Static task
static1
Behavioral task
behavioral1
Sample
8643aa8640da85de37cd3d77c94c8fed2102767dc9aa276e4347727e442a743e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8643aa8640da85de37cd3d77c94c8fed2102767dc9aa276e4347727e442a743e.exe
Resource
win10v2004-20220812-en
General
-
Target
8643aa8640da85de37cd3d77c94c8fed2102767dc9aa276e4347727e442a743e
-
Size
436KB
-
MD5
5a6aa327e86f809f618d3908681882cc
-
SHA1
f32a64d6405ba0feb99917fbaf8668637d393d05
-
SHA256
8643aa8640da85de37cd3d77c94c8fed2102767dc9aa276e4347727e442a743e
-
SHA512
16f7f26771ac8721e0517420fcfec5fd960f53948912ee291ba532ae5f6b507b76a4a31ef4d3646c7a01a85cf706a9c3f79307aadaf6c6ae9634ca5716a4de73
-
SSDEEP
12288:+Gx8b6OCGiFE198/Z9VD26JW33bxHyF3S+/UC5ALQM:+G6mOLk/Z9VqSWNSxSEM
Malware Config
Signatures
Files
-
8643aa8640da85de37cd3d77c94c8fed2102767dc9aa276e4347727e442a743e.exe windows x86
86fb281074f1d1e8dbb71415c5cbb025
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoUninitialize
CoTaskMemAlloc
gdi32
SetTextColor
CreateCompatibleDC
DeleteDC
DeleteObject
BitBlt
SelectObject
CreateSolidBrush
GetStockObject
advapi32
RegCloseKey
RegCreateKeyExW
RegSetValueExA
RegDeleteKeyA
RegQueryValueExA
oleaut32
SysStringLen
SysFreeString
VariantInit
SysAllocString
SysAllocStringLen
kernel32
GetStdHandle
GetLocalTime
GetConsoleOutputCP
lstrlenW
FileTimeToSystemTime
GetFileAttributesA
WaitForSingleObject
FindFirstFileW
HeapDestroy
GetFullPathNameA
VirtualAlloc
FindResourceA
Sleep
CreateProcessW
FindResourceW
UnmapViewOfFile
IsValidCodePage
CreateProcessA
SizeofResource
GetVersion
GetModuleHandleW
GetACP
CloseHandle
FindFirstFileA
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
GetConsoleMode
CompareStringA
RaiseException
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
GetCommandLineW
LockResource
GetCurrentProcessId
WritePrivateProfileStringA
GetEnvironmentStrings
VirtualFree
RemoveDirectoryA
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
HeapCreate
LCMapStringW
GetLastError
LeaveCriticalSection
HeapAlloc
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
GlobalLock
FindNextFileA
ResetEvent
FindNextFileW
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileW
SetEvent
GetWindowsDirectoryA
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
GetOEMCP
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
GetCurrentThreadId
GetLocaleInfoA
SetEndOfFile
GlobalAlloc
WriteConsoleA
SetUnhandledExceptionFilter
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
CreateFileA
CreateThread
GetModuleHandleA
CreateMutexA
GetFileAttributesW
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
FlushFileBuffers
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
OutputDebugStringA
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
GetExitCodeProcess
LocalFree
FreeLibrary
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
GetTempPathA
SetStdHandle
FreeEnvironmentStringsW
SetErrorMode
ReleaseMutex
LocalAlloc
GetCurrentDirectoryA
GetStartupInfoW
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
user32
EndDialog
SetWindowLongA
ReleaseCapture
GetWindowRect
GetSystemMetrics
DefWindowProcA
BeginPaint
PeekMessageA
SetFocus
FillRect
CreateWindowExA
GetSubMenu
RegisterClassA
EnableMenuItem
LoadStringA
IsWindowEnabled
TranslateMessage
EnableWindow
ShowWindow
UpdateWindow
SetWindowTextA
GetMessageA
DestroyWindow
GetClientRect
GetCursorPos
GetDC
EndPaint
DispatchMessageA
IsWindow
SetWindowPos
PostQuitMessage
GetDesktopWindow
SetForegroundWindow
MessageBoxA
GetSysColor
IsWindowVisible
InvalidateRect
SendMessageA
CallWindowProcA
ReleaseDC
SetCursor
CheckMenuItem
SetTimer
GetDlgItem
ScreenToClient
GetParent
LoadIconA
msvcrt
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_strcmpi
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
exit
free
_cexit
Sections
.text Size: 296KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ