Static task
static1
Behavioral task
behavioral1
Sample
1b2ac1c1402258ec1c458a01f205e10461912467b172b3e1510ce860b44f7591.exe
Resource
win7-20220901-en
General
-
Target
1b2ac1c1402258ec1c458a01f205e10461912467b172b3e1510ce860b44f7591
-
Size
244KB
-
MD5
0ce0fd25f941c2c7c00c38b7dbd9d91f
-
SHA1
519bcb27d86448362f38b330884c47e3fd93d1af
-
SHA256
1b2ac1c1402258ec1c458a01f205e10461912467b172b3e1510ce860b44f7591
-
SHA512
dd1fcac2a22ac544bec3f3da67e34e145800a7b0fccd25d66feae28230067336c05a55e243de13495e0f237490c6d245d59c1b37f34bb2183fc3e13b75c1506f
-
SSDEEP
6144:o/ZjbiNEazt6+s0Y8WFVPZbFx9yV08t1yO:ohjONEo6+NY8OPZblyLz
Malware Config
Signatures
Files
-
1b2ac1c1402258ec1c458a01f205e10461912467b172b3e1510ce860b44f7591.exe windows x86
01dd0a9c087895eb56392d4d1fd4d1f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempFileNameA
GetTempPathA
WideCharToMultiByte
CreateFileA
MultiByteToWideChar
GetDiskFreeSpaceA
GetWindowsDirectoryA
GetDriveTypeA
SetErrorMode
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateDirectoryA
MoveFileA
GetVersion
FindFirstFileA
FindClose
UnmapViewOfFile
GetSystemInfo
GetLastError
LoadLibraryA
GetProcAddress
OpenProcess
CloseHandle
FreeLibrary
FindNextFileA
GetFileAttributesA
GetExitCodeProcess
CreateProcessA
GetTickCount
DeleteFileA
WaitForSingleObject
TerminateProcess
WritePrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
LoadResource
Sleep
FindResourceA
GetSystemDirectoryA
LockResource
SizeofResource
GetVersionExA
RemoveDirectoryA
InterlockedDecrement
SetFilePointer
SetEndOfFile
SetEnvironmentVariableW
GetFullPathNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
FlushFileBuffers
SetEnvironmentVariableA
CompareStringW
CompareStringA
InterlockedIncrement
GetModuleFileNameA
HeapAlloc
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
VirtualAlloc
LCMapStringW
LCMapStringA
SetStdHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
DeleteCriticalSection
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
ReadFile
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapFree
HeapReAlloc
SetFileAttributesA
GetCPInfo
GetACP
GetOEMCP
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
user32
MessageBoxA
LoadStringA
DialogBoxParamA
DialogBoxIndirectParamA
PostMessageA
DrawTextExA
LoadBitmapA
FillRect
GetSysColor
SendMessageA
GetSystemMetrics
GetClientRect
GetDlgItem
ReleaseDC
GetDC
EndDialog
SetDlgItemTextA
MoveWindow
GetWindowRect
ShowWindow
GetAsyncKeyState
SendDlgItemMessageA
UpdateWindow
InvalidateRect
IsWindow
CreateDialogParamA
DestroyWindow
SetWindowPos
GetParent
SystemParametersInfoA
CharPrevA
CharNextA
WaitForInputIdle
GetDesktopWindow
PeekMessageA
TranslateMessage
DispatchMessageA
SetWindowTextA
LoadIconA
GetSystemMenu
EnableMenuItem
advapi32
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegCreateKeyA
RegEnumKeyExA
RegSetValueA
RegQueryValueA
gdi32
DeleteDC
SetTextColor
SelectObject
CreateCompatibleDC
GetObjectA
DeleteObject
CreateSolidBrush
CreateFontIndirectA
GetCurrentObject
GetStockObject
SetBkColor
BitBlt
comctl32
ord17
Sections
.text Size: 132KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE