Static task
static1
Behavioral task
behavioral1
Sample
d23644e0514d3994952014b6b6e3fb1a2969e45c47ff8b2490ce7888b55756fc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d23644e0514d3994952014b6b6e3fb1a2969e45c47ff8b2490ce7888b55756fc.exe
Resource
win10v2004-20220812-en
General
-
Target
d23644e0514d3994952014b6b6e3fb1a2969e45c47ff8b2490ce7888b55756fc
-
Size
198KB
-
MD5
b0b51793128f3dc4573a344173fd13e9
-
SHA1
b426bbcbe54f07f74274ccb188ee3556cc2f2d05
-
SHA256
d23644e0514d3994952014b6b6e3fb1a2969e45c47ff8b2490ce7888b55756fc
-
SHA512
2367c934832b51d4fae7802252ae973b4ccf9f5204261545c6fef1b26ceb5ef1c8df3fb3bd6d8842b5bf053441b72e09ea20b25355ffbad98597846ada21c975
-
SSDEEP
3072:OQqEBOsU5ubt3fIaLiBB7AATr58IlOxnbd2ukV1ylR8Lat5tJIpYeCp4eBL:aE45uRQaOBB0ATsxbUiSLat5tqRK
Malware Config
Signatures
Files
-
d23644e0514d3994952014b6b6e3fb1a2969e45c47ff8b2490ce7888b55756fc.exe windows x86
164741ec3af0a518c8a4b5a07205b605
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
RegQueryValueW
RegCreateKeyExA
RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueA
RegLoadKeyA
RegEnumKeyW
RegOpenKeyExW
RegEnumKeyExA
RegEnumKeyA
RegLoadKeyA
RegOpenKeyExW
RegQueryValueA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyA
RegQueryValueExA
RegQueryInfoKeyW
RegLoadKeyW
RegDeleteValueW
RegEnumValueW
RegReplaceKeyW
RegDeleteKeyA
RegCreateKeyW
RegQueryValueW
RegGetKeySecurity
RegEnumKeyW
RegReplaceKeyW
RegReplaceKeyA
RegDeleteKeyA
RegCreateKeyExA
RegEnumKeyW
RegOpenKeyExA
RegFlushKey
RegQueryValueA
RegEnumKeyExA
RegQueryValueExW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyA
user32
EndDialog
GetMenu
DrawTextA
AppendMenuA
BlockInput
DrawIconEx
IsWindow
InsertMenuA
GetWindowTextA
CreateIcon
GetDlgItem
DialogBoxParamW
GetDC
CopyRect
CalcMenuBar
CopyIcon
CopyImage
DrawTextW
GetFocus
LoadCursorA
LoadMenuA
DrawIconEx
CalcMenuBar
BlockInput
CreateIcon
DialogBoxParamA
IsMenu
DrawIcon
CopyRect
DialogBoxParamW
GetCursor
InsertMenuA
AppendMenuW
GetFocus
GetDC
GetDlgItem
DialogBoxParamA
GetFocus
AppendMenuW
GetWindowTextA
GetCursor
DrawIcon
AppendMenuA
CopyImage
DialogBoxParamW
EndDialog
CloseWindow
DrawTextW
GetDlgItem
GetWindowTextA
LoadMenuA
GetMenu
DrawIconEx
AlignRects
IsWindow
BlockInput
DrawTextW
GetCursor
DrawIcon
CopyImage
CopyRect
GetWindowTextLengthA
LoadCursorA
CopyIcon
AppendMenuA
InsertMenuA
EndDialog
InsertMenuA
CloseWindow
DrawIconEx
BlockInput
EndDialog
DrawTextA
AppendMenuA
DialogBoxParamA
CalcMenuBar
DrawTextW
GetDC
CopyImage
LoadCursorA
GetFocus
GetWindowTextA
GetCursor
DrawIcon
AppendMenuW
GetMenu
CopyIcon
DrawIconEx
LoadCursorA
GetDlgItem
AppendMenuA
DrawTextA
CloseWindow
GetWindowTextLengthA
DialogBoxParamW
CopyRect
EndDialog
GetFocus
kernel32
GetFileSize
CreateDirectoryA
SetLastError
GetFileTime
DeleteAtom
GetStdHandle
CopyFileA
OpenFile
Sleep
FindAtomA
DeleteFileW
GetCPInfo
FindFirstFileA
CreateProcessA
DeleteFileA
CreateThread
ReadFile
GetConsoleMode
GetCPInfo
CopyFileExA
GetStdHandle
DeleteFileW
ReadConsoleA
GlobalFree
DeleteAtom
GetCommandLineA
FindAtomA
GetComputerNameA
GetFileTime
ExitThread
CopyFileExW
GetLastError
CreateProcessA
CopyFileW
GetStdHandle
WriteFile
GlobalFree
OpenFile
CopyFileA
DeleteAtom
CopyFileExW
CreateProcessA
CreateDirectoryA
DeleteFileA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rDATa Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rDAta Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rDaTa Size: 1KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ