Static task
static1
Behavioral task
behavioral1
Sample
76bcedf0c050ebc8c672fd92c93ce77d8a9efa002a5cef4d67593c98e49c1207.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
76bcedf0c050ebc8c672fd92c93ce77d8a9efa002a5cef4d67593c98e49c1207.exe
Resource
win10v2004-20221111-en
General
-
Target
76bcedf0c050ebc8c672fd92c93ce77d8a9efa002a5cef4d67593c98e49c1207
-
Size
171KB
-
MD5
91202d14959c61ac76a83e914c787251
-
SHA1
5621b31ea1d40d22d3be4f3b1c44394b1b51f9ad
-
SHA256
76bcedf0c050ebc8c672fd92c93ce77d8a9efa002a5cef4d67593c98e49c1207
-
SHA512
76c10c6b5f7d3a8ef461e044e5cee5f06e8299c6ae8ca05a2493dfdd52aef3086e3fb6dced239031f09f87cec842a4e529644b1bb5043d71fb8a0d20973ba6f6
-
SSDEEP
3072:f+ZNQxYWRhFWpMOSzhjEquRSOphcELnIR1D4GiyqnCFrFh6zy:GrQxDFwsptoSOphcEzIR1EGOClFh6
Malware Config
Signatures
Files
-
76bcedf0c050ebc8c672fd92c93ce77d8a9efa002a5cef4d67593c98e49c1207.exe windows x86
a286d8ade6c2b428b7448039ed91d610
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strncmp
wcstol
wcscspn
mbstowcs
memcpy
wcsncmp
log
memmove
strlen
ceil
_acmdln
srand
shlwapi
PathFileExistsA
SHStrDupA
SHDeleteKeyA
SHSetValueA
comctl32
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor
ImageList_Create
ImageList_Add
ImageList_Read
ImageList_DragShowNolock
oleaut32
SafeArrayCreate
SafeArrayPtrOfIndex
GetErrorInfo
SysAllocStringLen
SysStringLen
VariantCopyInd
RegisterTypeLib
OleLoadPicture
VariantChangeType
SysReAllocStringLen
kernel32
GetLastError
GlobalAlloc
InitializeCriticalSection
GlobalFindAtomA
SetThreadLocale
GetProcAddress
GetCommandLineA
WriteFile
GetACP
LoadLibraryExA
FreeResource
GetVersionExA
GetStringTypeW
DeleteFileA
GetUserDefaultLCID
MoveFileExA
GetOEMCP
GetModuleHandleA
ExitThread
ReadFile
SetErrorMode
ResetEvent
FindFirstFileA
VirtualQuery
ExitProcess
lstrcmpA
VirtualAlloc
WaitForSingleObject
lstrlenA
LoadLibraryA
SetLastError
GetTickCount
GetCurrentProcess
GetLocaleInfoA
GetEnvironmentStrings
GetCurrentProcessId
LoadResource
CreateThread
lstrcpyA
LocalAlloc
MoveFileA
lstrcpynA
Sleep
lstrcmpiA
VirtualFree
GetModuleFileNameA
GetStartupInfoA
DeleteCriticalSection
GetDateFormatA
CreateFileA
GetDiskFreeSpaceA
SizeofResource
GetFileAttributesA
SetHandleCount
GlobalDeleteAtom
GetProcessHeap
GlobalAddAtomA
GetStdHandle
GetVersion
WideCharToMultiByte
LocalReAlloc
LocalFree
GetFullPathNameA
GetCPInfo
VirtualAllocEx
GetLocalTime
HeapDestroy
HeapAlloc
SetFilePointer
MulDiv
GetSystemDefaultLangID
FreeLibrary
lstrcatA
HeapFree
SetEndOfFile
EnumCalendarInfoA
GetCurrentThread
SetEvent
CompareStringA
FormatMessageA
GetCurrentThreadId
GetStringTypeA
GetThreadLocale
GetFileSize
FindResourceA
ntdll
wcscat
atoi
shell32
Shell_NotifyIconA
SHGetDiskFreeSpaceA
DragQueryFileA
SHGetFileInfoA
SHFileOperationA
user32
EnableMenuItem
EqualRect
SetWindowTextA
BeginDeferWindowPos
CreateMenu
EnableWindow
DeferWindowPos
GetWindow
GetDlgItem
EnumChildWindows
GetMenuState
GetScrollInfo
CharNextA
RegisterClassA
CreateWindowExA
DispatchMessageA
CharToOemA
BeginPaint
IsMenu
GetPropA
GetKeyNameTextA
GetClassLongA
GetClipboardData
SetWindowPos
EnumWindows
GetDCEx
DefWindowProcA
GetClassInfoA
GetCursor
GetDC
MessageBoxA
ShowWindow
HideCaret
CallNextHookEx
GetParent
IsWindowEnabled
GetCapture
GetActiveWindow
GetMenuItemCount
CreatePopupMenu
IsChild
DefMDIChildProcA
SetTimer
CharLowerBuffA
DefFrameProcA
ShowScrollBar
DrawFrameControl
GetIconInfo
SetWindowLongA
TrackPopupMenu
GetKeyState
CreateIcon
FindWindowA
GetFocus
CheckMenuItem
GetSubMenu
GetScrollRange
GetWindowTextA
GetScrollPos
GetLastActivePopup
ClientToScreen
EnableScrollBar
GetSysColorBrush
GetMessagePos
IsWindowVisible
DrawIcon
SetCursor
SystemParametersInfoA
DispatchMessageW
FrameRect
CharLowerA
EndPaint
GetCursorPos
GetMenuItemInfoA
FillRect
EndDeferWindowPos
GetClientRect
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 112KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE