Static task
static1
Behavioral task
behavioral1
Sample
2453eef02726dead3c82c99242a6dc24242f7c7bf6e4b30ef0173613ab869c78.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2453eef02726dead3c82c99242a6dc24242f7c7bf6e4b30ef0173613ab869c78.exe
Resource
win10v2004-20220812-en
General
-
Target
2453eef02726dead3c82c99242a6dc24242f7c7bf6e4b30ef0173613ab869c78
-
Size
82KB
-
MD5
b6da7a1c0b7c60b6613906c283e6278d
-
SHA1
4812b7c5a1b546678bd8cbf822afc25160d2eb6c
-
SHA256
2453eef02726dead3c82c99242a6dc24242f7c7bf6e4b30ef0173613ab869c78
-
SHA512
9173f9863cc867f453e82b7e24d5f340e7c971a84e07572aad62e89ca7f700fa466d6e6fc3a6e80ecb2422b2eee6fad5962368fdcc3292fe32c5ce2b11e17e03
-
SSDEEP
1536:EGbkXFl7lfA97mbrnlu1MTkUkglNQFTXOc7SL8Pkx6afa:SVs97KcIkUk+NObDWgQ6X
Malware Config
Signatures
Files
-
2453eef02726dead3c82c99242a6dc24242f7c7bf6e4b30ef0173613ab869c78.exe windows x86
a7c7619e39a7fa1749b3a0228752a6db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
SetWindowPos
UnhookWindowsHookEx
FrameRect
PostQuitMessage
GetScrollPos
EqualRect
SetWindowTextA
GetSysColor
GetMessageA
GetSysColorBrush
EnableMenuItem
GetSubMenu
EnumWindows
kernel32
QueryPerformanceCounter
GetThreadLocale
GetOEMCP
GetACP
FileTimeToSystemTime
GetStartupInfoA
GetCurrentProcessId
GetTickCount
ExitProcess
GetFileAttributesA
VirtualAllocEx
SetUnhandledExceptionFilter
InterlockedExchange
GetTempPathA
GetSystemTime
GetTimeZoneInformation
RtlUnwind
gdi32
FillRgn
CopyEnhMetaFileA
SelectClipPath
SetViewportExtEx
ExcludeClipRect
GetMapMode
CreateICW
CreateCompatibleBitmap
DPtoLP
ole32
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
DoDragDrop
CoInitializeSecurity
StgOpenStorage
OleRun
CoRevokeClassObject
CoInitialize
advapi32
RegQueryValueExW
FreeSid
AdjustTokenPrivileges
CryptHashData
GetUserNameA
RegCreateKeyExW
GetSecurityDescriptorDacl
QueryServiceStatus
RegCreateKeyA
CheckTokenMembership
msvcrt
fprintf
raise
__getmainargs
_CIpow
fflush
_fdopen
strcspn
strncpy
iswspace
__initenv
_strdup
strlen
_mbscmp
signal
_lock
__setusermatherr
_flsbuf
puts
comctl32
ImageList_Write
InitCommonControls
ImageList_LoadImageA
ImageList_SetIconSize
ImageList_DragEnter
CreatePropertySheetPageA
ImageList_GetIconSize
ImageList_DrawEx
ImageList_GetIcon
ImageList_LoadImageW
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_GetBkColor
shell32
DragQueryFileW
CommandLineToArgvW
DoEnvironmentSubstW
ExtractIconW
ExtractIconExW
DragQueryFileA
DragAcceptFiles
SHBrowseForFolderA
ShellExecuteEx
SHGetPathFromIDList
ShellExecuteW
oleaut32
SafeArrayGetUBound
SafeArrayCreate
SafeArrayUnaccessData
SafeArrayPutElement
SafeArrayRedim
SafeArrayPtrOfIndex
SysReAllocStringLen
VariantCopy
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE