Static task
static1
Behavioral task
behavioral1
Sample
d1bfde7db390c2cd24c34213bc76a2b6fe6bc79fab2f5f8315ed7491eecfdb1e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d1bfde7db390c2cd24c34213bc76a2b6fe6bc79fab2f5f8315ed7491eecfdb1e.exe
Resource
win10v2004-20220812-en
General
-
Target
d1bfde7db390c2cd24c34213bc76a2b6fe6bc79fab2f5f8315ed7491eecfdb1e
-
Size
107KB
-
MD5
ab8f29218c9961a07cb0ce1a278eddfd
-
SHA1
802eae195b9d8ea3d035f8e6d763f858d36e3fa9
-
SHA256
d1bfde7db390c2cd24c34213bc76a2b6fe6bc79fab2f5f8315ed7491eecfdb1e
-
SHA512
be07b81b472c7d8b953b2f5e392951fce336b0c139cd5270fa20a61498ea49304d30748237b731b85e1d9c8d59b0fdb588dae043e40e5b30480cd4982beb6576
-
SSDEEP
1536:d1SSkGfIaS9Tjs+a9etxAH7mkhI5VOF0orKpo85Vcpp4M7L5Nqq3:LS7c2VdgHQ/fgmGL5N1
Malware Config
Signatures
Files
-
d1bfde7db390c2cd24c34213bc76a2b6fe6bc79fab2f5f8315ed7491eecfdb1e.exe windows x86
918c275d11f5bc15a447b036ab57132d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Remove
ImageList_DragShowNolock
gdi32
CreateCompatibleBitmap
CreateFontIndirectA
BitBlt
CreatePenIndirect
SelectPalette
SelectObject
GetDIBColorTable
advapi32
RegQueryValueA
shell32
Shell_NotifyIconA
SHGetFolderPathA
comdlg32
FindTextA
GetSaveFileNameA
GetFileTitleA
user32
GetScrollPos
GetForegroundWindow
SetTimer
IsDialogMessageW
CreateIcon
GetSubMenu
SetWindowLongW
UnregisterClassA
GetKeyboardLayoutList
CharToOemA
MapVirtualKeyA
GetScrollRange
PostQuitMessage
GetParent
EnumThreadWindows
GetTopWindow
PostMessageA
EnumChildWindows
ReleaseDC
SetRect
PeekMessageA
EnumWindows
GetMenuStringA
WaitMessage
IntersectRect
LoadIconA
ChildWindowFromPoint
GetKeyboardType
GetKeyboardState
DestroyCursor
GetMenuItemID
DrawIconEx
SetMenu
IsWindowVisible
DrawIcon
ShowScrollBar
GetWindowTextA
SetFocus
RegisterClipboardFormatA
DefWindowProcA
IsZoomed
GetMenuItemCount
DrawEdge
GetClassInfoA
SetWindowLongA
EnableWindow
GetClassLongA
GetKeyboardLayout
GetLastActivePopup
GetActiveWindow
GetDC
SetWindowPos
GetWindowLongA
SetWindowPlacement
UpdateWindow
CallWindowProcA
MessageBoxA
SetClassLongA
IsIconic
GetWindowDC
GetCapture
LoadBitmapA
DrawAnimatedRects
PtInRect
ShowOwnedPopups
RemoveMenu
EmptyClipboard
SetWindowsHookExA
CloseClipboard
ShowWindow
SetScrollPos
InflateRect
wsprintfA
TranslateMessage
DrawTextA
OpenClipboard
GetClipboardData
GetSysColorBrush
GetWindowPlacement
ReleaseCapture
WindowFromPoint
SetScrollInfo
IsDialogMessageA
ScrollWindow
SetPropA
DefFrameProcA
GetSystemMenu
GetScrollInfo
GetKeyboardLayoutNameA
LoadCursorA
DrawMenuBar
IsWindowEnabled
GetWindowRect
GetDCEx
TranslateMDISysAccel
ActivateKeyboardLayout
GetWindowThreadProcessId
GetMessagePos
KillTimer
RegisterWindowMessageA
OffsetRect
PeekMessageW
SetParent
GetClientRect
DestroyMenu
GetPropA
GetDlgItem
IsWindow
MapWindowPoints
MoveWindow
CharNextW
shlwapi
SHGetValueA
SHDeleteKeyA
version
VerQueryValueA
VerFindFileA
GetFileVersionInfoSizeA
ole32
StgOpenStorage
CoUnmarshalInterface
CoFreeUnusedLibraries
CoUninitialize
CoCreateGuid
CoCreateInstanceEx
StringFromIID
ReleaseStgMedium
CoRevokeClassObject
CLSIDFromString
kernel32
GetCurrentProcessId
GetProcAddress
GlobalDeleteAtom
VirtualAlloc
GetStartupInfoA
GetFullPathNameA
GetThreadLocale
GetModuleHandleA
GetACP
ExitThread
LoadLibraryA
ExitProcess
GetOEMCP
msvcrt
log
_acmdln
atol
strncmp
malloc
memmove
strcmp
wcschr
oleaut32
RegisterTypeLib
SafeArrayCreate
VariantChangeType
SysFreeString
Sections
CODE Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 403B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE