Static task
static1
Behavioral task
behavioral1
Sample
de88d0f513196f22b5e5491c472aa36e1d7b788e0bcde12ff0e4bb76c3578fa1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
de88d0f513196f22b5e5491c472aa36e1d7b788e0bcde12ff0e4bb76c3578fa1.exe
Resource
win10v2004-20221111-en
General
-
Target
de88d0f513196f22b5e5491c472aa36e1d7b788e0bcde12ff0e4bb76c3578fa1
-
Size
267KB
-
MD5
305d0723ede82c5f2cb9150fb6695340
-
SHA1
19a4cd194a7d21d677d2072a59e262fad4002891
-
SHA256
de88d0f513196f22b5e5491c472aa36e1d7b788e0bcde12ff0e4bb76c3578fa1
-
SHA512
71ab2de5dca169e11d4331808b82c7be5c25f2e556e94bd60e2c077faba6868d67f09a2732bd2a2fb8eaf0f3a42a158a05c23c986fbf4553d52730aadb86f1f6
-
SSDEEP
6144:23eSRBNKanyXXlKtvQp2MEVgNfDZO54mi0gz1bGq:23eSRBTn4KtvyFRkOntf
Malware Config
Signatures
Files
-
de88d0f513196f22b5e5491c472aa36e1d7b788e0bcde12ff0e4bb76c3578fa1.exe windows x86
fa64f0a8a1a97c4bae29eb548300f91e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
CommDlgExtendedError
GetOpenFileNameW
oleaut32
VarUI4FromStr
SysFreeString
SysAllocString
user32
UnregisterClassA
MapDialogRect
MoveWindow
MapWindowPoints
LoadImageW
SetDlgItemTextW
CallWindowProcW
SetWindowLongW
SetForegroundWindow
IsIconic
GetMessagePos
FindWindowExW
GetSystemMenu
GetWindowRect
GetClientRect
GetDesktopWindow
FlashWindow
SetWindowPos
EnableWindow
SendMessageW
GetSystemMetrics
ClientToScreen
DestroyIcon
GetWindowPlacement
ShowWindow
MonitorFromPoint
MonitorFromWindow
GetWindowLongW
GetWindowThreadProcessId
TrackPopupMenuEx
IsRectEmpty
LoadCursorW
DialogBoxParamW
CharNextW
EndDialog
ScreenToClient
SetCursor
RedrawWindow
DefWindowProcW
GetActiveWindow
GetKeyboardType
SetWindowTextW
GetWindow
GetDlgItem
CreateWindowExW
GetMonitorInfoW
DestroyWindow
AttachThreadInput
GetForegroundWindow
IsWindow
GetParent
comctl32
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_Create
ImageList_LoadImageW
ole32
CoTaskMemAlloc
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoCreateGuid
kernel32
SetUnhandledExceptionFilter
ReadFile
FileTimeToSystemTime
LeaveCriticalSection
IsDebuggerPresent
VirtualFree
FormatMessageW
HeapDestroy
LoadResource
GetDriveTypeW
FindResourceExW
UnhandledExceptionFilter
HeapSize
GetSystemTime
CreateFileW
GetCurrentThreadId
EnterCriticalSection
SetEndOfFile
FindNextFileW
GetProcessHeap
DeleteFileW
RemoveDirectoryW
lstrcmpiW
GetTimeFormatW
GetModuleHandleW
LocalAlloc
VirtualAlloc
GetDateFormatW
GetFileSize
CloseHandle
LockResource
GetSystemTimeAsFileTime
LocalFree
SetCurrentDirectoryW
WideCharToMultiByte
FindFirstFileW
RaiseException
SystemTimeToTzSpecificLocalTime
lstrlenW
LoadLibraryExW
GetCurrentDirectoryW
FindClose
WriteFile
HeapAlloc
SetFilePointer
HeapReAlloc
FreeLibrary
IsProcessorFeaturePresent
DeleteCriticalSection
FindResourceW
OutputDebugStringW
SizeofResource
CreateFileA
HeapFree
FlushInstructionCache
SystemTimeToFileTime
GetLogicalDrives
IsValidLocale
atl
AtlModuleInit
AtlAxGetControl
AtlModuleExtractCreateWndData
AtlRegisterClassCategoriesHelper
AtlModuleUnregisterServerEx
AtlModuleUnregisterServer
mmcndmgr
DllUnregisterServer
DllGetClassObject
Sections
.JkgYD Size: 2KB - Virtual size: 32KB
IMAGE_SCN_MEM_READ
.YewnHnP Size: 2KB - Virtual size: 21KB
IMAGE_SCN_MEM_READ
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.PKBbijH Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ymdnRt Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oPKSey Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ndqAkH Size: 1024B - Virtual size: 973B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nTWlOn Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jVwK Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WVvCVn Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 209KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qtxhGS Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Dlnr Size: 1024B - Virtual size: 701B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XtjB Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ