Static task
static1
Behavioral task
behavioral1
Sample
a36969b69a1e5101c88ff65180dc19ee5bed82f18b35e8188aa64bf5486b6923.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a36969b69a1e5101c88ff65180dc19ee5bed82f18b35e8188aa64bf5486b6923.exe
Resource
win10v2004-20220812-en
General
-
Target
a36969b69a1e5101c88ff65180dc19ee5bed82f18b35e8188aa64bf5486b6923
-
Size
288KB
-
MD5
554847770cb28450caa5f0325292a80c
-
SHA1
3a5fcd0af58100c766f5eafa2473f874eade600f
-
SHA256
a36969b69a1e5101c88ff65180dc19ee5bed82f18b35e8188aa64bf5486b6923
-
SHA512
a3d89ee42949f3263a2b9eccafc174ecd40cccbf553f6e2e82920e8207c5218799b250c346e49d88dec4271232ff7d34e8d9fcdb480088f660561ed270bcebed
-
SSDEEP
3072:FlOdOW/wd2AiMhAr2OhewmFnPHES+pyXLQH8VM5ACknRbRkeFb54aS1PB5K9ltBz:XOQaFHSOhjmx/G584knrkUltt7kf
Malware Config
Signatures
Files
-
a36969b69a1e5101c88ff65180dc19ee5bed82f18b35e8188aa64bf5486b6923.exe windows x86
d5c9a556fcb88c86700ddf69af016e01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteKeyA
RegCreateKeyExA
InitializeSecurityDescriptor
RegEnumKeyExA
RegCloseKey
OpenThreadToken
CloseServiceHandle
DeleteService
RegDeleteValueA
RegOpenKeyExA
GetUserNameA
RegQueryValueExA
user32
DefWindowProcA
CallNextHookEx
MoveWindow
CheckMenuItem
GetWindowRect
CharNextA
wsprintfA
LoadIconA
ReuseDDElParam
WindowFromPoint
IsZoomed
PtInRect
IsDlgButtonChecked
DestroyWindow
WaitForInputIdle
IsMenu
LoadAcceleratorsA
FindWindowA
EndDeferWindowPos
GetSystemMenu
GetClassInfoA
GetMenuState
GetClientRect
EndDialog
GetCapture
RegisterWindowMessageA
CreatePopupMenu
DestroyIcon
LoadBitmapA
BeginDeferWindowPos
ScrollWindow
EndPaint
DispatchMessageA
SetFocus
RegisterClassA
GetSystemMetrics
UpdateWindow
RemovePropA
InvalidateRgn
GetCursorPos
LoadCursorA
SetScrollPos
DeferWindowPos
BeginPaint
DestroyCaret
IsWindowVisible
UnhookWindowsHookEx
IsWindow
LoadImageA
GetWindowTextA
IsChild
MapDialogRect
SetRectEmpty
EnableMenuItem
SetActiveWindow
GetMenuItemID
KillTimer
IntersectRect
GetMenu
GetSysColor
CreateWindowExA
OffsetRect
EqualRect
SetRect
ScreenToClient
GetParent
UnregisterClassA
MessageBeep
ShowWindow
DrawEdge
GetForegroundWindow
SetWindowLongA
DestroyCursor
DrawStateA
DrawFrameControl
DestroyAcceleratorTable
SetWindowTextA
GetActiveWindow
SendMessageTimeoutA
RegisterClassExA
AppendMenuA
GetKeyState
PostQuitMessage
GetWindowThreadProcessId
SendMessageA
BringWindowToTop
PostMessageA
TrackPopupMenu
MessageBoxA
comdlg32
CommDlgExtendedError
ChooseColorA
oleaut32
LoadTypeLi
kernel32
lstrlenW
LCMapStringA
ReleaseMutex
FreeEnvironmentStringsW
GlobalReAlloc
GlobalFree
CreateFileA
SetUnhandledExceptionFilter
DuplicateHandle
GlobalFlags
InterlockedExchange
CreateEventA
IsValidLocale
WriteConsoleW
RtlUnwind
CloseHandle
LockResource
GlobalHandle
GetFileTime
SetEnvironmentVariableA
GetSystemTimeAsFileTime
HeapAlloc
GetVersion
TerminateProcess
SetLastError
SetEndOfFile
GetProcessHeap
VirtualFree
GetModuleFileNameW
GetFileType
TlsAlloc
TlsGetValue
GetTempPathA
GetStdHandle
GetTickCount
CreateToolhelp32Snapshot
HeapDestroy
GetLocaleInfoA
IsDebuggerPresent
InterlockedDecrement
GetModuleHandleA
GetCurrentProcess
WriteConsoleA
DeleteCriticalSection
SetErrorMode
GetDateFormatA
VirtualAlloc
IsValidCodePage
GetCPInfo
InitializeCriticalSection
ResumeThread
GetFileSize
GetCurrentThreadId
TlsFree
GetTimeZoneInformation
GetLocalTime
GetCurrentProcessId
ExitProcess
UnhandledExceptionFilter
GetCommandLineA
GetLastError
GetConsoleCP
GetConsoleMode
InterlockedIncrement
HeapReAlloc
FlushFileBuffers
GetVersionExA
MulDiv
QueryPerformanceCounter
GetStringTypeW
GlobalLock
CreateMutexA
ReadFile
GetEnvironmentStrings
HeapCreate
FindFirstFileA
GetACP
GetEnvironmentStringsW
RaiseException
SetStdHandle
WritePrivateProfileStringA
GetTimeFormatA
HeapSize
Sleep
LoadLibraryA
FindClose
GetModuleFileNameA
CreateThread
GetCurrentDirectoryA
SetFilePointer
CreateDirectoryA
CompareStringA
lstrlenA
LeaveCriticalSection
TlsSetValue
GetStartupInfoA
GetConsoleOutputCP
GetProcAddress
FreeEnvironmentStringsA
FindFirstFileW
SetHandleCount
CompareStringW
LocalFree
GetStringTypeA
VirtualQuery
WriteFile
WideCharToMultiByte
GetLocaleInfoW
LCMapStringW
CopyFileA
EnterCriticalSection
GetOEMCP
HeapFree
MultiByteToWideChar
comctl32
InitCommonControlsEx
CreatePropertySheetPageA
ImageList_Add
ImageList_AddMasked
ord17
ImageList_Create
ImageList_Remove
ImageList_GetIcon
shell32
DragFinish
ExtractIconA
SHAppBarMessage
SHGetMalloc
ShellExecuteA
Shell_NotifyIconA
SHGetFileInfoA
SHFileOperationA
ord155
Sections
.text Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ