Static task
static1
Behavioral task
behavioral1
Sample
851da3fae64e00f93b0a29304dfe99eb415dfe9517311cc39ad28b27418e31dd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
851da3fae64e00f93b0a29304dfe99eb415dfe9517311cc39ad28b27418e31dd.exe
Resource
win10v2004-20221111-en
General
-
Target
851da3fae64e00f93b0a29304dfe99eb415dfe9517311cc39ad28b27418e31dd
-
Size
171KB
-
MD5
4764ec6978469aed7709ed1eca01c309
-
SHA1
8ebae5991748e8fc2501a2819318812a4b3a92bd
-
SHA256
851da3fae64e00f93b0a29304dfe99eb415dfe9517311cc39ad28b27418e31dd
-
SHA512
95ad317ede42833dd559a62bb60ac8d49b9fc210481d51c25a766904831f87eccd04d7f11296819fd5c1629dcc28b6f6a0403eea54198da35380ae3f6d450c06
-
SSDEEP
3072:6mcfZ3T//++wL52TwXUKtMWhUfmI91VMpvjCzH9hUIWw1GFYuX8SoCg0pPIgdReR:6mcB3TZwd2efCmA1CBCr9hGCURXyEVrW
Malware Config
Signatures
Files
-
851da3fae64e00f93b0a29304dfe99eb415dfe9517311cc39ad28b27418e31dd.exe windows x86
b7820d5f33ac65e790823cf10febdabe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToFileW
kernel32
CloseHandle
MultiByteToWideChar
lstrcmpiW
CreateMutexA
WaitForSingleObject
DeleteFileW
CreateProcessW
ReleaseMutex
CreateThread
HeapFree
SizeofResource
LoadResource
GlobalAlloc
GlobalLock
LockResource
GlobalUnlock
SetErrorMode
ExitProcess
ReadFile
HeapAlloc
GetProcessHeap
GetFileSize
CreateFileW
GetProcAddress
LoadLibraryW
GetModuleFileNameW
CreateDirectoryW
lstrlenW
GetModuleHandleW
lstrcpynW
lstrcatW
lstrcpyW
lstrlenA
lstrcatA
WideCharToMultiByte
FindResourceW
user32
FillRect
InvalidateRect
GetDlgItemTextW
MapWindowPoints
MapDialogRect
SetWindowTextA
SetWindowPos
ScreenToClient
GetWindowRect
EnableWindow
ReleaseDC
PostMessageW
MessageBoxA
DialogBoxParamW
GetSysColorBrush
GetSysColor
ShowWindow
SetTimer
GetDlgItem
EndDialog
LoadIconW
SetWindowTextW
SendMessageW
SetDlgItemTextA
SetDlgItemTextW
GetDC
gdi32
DeleteDC
SetBkColor
SelectObject
SetTextColor
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
CreateFontIndirectW
GetObjectW
GetDeviceCaps
DeleteObject
advapi32
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
shell32
SHGetSpecialFolderPathW
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteA
SHGetMalloc
Shell_NotifyIconW
ole32
CoInitialize
CreateStreamOnHGlobal
CoUninitialize
CoInitializeEx
oleaut32
OleLoadPicture
ntdll
_allmul
memset
memcpy
_aulldiv
_aulldvrm
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ