Static task
static1
Behavioral task
behavioral1
Sample
987095bb9fd3ac6c1e58bc32b82680e6fc99d17d10b908d3bee63bdac66f6946.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
987095bb9fd3ac6c1e58bc32b82680e6fc99d17d10b908d3bee63bdac66f6946.exe
Resource
win10v2004-20221111-en
General
-
Target
987095bb9fd3ac6c1e58bc32b82680e6fc99d17d10b908d3bee63bdac66f6946
-
Size
55KB
-
MD5
3ae7cef7750f6be0e69262ef4ed9e05a
-
SHA1
4f6d1541c70d548b49fad3779b5363aedc049612
-
SHA256
987095bb9fd3ac6c1e58bc32b82680e6fc99d17d10b908d3bee63bdac66f6946
-
SHA512
fd1f1f1d3d93ebcef311e97b144bc6e57f6b035f15823efb8b0fa840785a18e8c52efe5aae205a122d4e410e366ec94396c571f6d7d536d64d74afaa4378c71e
-
SSDEEP
1536:quJw9Ac/JWvIzkx+vNLSyu86GIPdetzNPwswuWcMMMMMMMmMMMMKflt:Y9f/ZztvMyu8loedNPwswujMMMMMMMm4
Malware Config
Signatures
Files
-
987095bb9fd3ac6c1e58bc32b82680e6fc99d17d10b908d3bee63bdac66f6946.exe windows x86
ddb60874a7ca83bc88cc010f8da44195
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CheckMenuItem
LoadIconA
OpenClipboard
GetCursorPos
MoveWindow
ReleaseDC
InflateRect
GetActiveWindow
PtInRect
TrackPopupMenu
LoadStringW
DefWindowProcW
GetMenuStringW
SendMessageW
SetWindowTextW
GetWindowLongW
GetWindowTextLengthA
DestroyMenu
DestroyIcon
AllowSetForegroundWindow
UnregisterClassA
GetMenu
RegisterClassW
SetCapture
SetWindowPos
SetActiveWindow
PostMessageW
GetClientRect
CreateWindowExW
GetSubMenu
kernel32
Sleep
GetCurrentProcess
CreateFileA
ReadFile
GetModuleFileNameA
MultiByteToWideChar
WaitForSingleObject
GetStartupInfoW
ExitProcess
GetEnvironmentStringsW
HeapFree
EnterCriticalSection
GetTickCount
GetCurrentProcessId
GetStdHandle
InitializeCriticalSection
GetVersionExW
QueryPerformanceCounter
IsDebuggerPresent
LoadLibraryA
SetFilePointer
UnhandledExceptionFilter
CloseHandle
GetVersionExA
GetLastError
GetModuleHandleW
VirtualAlloc
FindClose
InterlockedExchange
LocalFree
SetLastError
WaitForSingleObjectEx
HeapAlloc
InterlockedDecrement
SetFilePointerEx
GetModuleHandleA
GetSystemTimeAsFileTime
TerminateProcess
RaiseException
WideCharToMultiByte
FreeLibraryAndExitThread
LeaveCriticalSection
GetFileSizeEx
GetModuleFileNameW
SetUnhandledExceptionFilter
DeleteCriticalSection
WriteFile
InterlockedCompareExchange
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
FreeLibrary
TryEnterCriticalSection
InterlockedIncrement
gdi32
CreateSolidBrush
CreatePolygonRgn
CreateRectRgn
CreateFontIndirectW
CreateDCA
shlwapi
PathFindFileNameA
PathIsURLW
PathCanonicalizeW
PathRenameExtensionW
PathRemoveBlanksW
PathRemoveFileSpecA
PathAddBackslashA
SHCreateStreamOnFileW
SHGetValueW
PathCommonPrefixW
PathRemoveExtensionW
PathIsRelativeW
PathStripToRootW
SHDeleteKeyW
PathAddBackslashW
PathFindExtensionW
PathRemoveBackslashW
PathCombineW
PathFileExistsW
PathAppendW
PathFindFileNameW
SHSetValueW
PathStripPathW
PathRemoveFileSpecW
PathAppendA
AssocQueryStringW
PathFileExistsA
StrCmpW
StrStrIW
PathIsDirectoryW
StrCmpNIW
StrToIntW
StrStrW
StrCmpNW
StrStrIA
StrToIntExW
PathIsFileSpecW
PathRelativePathToW
SHDeleteValueW
PathIsRootW
StrCmpIW
PathFindExtensionA
setupapi
SetupUninstallOEMInfA
msvcrt
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
strlen
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ