Static task
static1
Behavioral task
behavioral1
Sample
79f7df4b79c53c0ff42dfbf4c91f2ecad11b4b6c0004f0a5981b01a0084c0964.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
79f7df4b79c53c0ff42dfbf4c91f2ecad11b4b6c0004f0a5981b01a0084c0964.exe
Resource
win10v2004-20220812-en
General
-
Target
79f7df4b79c53c0ff42dfbf4c91f2ecad11b4b6c0004f0a5981b01a0084c0964
-
Size
749KB
-
MD5
8dca5393c93284e3895b94f69d7d93c9
-
SHA1
042743a73d47e22561bc5d2eef37daa3cdb4f84b
-
SHA256
79f7df4b79c53c0ff42dfbf4c91f2ecad11b4b6c0004f0a5981b01a0084c0964
-
SHA512
0cf7ff946b63aac19aef773156a5daad191d01b3c4c9e24d8249282057e7e985d4b87bac923a2c4fbb66a86b50519799a125ea940730d9c5511a8289026bb036
-
SSDEEP
12288:vxonUymKmgNetzOY5r85XRev3e7Ymf4RMG0/He8dwXjTm44P1aUbtSUCJ7TXWZBz:ZIUgDN+zv5U+WfIw+8d2y44P11btSlGb
Malware Config
Signatures
Files
-
79f7df4b79c53c0ff42dfbf4c91f2ecad11b4b6c0004f0a5981b01a0084c0964.exe windows x86
c31d3fafed7ee27f56ca190a7708c1ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VariantClear
SysAllocStringLen
kernel32
GetCurrentProcessId
GetCurrentThread
GetModuleHandleA
ExitProcess
VirtualAlloc
FindResourceA
Sleep
VirtualFree
HeapCreate
IsValidCodePage
TlsGetValue
GetEnvironmentStrings
SetStdHandle
GetModuleHandleW
GetACP
CloseHandle
FindFirstFileA
ReadFile
SetFilePointer
RaiseException
InterlockedCompareExchange
GetCPInfo
GetCommandLineW
LockResource
WritePrivateProfileStringA
SizeofResource
FileTimeToLocalFileTime
GlobalUnlock
GetEnvironmentStringsW
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
LCMapStringW
InterlockedIncrement
HeapAlloc
TlsSetValue
GetFileType
GetTimeZoneInformation
GetProcAddress
FindFirstFileW
CreateFileMappingA
CompareStringA
FindNextFileW
lstrcmpA
CompareStringW
GetProcessHeap
WaitForMultipleObjects
DeleteFileA
GetFileSize
GetStartupInfoA
GetTickCount
GetVersionExA
VirtualProtect
TlsAlloc
QueryPerformanceCounter
FreeLibrary
LoadLibraryW
SetHandleCount
GetSystemTime
EnterCriticalSection
HeapFree
WriteConsoleW
SetEndOfFile
VirtualQuery
TerminateProcess
SetUnhandledExceptionFilter
CreateThread
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
GetModuleFileNameA
IsDebuggerPresent
GetModuleFileNameW
InitializeCriticalSection
GetCommandLineA
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
GetEnvironmentVariableA
GetExitCodeProcess
LocalFree
GetOEMCP
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
lstrcmpiA
WideCharToMultiByte
FreeEnvironmentStringsW
SetErrorMode
CreateFileA
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindNextFileA
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetStdHandle
GetLastError
GetCurrentThreadId
GetVersion
LoadLibraryA
SetLastError
user32
CreateWindowExA
DispatchMessageA
SetWindowTextA
SetWindowLongA
ReleaseCapture
PostMessageA
GetWindowRect
GetSystemMetrics
KillTimer
BeginPaint
SetFocus
SetTimer
RegisterClassA
TranslateMessage
EnableWindow
ShowWindow
DefWindowProcA
UpdateWindow
GetDlgItem
GetMessageA
DestroyWindow
UnregisterClassA
ReleaseDC
GetDC
IsWindow
SetWindowPos
PostQuitMessage
GetDesktopWindow
SetForegroundWindow
FillRect
MessageBoxA
InvalidateRect
SendMessageA
GetClientRect
CallWindowProcA
SetCursor
ClientToScreen
GetParent
LoadCursorA
advapi32
RegSetValueExA
RegQueryValueExA
RegCloseKey
OpenProcessToken
gdi32
SetBkColor
SetBkMode
msvcrt
exit
_exit
_controlfp
Sections
.text Size: 715KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ