Static task
static1
Behavioral task
behavioral1
Sample
fff4f76d3713e28cffaa0e8909fcc87673798698bd455f0ae3e4ce7b1aab40b0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fff4f76d3713e28cffaa0e8909fcc87673798698bd455f0ae3e4ce7b1aab40b0.exe
Resource
win10v2004-20220812-en
General
-
Target
fff4f76d3713e28cffaa0e8909fcc87673798698bd455f0ae3e4ce7b1aab40b0
-
Size
552KB
-
MD5
4b42fe5c88f3d5c954b543ccfadeffc9
-
SHA1
1e5764bd42853f4d9facaf4cc4cc1c36690b1c76
-
SHA256
fff4f76d3713e28cffaa0e8909fcc87673798698bd455f0ae3e4ce7b1aab40b0
-
SHA512
fc76e9fbe619c0d52b6ed4103d45d541dd40b1f0601623147a189e9401f1716075359a5bcdcd72c1684ac85aa62fa90cefa06e37fd080e89621fd110965d2b59
-
SSDEEP
6144:YZvVrGdkQ55vcBBVdR7mOgeC9aAwra0QssSRybDdZ/V8jMFoAaysrkZO:YZvA5xCVdR71geC07rf6d1mH
Malware Config
Signatures
Files
-
fff4f76d3713e28cffaa0e8909fcc87673798698bd455f0ae3e4ce7b1aab40b0.exe windows x86
429eb03a23f893c3c0a2f93b0ae45a37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegEnumKeyExA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
kernel32
FileTimeToLocalFileTime
FindClose
FindFirstFileA
GetLocaleInfoA
MultiByteToWideChar
CloseHandle
FileTimeToSystemTime
CreateFileA
GetCommandLineA
GetFileAttributesA
GetWindowsDirectoryA
CompareStringA
CreateProcessA
GetTempPathA
GetModuleFileNameA
CreateDirectoryA
FindNextFileA
GetPrivateProfileStringA
ExpandEnvironmentStringsA
GlobalMemoryStatus
GetSystemInfo
GetSystemDefaultLCID
GetDateFormatA
GetLocalTime
Sleep
ResetEvent
WaitForSingleObject
CreateEventA
FreeLibrary
LoadResource
FindResourceA
WriteFile
WideCharToMultiByte
lstrcmpiA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
HeapFree
GetLastError
ReadFile
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetVersionExA
SetStdHandle
FlushFileBuffers
SetFilePointer
SetEndOfFile
lstrcmpA
lstrlenA
GetSystemDirectoryA
LoadLibraryA
GetModuleHandleA
lstrcatA
lstrcpyA
SizeofResource
GetProcAddress
DeleteFileA
LockResource
VirtualAlloc
gdi32
GetStockObject
GetDeviceCaps
CreateDCA
DeleteDC
user32
ReleaseDC
wsprintfA
EnumDisplaySettingsA
OffsetRect
GetDC
CharLowerBuffA
LoadIconA
DialogBoxParamA
MessageBoxA
LoadStringA
GetWindowLongA
EndDialog
SendMessageA
GetDlgItem
ShowWindow
SetFocus
GetFocus
SetWindowPos
CreateDialogParamA
GetClientRect
EnableWindow
PostMessageA
DestroyWindow
GetWindowTextA
SetDlgItemInt
CheckRadioButton
SetDlgItemTextA
GetDlgItemInt
GetDlgItemTextA
GetKeyboardType
InvalidateRect
InflateRect
SetRect
RegisterClassA
DefWindowProcA
PeekMessageA
IsDlgButtonChecked
SetTimer
GetSystemMetrics
SetWindowTextA
CreateWindowExA
comctl32
ImageList_Destroy
ord17
ImageList_Create
ImageList_ReplaceIcon
winmm
waveOutMessage
waveOutGetNumDevs
waveOutGetDevCapsA
mmioOpenA
mmioClose
mmioDescend
joyGetDevCapsA
mmioRead
comdlg32
GetSaveFileNameA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
shell32
ShellExecuteExA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
wintrust
WinVerifyTrust
Sections
.text Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 258KB - Virtual size: 258KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE