Static task
static1
Behavioral task
behavioral1
Sample
d7434cca5bc09a74287bafdb4e27203090ee575cb8d94e13e1b0ca3d149914e3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d7434cca5bc09a74287bafdb4e27203090ee575cb8d94e13e1b0ca3d149914e3.exe
Resource
win10v2004-20220812-en
General
-
Target
d7434cca5bc09a74287bafdb4e27203090ee575cb8d94e13e1b0ca3d149914e3
-
Size
87KB
-
MD5
6a3e16c28e4817ad148b0db2c41377d7
-
SHA1
57b8d300ca4e1877b38a15b9ed8ce02809c41d58
-
SHA256
d7434cca5bc09a74287bafdb4e27203090ee575cb8d94e13e1b0ca3d149914e3
-
SHA512
47905153c1d59ca366896f2b0452fbb02cba45b4f1bce1c678a95e61dbb88eb8a8f95adaadb81d5b925af2bdfced61d211539e317bc8f1260ca98a0356f5e806
-
SSDEEP
1536:Y3aC36OMP4MMJhYJlCEhBswExeheUKnhq2LKXSwrRBWfPwtI8bezE:lC36OM0YRhBsTehlOc2uPWfPp8bB
Malware Config
Signatures
Files
-
d7434cca5bc09a74287bafdb4e27203090ee575cb8d94e13e1b0ca3d149914e3.exe windows x86
e3c9991ff2f9e0c687697e9c665ec0e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
GetSubMenu
EqualRect
UnhookWindowsHookEx
EnumWindows
SetWindowPos
GetSysColor
EnableMenuItem
GetScrollPos
GetSysColorBrush
PostQuitMessage
GetMessageA
SetWindowTextA
FrameRect
kernel32
GetStartupInfoA
GetFileAttributesA
GetOEMCP
GetTimeZoneInformation
GetACP
VirtualAllocEx
GetTickCount
FileTimeToSystemTime
GetThreadLocale
GetTempPathA
ExitProcess
GetCurrentProcessId
SetUnhandledExceptionFilter
RtlUnwind
InterlockedExchange
gdi32
ExcludeClipRect
SelectClipPath
FillRgn
CreateICW
GetMapMode
SetViewportExtEx
DPtoLP
CreateCompatibleBitmap
CopyEnhMetaFileA
ole32
DoDragDrop
CoInitializeSecurity
CoTaskMemRealloc
StgOpenStorage
CoRevokeClassObject
CoInitialize
OleRun
StringFromGUID2
CoCreateInstance
advapi32
CryptHashData
GetUserNameA
RegCreateKeyExW
RegQueryValueExW
GetSecurityDescriptorDacl
RegCreateKeyA
QueryServiceStatus
AdjustTokenPrivileges
FreeSid
CheckTokenMembership
msvcrt
strcspn
_CIpow
signal
_lock
_strdup
iswspace
__setusermatherr
raise
fprintf
_mbscmp
__initenv
puts
strncpy
_flsbuf
__getmainargs
fflush
_fdopen
strlen
comctl32
ImageList_Write
ImageList_LoadImageW
ImageList_SetIconSize
ImageList_LoadImageA
ImageList_GetIconSize
ImageList_DrawEx
ImageList_GetIcon
CreatePropertySheetPageA
ImageList_GetBkColor
InitCommonControls
ImageList_Destroy
ImageList_DragEnter
ImageList_ReplaceIcon
shell32
DragQueryFileA
SHGetPathFromIDList
SHBrowseForFolderA
DragQueryFileW
DragAcceptFiles
ShellExecuteW
CommandLineToArgvW
ExtractIconW
DoEnvironmentSubstW
ShellExecuteEx
ExtractIconExW
oleaut32
SafeArrayPutElement
VariantCopy
SafeArrayPtrOfIndex
SafeArrayCreate
SafeArrayGetUBound
SafeArrayRedim
SafeArrayUnaccessData
SysReAllocStringLen
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE