Static task
static1
Behavioral task
behavioral1
Sample
438013186a81d68f4942ad05e5657750ab20da00f46e06bae43f18bd24a07de3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
438013186a81d68f4942ad05e5657750ab20da00f46e06bae43f18bd24a07de3.exe
Resource
win10v2004-20220901-en
General
-
Target
438013186a81d68f4942ad05e5657750ab20da00f46e06bae43f18bd24a07de3
-
Size
312KB
-
MD5
c3c496cff7aa277effd820d554a35776
-
SHA1
2e09446cc93057014965aa291a8445c1f961f4ec
-
SHA256
438013186a81d68f4942ad05e5657750ab20da00f46e06bae43f18bd24a07de3
-
SHA512
721c36ef57eb6d20550a7809d8fd39f390716d51da844487a6f5e55a1868bc8011ed7856590d36f1c359ae95b6cf29606c4d529595a1c60db98d944d2a492117
-
SSDEEP
6144:TibFCKHTvXfBEWhJ8lyQQhE4MLvFnFns//5sgpm1Q3i:EFLmRAhE3LvXs//yZ1
Malware Config
Signatures
Files
-
438013186a81d68f4942ad05e5657750ab20da00f46e06bae43f18bd24a07de3.exe windows x86
a4389bedc0784d5df53c154466bbe61c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowTextW
GetKeyState
GetFocus
SetWindowRgn
SetWindowPos
EndPaint
SetWindowLongW
GetWindowTextW
GetDC
EndDialog
MapWindowPoints
UnregisterClassA
GetWindowTextLengthW
UnionRect
EqualRect
IsWindowEnabled
IsChild
BeginPaint
GetClientRect
GetWindowRect
CreateWindowExW
CallNextHookEx
SendMessageA
MessageBoxExW
ShowWindow
RegisterClassExW
InvalidateRect
GetWindowLongW
GetClassNameW
IntersectRect
CharNextW
GetMonitorInfoW
GetClassInfoExW
MapDialogRect
PostMessageW
OffsetRect
UnhookWindowsHookEx
SetCursor
DestroyWindow
EnableWindow
CharToOemBuffA
GetMenu
AdjustWindowRectEx
SetWindowContextHelpId
GetParent
IsWindow
GetWindow
SetWindowsHookExW
SendMessageW
SetFocus
LoadCursorW
MonitorFromWindow
ReleaseDC
DefWindowProcW
PtInRect
CallWindowProcW
SetTimer
wsprintfA
CreateAcceleratorTableW
RegisterWindowMessageA
GetCaretPos
GetMenuItemInfoW
DialogBoxParamA
SetMenu
GetIconInfo
MessageBoxW
SetActiveWindow
GetDlgItemInt
GetMenuState
WinHelpW
TrackPopupMenu
CreateAcceleratorTableA
SetWindowTextA
GetActiveWindow
AppendMenuW
MoveWindow
GetTopWindow
SetCursorPos
WinHelpA
GetMenuInfo
WaitMessage
GetCapture
advapi32
RegOpenKeyExA
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
shlwapi
PathFileExistsW
PathCanonicalizeW
PathRemoveExtensionW
PathIsRelativeW
PathFindFileNameW
PathStripToRootW
PathIsURLW
PathStripPathW
PathIsRootW
gdi32
SetViewportOrgEx
CreateMetaFileW
SetWindowOrgEx
TextOutW
DeleteObject
SetWindowExtEx
SetMapMode
GetDeviceCaps
SetTextAlign
CreateFontIndirectW
SaveDC
DeleteDC
CreateRectRgnIndirect
DeleteMetaFile
CloseMetaFile
RestoreDC
LPtoDP
GetTextColor
oleaut32
SysAllocString
SysFreeString
SysStringByteLen
SafeArrayCreate
VarBstrCmp
VariantInit
SafeArrayCopy
UnRegisterTypeLi
SafeArrayGetLBound
GetErrorInfo
VariantClear
SysAllocStringByteLen
SafeArrayGetUBound
DispCallFunc
VariantCopy
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayUnlock
VariantChangeType
SafeArrayLock
LoadTypeLi
SysStringLen
SafeArrayAccessData
OleCreatePropertyFrame
SysAllocStringLen
LoadRegTypeLi
SafeArrayGetElement
SafeArrayGetVartype
VarBstrCat
RegisterTypeLi
ole32
CoTaskMemFree
IIDFromString
CreateOleAdviseHolder
StringFromGUID2
CLSIDFromProgID
CoCreateGuid
StringFromCLSID
CreateStreamOnHGlobal
CoCreateInstance
ProgIDFromCLSID
CreateDataAdviseHolder
OleRegEnumVerbs
OleRegGetUserType
CLSIDFromString
CoTaskMemAlloc
OleRegGetMiscStatus
kernel32
HeapDestroy
FreeLibrary
lstrlenA
RaiseException
IsDebuggerPresent
SetFileAttributesA
EnumResourceNamesW
WaitForSingleObject
CreateFileMappingW
GlobalLock
SwitchToThread
GlobalUnlock
TlsAlloc
WideCharToMultiByte
TlsSetValue
IsValidCodePage
SetThreadPriority
VirtualAlloc
SetFileAttributesW
CreateEventW
HeapAlloc
TlsFree
MulDiv
GetFullPathNameW
CreateFileA
HeapFree
HeapSize
SizeofResource
GetModuleHandleW
MapViewOfFile
FindResourceW
lstrlenW
CopyFileW
GlobalAlloc
LockResource
CreateFileW
CreateDirectoryW
UnmapViewOfFile
UnhandledExceptionFilter
ReadFile
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
VirtualFree
CreateThread
HeapReAlloc
FindResourceExW
LoadResource
GetProcessHeap
FlushInstructionCache
FindClose
InterlockedPushEntrySList
GetCurrentDirectoryW
DeleteCriticalSection
ExpandEnvironmentStringsW
GetFileSize
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
lstrcmpW
LocalAlloc
CloseHandle
EnterCriticalSection
GetShortPathNameW
GetComputerNameW
FindFirstFileW
OutputDebugStringW
InterlockedPopEntrySList
FindNextFileW
IsProcessorFeaturePresent
GetSystemDefaultLCID
LeaveCriticalSection
RemoveDirectoryW
CopyFileA
SetLastError
GetACP
TlsGetValue
GetModuleHandleA
VirtualAllocEx
qdvd
DllCanUnloadNow
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 264KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ