Static task
static1
Behavioral task
behavioral1
Sample
7532088562599b1bd90c197994413309c757697056240ae2b2f3386f22a57e54.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7532088562599b1bd90c197994413309c757697056240ae2b2f3386f22a57e54.exe
Resource
win10v2004-20220901-en
General
-
Target
7532088562599b1bd90c197994413309c757697056240ae2b2f3386f22a57e54
-
Size
170KB
-
MD5
10a37e7e5ca230b86b1b1d3ce536bbe0
-
SHA1
3d90f4af489641de0b41f47b2ca122cad8cc78ac
-
SHA256
7532088562599b1bd90c197994413309c757697056240ae2b2f3386f22a57e54
-
SHA512
1c60fa98dbc0e4b5bab5c4eeb52e6ed1469329ce55e1a9b18611a1f0c016a2f023447bb6a917139ea78b1049e52333216f8e8c26379e9fe5303cc81f1d5aeeaf
-
SSDEEP
3072:Ux6o/Hr/bx4DDGWItPcwljed/8ia7jFvnWZXwc:Ux6kHr/bOLOJRe5sc
Malware Config
Signatures
Files
-
7532088562599b1bd90c197994413309c757697056240ae2b2f3386f22a57e54.exe windows x86
fef945bba339468b9334ccd76bbdf4de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
FreeLibrary
lstrcmpiW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
lstrlenW
GetModuleHandleW
GetLastError
DeleteCriticalSection
RaiseException
GetProcAddress
LoadLibraryA
InitializeCriticalSection
EnterCriticalSection
Sleep
GetCurrentThreadId
GetCommandLineW
CreateThread
CreateEventW
CloseHandle
WaitForSingleObject
GetModuleFileNameW
SetEvent
GetStringTypeW
GetStringTypeA
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetVersionExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
VirtualFree
HeapDestroy
HeapCreate
GetCPInfo
GetOEMCP
GetStartupInfoA
user32
SetWindowPos
PostThreadMessageW
CharNextW
GetMessageW
DispatchMessageW
IsWindow
SendMessageW
GetDesktopWindow
SetForegroundWindow
UnregisterClassA
advapi32
RegQueryValueExA
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExA
ole32
CoInitialize
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
oleaut32
VarBstrCmp
SysAllocStringByteLen
SysStringByteLen
SysAllocString
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysFreeString
SysStringLen
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fkuet Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 88KB - Virtual size: 88KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE