Static task
static1
Behavioral task
behavioral1
Sample
855977a0ba310df59f0c7fe6fea35a7c5acd4d2f4f7e1a2ee2053090006ae45f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
855977a0ba310df59f0c7fe6fea35a7c5acd4d2f4f7e1a2ee2053090006ae45f.exe
Resource
win10v2004-20221111-en
General
-
Target
855977a0ba310df59f0c7fe6fea35a7c5acd4d2f4f7e1a2ee2053090006ae45f
-
Size
775KB
-
MD5
e16675992d58e562e624bfb50c14d14e
-
SHA1
0d08cb7dbe82d50402f7dc64b482257e2d363c94
-
SHA256
855977a0ba310df59f0c7fe6fea35a7c5acd4d2f4f7e1a2ee2053090006ae45f
-
SHA512
e80a2d882ffe82b8b0f9a13360a5c282a8039ef41903e13ac974b81f20c5a637ade663c92f7ad74c28d227db4f6342970c19e715f2d2f1664dc6a8853581c2f7
-
SSDEEP
24576:K2t5pOWgYC2FAeMfGWvMPBh/JRWAhT45Sc:7ETuAeMfGqMZh/Ob5x
Malware Config
Signatures
Files
-
855977a0ba310df59f0c7fe6fea35a7c5acd4d2f4f7e1a2ee2053090006ae45f.exe windows x86
8aba3ce2681cb0c5da46f597dfad44fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
GetEnvironmentStrings
InterlockedExchange
GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
HeapSize
GetCPInfo
GetCommandLineW
LockResource
SizeofResource
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
LCMapStringA
lstrlenA
GetSystemInfo
SetStdHandle
InterlockedIncrement
TlsSetValue
GetFileType
CreateEventA
GetTimeZoneInformation
DuplicateHandle
FindFirstFileW
ResetEvent
CompareStringA
FindFirstFileA
CompareStringW
GetStartupInfoW
GetProcAddress
DeleteFileA
LCMapStringW
GetFileSize
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetVersionExA
VirtualProtect
TlsAlloc
QueryPerformanceCounter
GetOEMCP
HeapCreate
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
SetEndOfFile
GlobalAlloc
TerminateProcess
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
GetLocalTime
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
IsDebuggerPresent
GetModuleFileNameW
InterlockedDecrement
SetLastError
OutputDebugStringA
FormatMessageA
TlsGetValue
FindClose
LoadResource
CreateEventW
LocalFree
SetEvent
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
GetStringTypeA
WideCharToMultiByte
FreeEnvironmentStringsW
SetErrorMode
CreateFileA
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
HeapDestroy
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
GetStdHandle
WriteFile
VirtualFree
Sleep
SetConsoleCtrlHandler
FindResourceA
VirtualAlloc
GetProcessHeap
HeapAlloc
ExitProcess
GetCurrentProcessId
GetTickCount
GetLastError
GetCommandLineA
GetCurrentThread
GetModuleHandleA
GetCurrentThreadId
LoadLibraryW
GetVersion
user32
DispatchMessageA
FillRect
CreateWindowExA
GetWindowLongA
IsIconic
GetWindow
TranslateMessage
EnableWindow
ShowWindow
DefWindowProcA
UpdateWindow
ScreenToClient
GetClientRect
SendMessageA
ReleaseDC
EndPaint
IsWindow
SetWindowPos
PostQuitMessage
SetFocus
SetWindowLongA
SetWindowTextA
wsprintfA
SetTimer
GetDlgItem
ClientToScreen
LoadCursorA
LoadIconA
GetDesktopWindow
SetForegroundWindow
MapWindowPoints
BeginPaint
GetDC
MessageBoxA
GetSysColor
SystemParametersInfoA
IsWindowVisible
InvalidateRect
CallWindowProcA
SetCursor
GetSystemMetrics
advapi32
RegSetValueExA
RegSetValueExW
RegQueryValueExW
RegCreateKeyExA
RegQueryValueExA
RegCreateKeyExW
RegOpenKeyExA
RegOpenKeyExW
RegCloseKey
oleaut32
SysAllocString
VariantInit
gdi32
CreateSolidBrush
SelectObject
CreateCompatibleDC
SetTextColor
GetDeviceCaps
DeleteObject
SetBkColor
Sections
.text Size: 750KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ