Static task
static1
Behavioral task
behavioral1
Sample
757470ebdd2b3bee69cd9a4b763fce7c0208294075ed95eb66b07bc83d2aae22.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
757470ebdd2b3bee69cd9a4b763fce7c0208294075ed95eb66b07bc83d2aae22.exe
Resource
win10v2004-20221111-en
General
-
Target
757470ebdd2b3bee69cd9a4b763fce7c0208294075ed95eb66b07bc83d2aae22
-
Size
324KB
-
MD5
b649d50cb8a5108b2e11531d6eb09ef0
-
SHA1
6d466c42fe2e7c375c7d7d0a1826e6c51c016d51
-
SHA256
757470ebdd2b3bee69cd9a4b763fce7c0208294075ed95eb66b07bc83d2aae22
-
SHA512
de082653f6a3f516c7f237fbf038a3557dc3090583579f551e9db47f7bb8c454e02c0f4ce60e16c9882dd361f26c30b75fd14a31938298cffa5c3ad576e8215a
-
SSDEEP
6144:99J5RqwIO9yTCHlEyd1eTBhuAAsuWWbunhJTSZ5rByn5A5j7A:TJjqh9SlNd1e9hTAhWWbuh4Z5rB65AZ
Malware Config
Signatures
Files
-
757470ebdd2b3bee69cd9a4b763fce7c0208294075ed95eb66b07bc83d2aae22.exe windows x86
5b5a88526b79e94900fa701f8db8198b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
PropVariantClear
CoDisconnectObject
CoResumeClassObjects
GetRunningObjectTable
CoCreateFreeThreadedMarshaler
OleSave
CoTaskMemAlloc
OleFlushClipboard
advapi32
InitializeSecurityDescriptor
IsValidSid
CryptDestroyKey
GetFileSecurityA
kernel32
lstrcatA
VirtualAlloc
CopyFileA
GetSystemWindowsDirectoryW
EnterCriticalSection
lstrcpyW
CreateMutexW
SetProcessWorkingSetSize
ResetEvent
GetCurrentThreadId
MoveFileExW
VirtualQueryEx
WritePrivateProfileStringA
TlsSetValue
GetNumberFormatW
DeleteTimerQueueTimer
FindClose
InterlockedCompareExchange
EnumCalendarInfoA
FileTimeToLocalFileTime
VirtualFree
WritePrivateProfileSectionA
GetModuleHandleW
GlobalFree
LoadLibraryExA
RemoveDirectoryW
GetExitCodeThread
FindNextFileW
SetEndOfFile
GetVersionExW
GetSystemDefaultUILanguage
DosDateTimeToFileTime
GetPrivateProfileIntW
GetSystemDirectoryW
SetNamedPipeHandleState
HeapSize
GlobalLock
GetCommandLineA
GetQueuedCompletionStatus
GetTempFileNameA
GetLastError
GetSystemDefaultLCID
QueryDosDeviceW
GetOEMCP
GetCommandLineW
DeleteFileW
GetFileSize
FindFirstFileW
UnhandledExceptionFilter
FlushInstructionCache
MapViewOfFileEx
GetLogicalDrives
GetThreadLocale
GetFileTime
IsBadCodePtr
IsBadWritePtr
RaiseException
FreeEnvironmentStringsA
OpenEventW
PulseEvent
TerminateThread
GetTempPathW
CopyFileW
CreateThread
OpenMutexA
GetShortPathNameW
EnumResourceLanguagesW
GetProfileStringW
GetFileAttributesW
GetTickCount
GetShortPathNameA
FindResourceW
FindCloseChangeNotification
SetEnvironmentVariableW
GetCurrentProcessId
FindNextChangeNotification
ExitProcess
CreateFileMappingW
GetFileType
SetThreadPriority
ExpandEnvironmentStringsA
lstrlenA
lstrcatW
WriteConsoleW
GetSystemPowerStatus
IsDBCSLeadByte
GetFullPathNameW
FormatMessageW
GlobalReAlloc
GetExitCodeProcess
GetTempFileNameW
SetFilePointer
SetFileAttributesW
InitializeCriticalSectionAndSpinCount
OpenProcess
Sleep
GetSystemInfo
GetOverlappedResult
OpenFile
LoadLibraryExW
lstrcmpiW
lstrcpynW
Beep
CreateIoCompletionPort
EnumResourceNamesW
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetVersion
GetProcAddress
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
HeapAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
user32
RemoveMenu
Sections
.text Size: 256KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
egoisyy Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
muqaw Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oukwi Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE