Static task
static1
Behavioral task
behavioral1
Sample
851a14131bab302a7b0ab30c88498cdcbb94cc6eeb12f84a97e838b8be25e19d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
851a14131bab302a7b0ab30c88498cdcbb94cc6eeb12f84a97e838b8be25e19d.exe
Resource
win10v2004-20220901-en
General
-
Target
851a14131bab302a7b0ab30c88498cdcbb94cc6eeb12f84a97e838b8be25e19d
-
Size
332KB
-
MD5
d1f9b32286359d92f43de9b80ef3bdc5
-
SHA1
109465c054f14b357aeec602dee90a768badce87
-
SHA256
851a14131bab302a7b0ab30c88498cdcbb94cc6eeb12f84a97e838b8be25e19d
-
SHA512
e07efd6711943f201aa2330a99a9a869f7ad6339fac083853ab7a080660e5f8ab8f2d34b1dd504a110dd8c5d273fda39ee279c13c93a0c04e1c3d1602f37a0ba
-
SSDEEP
6144:V7vuve1wY5Zqk/rjEhbe48VdBFNQIx/M4AxvimjqEbRlsxt2M8lM3H:Rmv8vYmBFNQIdMJque3203
Malware Config
Signatures
Files
-
851a14131bab302a7b0ab30c88498cdcbb94cc6eeb12f84a97e838b8be25e19d.exe windows x86
8e8f0f779ce46cd768d7a70615fc5bfc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VariantClear
VariantInit
SysAllocString
SysFreeString
kernel32
VirtualFree
FindResourceW
HeapCreate
IsValidCodePage
CreateProcessA
GetEnvironmentStrings
InterlockedExchange
GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
LockResource
GetCurrentProcessId
SizeofResource
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
LCMapStringA
lstrlenA
InitializeCriticalSection
GetLastError
InterlockedIncrement
HeapAlloc
CreateFileA
TlsSetValue
GetFileType
CreateFileW
CreateEventW
GlobalLock
WaitForMultipleObjects
FindFirstFileW
CompareStringA
FindFirstFileA
CompareStringW
GetProcAddress
DeleteFileW
SetErrorMode
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
GetTickCount
QueryPerformanceCounter
FreeLibrary
Sleep
EnterCriticalSection
HeapFree
WriteConsoleW
GetCurrentThreadId
GetLocaleInfoA
SetEndOfFile
GetConsoleMode
GlobalAlloc
GetVersion
WriteConsoleA
TerminateProcess
MulDiv
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
CreateMutexA
LeaveCriticalSection
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
GetVersionExA
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
InterlockedDecrement
SetLastError
TlsGetValue
FindClose
LoadResource
GetEnvironmentVariableA
LocalFree
FindResourceA
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WaitForSingleObject
WriteFile
GetStringTypeA
WideCharToMultiByte
SetStdHandle
FreeEnvironmentStringsW
LoadLibraryExW
lstrcatA
LocalAlloc
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
SetEvent
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetSystemDefaultLangID
GetUserDefaultLCID
GetUserDefaultLangID
GetSystemDefaultLCID
GetProcessHeap
GetCommandLineW
VirtualAlloc
SetHandleCount
GetOEMCP
user32
EnableWindow
ShowWindow
UpdateWindow
GetParent
DestroyWindow
GetClientRect
SendMessageA
UnregisterClassA
GetDC
EndPaint
DispatchMessageA
SetWindowPos
LoadBitmapA
PostQuitMessage
SetForegroundWindow
GetWindowLongA
PeekMessageA
FillRect
GetSubMenu
SetFocus
DefWindowProcA
GetWindowRect
PostMessageA
ReleaseCapture
SetWindowLongA
CheckMenuItem
wsprintfA
GetDlgItem
ScreenToClient
LoadCursorA
EndDialog
MessageBoxA
GetSysColor
CallWindowProcA
SetCursor
TranslateMessage
IsWindowEnabled
LoadStringA
SetTimer
EnableMenuItem
gdi32
CreateSolidBrush
CreateCompatibleDC
GetStockObject
DeleteDC
GetDeviceCaps
BitBlt
DeleteObject
msvcrt
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__set_app_type
_except_handler3
_strcmpi
_controlfp
__dllonexit
_onexit
__p__fmode
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 296KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ