Static task
static1
Behavioral task
behavioral1
Sample
4030ae7bc54e7038b57acafb4eb064b1831137f469a54e1ddd112680aa972d9c.exe
Resource
win7-20220812-en
General
-
Target
4030ae7bc54e7038b57acafb4eb064b1831137f469a54e1ddd112680aa972d9c
-
Size
97KB
-
MD5
bbe45346c8c2952f847cf2f0935caf0c
-
SHA1
17083691dd075a103fa5064abb8ac47344dab6e6
-
SHA256
4030ae7bc54e7038b57acafb4eb064b1831137f469a54e1ddd112680aa972d9c
-
SHA512
8e7fda45f1d4c0d2fd85cd2eb37ea22c2c10e4dc137ea9981f34fe5c11252187ed0d57f048dec4a4e97da5f98f80d20bbc3e980df5101cdfc2a81882fdd9d453
-
SSDEEP
1536:UyzR0HNS/2TBRDGTQWAuusw5cqj7qC1bjzJkLG/Nsuqe6aFgM+:bAS/m3cuswWYr3VkLGauqFaFgM
Malware Config
Signatures
Files
-
4030ae7bc54e7038b57acafb4eb064b1831137f469a54e1ddd112680aa972d9c.exe windows x86
c37c28153291c1cf92e6d081f9d44725
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GetLastError
DeleteCriticalSection
lstrcpyW
CloseHandle
GetModuleFileNameW
InterlockedDecrement
lstrlenW
GetModuleHandleA
WideCharToMultiByte
LocalReAlloc
GetSystemWindowsDirectoryW
QueryPerformanceCounter
OutputDebugStringW
LoadLibraryW
InitializeCriticalSection
GetCurrentProcess
FileTimeToSystemTime
FormatMessageW
GlobalUnlock
GetEnvironmentStringsA
InterlockedIncrement
IsBadReadPtr
SetLastError
OutputDebugStringA
LocalFree
GlobalLock
lstrcmpiW
GetTickCount
CreateFileW
GetDateFormatW
GetSystemTimeAsFileTime
GetComputerNameW
GetStartupInfoA
FileTimeToLocalFileTime
GetEnvironmentStringsW
RemoveDirectoryW
GetProcessId
SetUnhandledExceptionFilter
GlobalAlloc
GetACP
IsValidCodePage
certcli
CAFindByName
CAAddCACertificateType
CAGetCAProperty
CAEnumCertTypesForCA
CARemoveCACertificateType
CAFreeCertTypeExtensions
CAUpdateCA
CAGetCertTypeFlags
CACertTypeGetSecurity
CAGetCertTypeKeySpec
CACreateCertType
CASetCertTypeKeySpec
CAEnumCertTypes
CACertTypeSetSecurity
CAGetCertTypePropertyEx
CACloseCertType
CAUpdateCertType
CACloseCA
CASetCertTypeFlags
CAGetCertTypeExtensions
CASetCertTypeExtension
CAFreeCertTypeProperty
CAEnumNextCertType
CASetCertTypeProperty
CAGetCertTypeProperty
CAFreeCAProperty
CAFindCertTypeByName
user32
EndDialog
LoadIconW
GetDlgItemTextA
GetParent
wsprintfW
SetDlgItemTextW
EnableWindow
GetDC
DialogBoxParamW
GetDlgItem
SetCursor
MessageBoxW
RegisterClipboardFormatW
ReleaseDC
LoadCursorW
LoadImageW
LoadStringW
SystemParametersInfoW
GetWindowLongW
PostMessageW
SetFocus
SetWindowLongW
SendMessageW
SetWindowTextW
InsertMenuItemW
LoadBitmapW
WinHelpW
SendDlgItemMessageW
msvcrt
_onexit
__dllonexit
wcsrchr
_wcsupr
free
mbstowcs
??1type_info@@UAE@XZ
wcslen
wcscat
_except_handler3
wcscpy
malloc
_purecall
wcschr
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z
vswprintf
_adjust_fdiv
__RTDynamicCast
wcstoul
wcsstr
_initterm
_wcsicmp
?terminate@@YAXXZ
wcscmp
gdi32
DeleteObject
GetDeviceCaps
CreateFontIndirectW
comctl32
PropertySheetW
CreatePropertySheetPageW
advapi32
RegCreateKeyExW
RegQueryValueExW
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegSetValueExW
RegDeleteValueW
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ