Static task
static1
Behavioral task
behavioral1
Sample
b934782010a35ff80ceb515ea3310722fc84ea097575387baaa361ba45d19521.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b934782010a35ff80ceb515ea3310722fc84ea097575387baaa361ba45d19521.exe
Resource
win10v2004-20221111-en
General
-
Target
b934782010a35ff80ceb515ea3310722fc84ea097575387baaa361ba45d19521
-
Size
300KB
-
MD5
5c4b801b00e892f8e7a1f6b98b6e91b1
-
SHA1
66af7e4cdcfc2945f7e47ec2e96a02dcf141de2d
-
SHA256
b934782010a35ff80ceb515ea3310722fc84ea097575387baaa361ba45d19521
-
SHA512
bcffad4d70bd7703a2ac4ce21e8fffc3de468785b480abbd94552c38e7b05ea050fada009f7406372cb9c1b826d6519df3ec5a9f61dadecfbfbb1d1b4f6bae57
-
SSDEEP
3072:7+skQwXJHL5qruAFlIUwkjGT391Lf02fdm1pST/yrB0CLzcOjm+4+LmmecNgfv7p:6fFXJr52K1k6nf0Ed0rlJhmTjmecN
Malware Config
Signatures
Files
-
b934782010a35ff80ceb515ea3310722fc84ea097575387baaa361ba45d19521.exe windows x86
5572a97f40ca16b2dd49aaf5d55accd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateSolidBrush
SetDIBColorTable
CreateCompatibleBitmap
Escape
SetMapMode
DeleteDC
DeleteObject
GetDeviceCaps
CreateFontA
GetObjectA
SelectObject
CreateDCA
CreateDIBitmap
advapi32
OpenSCManagerA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegEnumKeyA
RegDeleteKeyA
ole32
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleIsCurrentClipboard
OleRegGetUserType
StringFromGUID2
CoRevokeClassObject
DoDragDrop
OleCreateStaticFromData
WriteClassStm
StgOpenStorage
OleFlushClipboard
kernel32
GetLocaleInfoA
TlsFree
GetProcAddress
GetStdHandle
SetStdHandle
GetCommandLineA
HeapSize
HeapCreate
GetACP
GetEnvironmentStrings
GetModuleFileNameA
LoadLibraryA
FlushFileBuffers
GetDateFormatA
GetCurrentThreadId
LCMapStringW
WideCharToMultiByte
TlsGetValue
GetSystemTimeAsFileTime
GetTimeZoneInformation
FreeEnvironmentStringsW
HeapReAlloc
GetTimeFormatA
WriteFile
GetOEMCP
GetStringTypeA
QueryPerformanceCounter
HeapAlloc
IsDebuggerPresent
SetEnvironmentVariableA
FreeEnvironmentStringsA
DeleteCriticalSection
VirtualFree
SetFilePointer
InterlockedExchange
SetLastError
UnhandledExceptionFilter
HeapDestroy
EnterCriticalSection
RtlUnwind
GetVersionExA
InterlockedIncrement
CreateFileA
GetCurrentProcess
InterlockedDecrement
SetHandleCount
GetProcessHeap
ReadFile
IsValidCodePage
GetConsoleOutputCP
TerminateProcess
VirtualAlloc
GetModuleHandleA
CreateMutexA
CompareStringA
GetStartupInfoA
GetConsoleMode
RaiseException
GetCPInfo
SetUnhandledExceptionFilter
InitializeCriticalSection
TlsAlloc
GetEnvironmentStringsW
MultiByteToWideChar
GetCurrentProcessId
CloseHandle
GetConsoleCP
WriteConsoleA
GetStringTypeW
LCMapStringA
VirtualQuery
ExitProcess
TlsSetValue
HeapFree
CompareStringW
Sleep
LeaveCriticalSection
GetTickCount
WriteConsoleW
GetLastError
GetFileType
comdlg32
GetSaveFileNameW
GetOpenFileNameA
GetSaveFileNameA
shell32
DragFinish
Shell_NotifyIconA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ExtractIconA
SHGetMalloc
SHFileOperationA
SHGetFileInfoA
SHGetDesktopFolder
DragAcceptFiles
ShellExecuteA
ShellExecuteExA
user32
IsChild
GetWindowLongA
SendDlgItemMessageA
LoadStringA
MessageBoxA
ShowCaret
UpdateWindow
SetWindowLongA
GetClientRect
ReleaseDC
RegisterClassA
InflateRect
DefWindowProcA
PtInRect
LoadBitmapA
FillRect
GetMessageA
TranslateMessage
PostThreadMessageA
SetMenuItemBitmaps
MoveWindow
SetActiveWindow
wsprintfA
IsWindowVisible
SetPropA
InvalidateRgn
CallWindowProcA
GetClassInfoA
IsWindow
PostMessageA
TrackPopupMenu
DestroyWindow
WinHelpA
SetWindowPos
GetPropA
GetParent
LoadCursorA
LoadIconA
RegisterClassExA
SetWindowTextA
DestroyIcon
GetActiveWindow
DestroyMenu
RemovePropA
GrayStringA
ShowWindow
GetFocus
ReleaseCapture
DestroyCursor
SetScrollPos
GetWindowTextLengthA
GetMenuItemID
IsDialogMessageA
DrawFrameControl
EnableWindow
PostQuitMessage
IsWindowEnabled
CreateWindowExA
SetTimer
GetWindowPlacement
OffsetRect
comctl32
ImageList_Create
ImageList_LoadImageA
_TrackMouseEvent
InitCommonControlsEx
ImageList_Destroy
ImageList_GetImageCount
ord17
oleaut32
LoadTypeLi
Sections
.text Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ