Static task
static1
Behavioral task
behavioral1
Sample
d26c8fe8547cadec50c7dd66a7c0384fd9c978a24ae334f022988cdf04fae558.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d26c8fe8547cadec50c7dd66a7c0384fd9c978a24ae334f022988cdf04fae558.exe
Resource
win10v2004-20220901-en
General
-
Target
d26c8fe8547cadec50c7dd66a7c0384fd9c978a24ae334f022988cdf04fae558
-
Size
256KB
-
MD5
06c33abc2b51569ca8d9997c86a59360
-
SHA1
aaf84a20c22ae43697ca7af858b3e5ceed7ec623
-
SHA256
d26c8fe8547cadec50c7dd66a7c0384fd9c978a24ae334f022988cdf04fae558
-
SHA512
813b8e5378765b13f6493a50d3b70002963dfc54b416e78f98a4daca1287390b9c35bd147ea97b7036dedbd0801079f3a9c614ecad2b5ed6583d883db1da729b
-
SSDEEP
6144:nX3ucfuV+CS56WY0bhqQKktg2ss/17JynDH1h2O0+NSOe/ofN:nXJm+CS56WYgIQKj2V1Ixh2OHNi/ol
Malware Config
Signatures
Files
-
d26c8fe8547cadec50c7dd66a7c0384fd9c978a24ae334f022988cdf04fae558.exe windows x86
1f1d155f4d1e50e053b99252730a9a6e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetKeyboardState
CreateWindowExW
BeginDeferWindowPos
OpenClipboard
GetListBoxInfo
PostThreadMessageA
DdeDisconnectList
DrawCaption
SetSysColors
IsWindowEnabled
GetInputDesktop
KillTimer
SetWindowContextHelpId
MapVirtualKeyExA
RegisterClassA
MessageBoxA
DdeCmpStringHandles
EmptyClipboard
AppendMenuW
DdeInitializeA
ScreenToClient
SetScrollPos
GetShellWindow
GetPriorityClipboardFormat
RealChildWindowFromPoint
LookupIconIdFromDirectoryEx
NotifyWinEvent
CreateMDIWindowA
LoadIconW
DestroyWindow
ModifyMenuA
SendNotifyMessageW
GetMonitorInfoW
EnumPropsExA
GetKeyNameTextW
CascadeWindows
GetKeyState
SetClassLongA
RegisterClassExA
EnumDisplaySettingsA
ToUnicodeEx
DefWindowProcW
RedrawWindow
BroadcastSystemMessage
LockWindowUpdate
WinHelpW
WindowFromPoint
EnableMenuItem
GetClassNameW
EqualRect
DdeFreeStringHandle
CreateCursor
ExitWindowsEx
SetClassLongW
ScrollWindowEx
GetCursorPos
GetMessageExtraInfo
InsertMenuItemW
PostQuitMessage
CharLowerW
MsgWaitForMultipleObjectsEx
DdeImpersonateClient
ShowWindow
GetMessagePos
shell32
SHFileOperation
SHChangeNotify
SHBrowseForFolderW
SHEmptyRecycleBinW
kernel32
GetStringTypeA
ExitProcess
TlsAlloc
CloseHandle
GetModuleFileNameW
GetLastError
IsBadWritePtr
GetCurrentProcessId
SetLastError
SetEnvironmentVariableA
InterlockedIncrement
GetVersionExW
FreeEnvironmentStringsA
GetTimeZoneInformation
HeapAlloc
HeapReAlloc
EnterCriticalSection
SetStdHandle
GetCurrentThread
UnhandledExceptionFilter
GetTickCount
TlsFree
LCMapStringA
GetSystemTimeAsFileTime
LCMapStringW
HeapFree
ReadFile
GetCurrentProcess
SetThreadContext
HeapDestroy
LoadLibraryA
VirtualFree
FreeEnvironmentStringsW
SetFilePointer
TlsSetValue
MultiByteToWideChar
VirtualAlloc
VirtualQuery
LeaveCriticalSection
GetCurrentThreadId
InitializeCriticalSection
RtlUnwind
ReadConsoleOutputCharacterW
GetStdHandle
FlushFileBuffers
GetSystemTime
GetStartupInfoA
GetStringTypeW
GetVersion
GetStartupInfoW
GetLocalTime
CompareStringW
HeapCreate
GetModuleFileNameA
GetFullPathNameA
CompareStringA
TlsGetValue
DeleteCriticalSection
TerminateProcess
GetEnvironmentStringsW
GetCommandLineA
InterlockedExchange
GetCommandLineW
QueryPerformanceCounter
InterlockedDecrement
CreateMutexA
GetCPInfo
WriteFile
GetProcAddress
SetHandleCount
OpenMutexA
WideCharToMultiByte
GetFileType
GetModuleHandleA
GetEnvironmentStrings
comctl32
ImageList_DrawEx
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_BeginDrag
ImageList_SetBkColor
ImageList_Merge
ImageList_GetBkColor
ImageList_Create
ImageList_LoadImageA
ImageList_AddIcon
_TrackMouseEvent
ImageList_GetIcon
InitCommonControlsEx
ImageList_Destroy
MakeDragList
CreateMappedBitmap
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ