
kernel32
GetTempPathA
RtlUnwind
GetTickCount
GetSystemTime
GetThreadLocale
QueryPerformanceCounter
GetACP
GetCurrentProcessId
GetOEMCP
ExitProcess
FileTimeToSystemTime
GetStartupInfoA
VirtualAllocEx
GetTimeZoneInformation
InterlockedExchange
SetUnhandledExceptionFilter
GetFileAttributesA
gdi32
CopyEnhMetaFileA
CreateICW
SetViewportExtEx
ExcludeClipRect
CreateCompatibleBitmap
GetMapMode
DPtoLP
FillRgn
SelectClipPath
ole32
CoInitializeSecurity
DoDragDrop
OleRun
StgOpenStorage
CoRevokeClassObject
CoCreateInstance
StringFromGUID2
CoInitialize
CoTaskMemRealloc
advapi32
GetUserNameA
RegCreateKeyExW
RegCreateKeyA
CheckTokenMembership
AdjustTokenPrivileges
RegQueryValueExW
CryptHashData
FreeSid
GetSecurityDescriptorDacl
QueryServiceStatus
msvcrt
_flsbuf
_fdopen
fprintf
_strdup
__initenv
strncpy
raise
strlen
iswspace
puts
fflush
_CIpow
__getmainargs
strcspn
signal
_mbscmp
_lock
__setusermatherr
comctl32
ImageList_GetIcon
ImageList_LoadImageA
ImageList_SetIconSize
InitCommonControls
ImageList_DragEnter
ImageList_GetIconSize
ImageList_LoadImageW
ImageList_GetBkColor
ImageList_DrawEx
ImageList_ReplaceIcon
ImageList_Destroy
CreatePropertySheetPageA
ImageList_Write
shell32
DragQueryFileW
ShellExecuteW
ShellExecuteEx
SHBrowseForFolderA
DoEnvironmentSubstW
DragAcceptFiles
ExtractIconW
DragQueryFileA
SHGetPathFromIDList
CommandLineToArgvW
ExtractIconExW
oleaut32
SysReAllocStringLen
SafeArrayPtrOfIndex
SafeArrayRedim
SafeArrayGetUBound
SafeArrayPutElement
SafeArrayCreate
VariantCopy
SafeArrayUnaccessData
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE