Static task
static1
Behavioral task
behavioral1
Sample
837e1e38cdd96b40be211a41e1ac5f544ee51d4265c8167e4ad41c2fd2397c7a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
837e1e38cdd96b40be211a41e1ac5f544ee51d4265c8167e4ad41c2fd2397c7a.exe
Resource
win10v2004-20221111-en
General
-
Target
837e1e38cdd96b40be211a41e1ac5f544ee51d4265c8167e4ad41c2fd2397c7a
-
Size
66KB
-
MD5
bd7ab885fd826780d508bad02db82eab
-
SHA1
20c6b0e0a25401efd67c64d4542ea7249f71cf2a
-
SHA256
837e1e38cdd96b40be211a41e1ac5f544ee51d4265c8167e4ad41c2fd2397c7a
-
SHA512
a55e80cbe5f3d7d6c0749bf4011751bf6a198ec87a140bb127ee00551c52d835de236fae0d0bd31a5b1183a6f7682490eb2b01cdc79f3577b566d55520d0b9eb
-
SSDEEP
1536:sY8S3CM/BR6ARLGm2TTn2HEYX+lAw9c88zHVwM:sY8S3CM/BwwL52TwX+Oy8LVwM
Malware Config
Signatures
Files
-
837e1e38cdd96b40be211a41e1ac5f544ee51d4265c8167e4ad41c2fd2397c7a.exe windows x86
a7abd57383770c3b172508aa2dcb7d41
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToFileW
kernel32
CloseHandle
MultiByteToWideChar
lstrcmpiW
CreateMutexA
WaitForSingleObject
DeleteFileW
CreateProcessW
ReleaseMutex
CreateThread
HeapFree
SizeofResource
LoadResource
GlobalAlloc
GlobalLock
LockResource
GlobalUnlock
SetErrorMode
ExitProcess
ReadFile
HeapAlloc
GetProcessHeap
GetFileSize
CreateFileW
GetProcAddress
LoadLibraryW
GetModuleFileNameW
CreateDirectoryW
lstrlenW
GetModuleHandleW
lstrcpynW
lstrcatW
lstrcpyW
lstrlenA
lstrcatA
WideCharToMultiByte
FindResourceW
user32
FillRect
InvalidateRect
GetDlgItemTextW
MapWindowPoints
SetWindowTextA
SetWindowPos
GetWindowRect
EnableWindow
ReleaseDC
GetDC
MessageBoxA
DialogBoxParamW
GetSysColorBrush
GetSysColor
ShowWindow
SetDlgItemTextW
GetDlgItem
EndDialog
LoadIconW
SetWindowTextW
SendMessageW
SetDlgItemTextA
SetTimer
PostMessageW
gdi32
DeleteDC
SetTextColor
SetBkColor
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
CreateFontIndirectW
GetObjectW
GetDeviceCaps
DeleteObject
advapi32
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
shell32
SHGetSpecialFolderPathW
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteA
SHGetMalloc
Shell_NotifyIconW
ole32
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
OleLoadPicture
ntdll
_allmul
memset
memcpy
_aulldiv
_aulldvrm
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ