Static task
static1
Behavioral task
behavioral1
Sample
a56a81a9d397093e6ba9ee1e1a2339e0a8f787cffe4c1c2713cde5053b7a1872.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a56a81a9d397093e6ba9ee1e1a2339e0a8f787cffe4c1c2713cde5053b7a1872.exe
Resource
win10v2004-20220812-en
General
-
Target
a56a81a9d397093e6ba9ee1e1a2339e0a8f787cffe4c1c2713cde5053b7a1872
-
Size
152KB
-
MD5
3c7438693919aec4aa14d4c82671b399
-
SHA1
18ca2d37123e961231c8e9090dd9ae87dcfba1cd
-
SHA256
a56a81a9d397093e6ba9ee1e1a2339e0a8f787cffe4c1c2713cde5053b7a1872
-
SHA512
e3b8e256d29e9a9d3f7b96609826da72798d4dfe7d8b5ae58f7f2857a5e6edd2c229d37572b15143c4590c3b673469f1543ae94f877469c2c053884d58874e4a
-
SSDEEP
3072:hRkfz6a7QGrGD9oKSjPcqIBWylzyn0sQ1xrg+Ut2tScMrX8c2l:PqNVIuP6207rNUt2gX8c2l
Malware Config
Signatures
Files
-
a56a81a9d397093e6ba9ee1e1a2339e0a8f787cffe4c1c2713cde5053b7a1872.exe windows x86
1d416403f2f3588ea3e5184a327e8393
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
regstr
RegisterDlg3
kernel32
GetCPInfo
GetOEMCP
GetStartupInfoA
RtlUnwind
TerminateProcess
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetCommandLineA
ExitProcess
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CloseHandle
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
WriteFile
GetCurrentProcess
SetErrorMode
GetProcessVersion
LoadLibraryA
FreeLibrary
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetLastError
GetModuleHandleA
GetProcAddress
SetLastError
MultiByteToWideChar
WideCharToMultiByte
lstrcpyA
lstrcatA
GetEnvironmentStrings
lstrcmpA
GetCurrentThread
WritePrivateProfileStringA
GetEnvironmentStringsW
lstrlenA
lstrcmpiA
InterlockedDecrement
GlobalFlags
TlsGetValue
lstrcpynA
EnterCriticalSection
LocalReAlloc
TlsSetValue
TlsFree
GlobalReAlloc
LeaveCriticalSection
GlobalFree
GlobalHandle
GlobalUnlock
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
LocalFree
LocalAlloc
SetHandleCount
GetStdHandle
FreeEnvironmentStringsW
GetCurrentThreadId
user32
GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
DefWindowProcA
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetTopWindow
SetFocus
GetSystemMetrics
CopyRect
GetClientRect
AdjustWindowRectEx
GetSysColor
MapWindowPoints
LoadIconA
GetSysColorBrush
LoadStringA
DestroyMenu
SetWindowLongA
GetDlgItem
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
GetMenuItemCount
wsprintfA
UnhookWindowsHookEx
SetWindowTextA
GetWindow
GetDlgCtrlID
GetWindowRect
ClientToScreen
LoadCursorA
GetCapture
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
ShowWindow
SetWindowPos
EnableWindow
SetCursor
SendMessageA
PostQuitMessage
PostMessageA
GetClassNameA
PtInRect
GetWindowTextA
UnregisterClassA
gdi32
CreateBitmap
SaveDC
DeleteDC
SelectObject
GetStockObject
RestoreDC
SetBkColor
SetMapMode
SetViewportOrgEx
SetTextColor
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetWindowExtEx
GetClipBox
ScaleWindowExtEx
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
comctl32
ord17
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE