Static task
static1
Behavioral task
behavioral1
Sample
b01c1b5d784c8799b2e448d542deaf20a5fca9e49a4f1d98fe21c76c440304cf.exe
Resource
win7-20220812-en
General
-
Target
b01c1b5d784c8799b2e448d542deaf20a5fca9e49a4f1d98fe21c76c440304cf
-
Size
2.4MB
-
MD5
683b33d2e0c23f6c37f5594cbf193ffc
-
SHA1
df3826178b9062667330fcd6cc701cff6be67da6
-
SHA256
b01c1b5d784c8799b2e448d542deaf20a5fca9e49a4f1d98fe21c76c440304cf
-
SHA512
958c3ad6a2a4de54abbcef869bbe1f1f8fc30f68579d4bdac47a45893b2895fb0fc5e3d3819fa44069b8835b9e0e2b4ab28b39137317be90c449fd619f202488
-
SSDEEP
49152:IEuIZSVI930l3GJ4eWkXM6fZ8Z93Pk1iEe0mo08Jypiz:IzIgqZ0l3GJ4HkcqZ8Z9Mwt0miypiz
Malware Config
Signatures
Files
-
b01c1b5d784c8799b2e448d542deaf20a5fca9e49a4f1d98fe21c76c440304cf.exe windows x86
f39b65b38172f1c0642bbf5d6a866a5e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
MCIWndCreateA
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
user32
SetWindowPlacement
GetParent
GetMenu
GetWindowPlacement
GetSystemMetrics
GetClassInfoA
AdjustWindowRectEx
GetWindowLongA
FindWindowA
ClientToScreen
GetAsyncKeyState
SetWindowPos
DefWindowProcA
SetCursorPos
DrawTextA
DrawTextW
FillRect
IsWindowVisible
IsIconic
GetDC
ReleaseDC
UnregisterHotKey
RegisterHotKey
MessageBoxIndirectA
SendMessageA
GetCursorPos
ScreenToClient
ShowCursor
PeekMessageA
TranslateMessage
DispatchMessageA
GetWindowRect
LoadIconA
RegisterClassA
GetDesktopWindow
GetClientRect
CreateWindowExA
UpdateWindow
ShowWindow
PostQuitMessage
UnregisterClassA
DestroyWindow
LoadCursorA
SetCursor
wsprintfA
SetFocus
gdi32
StretchBlt
CreateSolidBrush
CreateFontIndirectA
SetBkMode
SelectObject
SetTextColor
GetStockObject
DeleteObject
GetDeviceCaps
GetPaletteEntries
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyA
shell32
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetMalloc
ole32
CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance
ddraw
DirectDrawCreateEx
DirectDrawEnumerateExA
winmm
timeBeginPeriod
timeEndPeriod
mmioInstallIOProcA
timeGetTime
kernel32
GetCPInfo
IsBadCodePtr
FlushFileBuffers
SetStdHandle
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
ReadFile
InterlockedIncrement
InterlockedDecrement
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
SetEndOfFile
CompareStringA
CompareStringW
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
SetEnvironmentVariableA
FreeEnvironmentStringsW
WriteFile
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetProcAddress
LoadLibraryA
GetSystemDefaultLangID
QueryPerformanceFrequency
GetTickCount
GetSystemDirectoryA
GetCommandLineA
Sleep
MultiByteToWideChar
WritePrivateProfileStringA
GetLastError
GetShortPathNameA
QueryPerformanceCounter
ReleaseMutex
GetCurrentDirectoryA
SetThreadPriority
GetCurrentThread
GetModuleFileNameA
IsBadReadPtr
GetModuleHandleA
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
UnmapViewOfFile
CloseHandle
DeleteFileA
GetVersionExA
GetWindowsDirectoryA
HeapFree
HeapAlloc
RtlUnwind
HeapReAlloc
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesA
CreateDirectoryA
ExitProcess
TerminateProcess
GetCurrentProcess
GetStartupInfoA
GetVersion
RaiseException
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
Sections
.text Size: 220KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE