Static task
static1
Behavioral task
behavioral1
Sample
d08d07bc71f7847cf0fbf1201589bf0efce8d4b269a25cc3a20146cdb52bd8ba.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d08d07bc71f7847cf0fbf1201589bf0efce8d4b269a25cc3a20146cdb52bd8ba.exe
Resource
win10v2004-20220901-en
General
-
Target
d08d07bc71f7847cf0fbf1201589bf0efce8d4b269a25cc3a20146cdb52bd8ba
-
Size
441KB
-
MD5
4074948e1854ef200091a6b1d7c17941
-
SHA1
75a4251f14925d69cfb062ae5c21b6a6cee8422d
-
SHA256
d08d07bc71f7847cf0fbf1201589bf0efce8d4b269a25cc3a20146cdb52bd8ba
-
SHA512
52262d8cc3d305037ef97f40698ab4fd37fef94a54ba7e1fbebbd65fed6789a7d33bcd191d15f8690d7a64e3de69127c7e0013dc98b42f525837d02db2b05b17
-
SSDEEP
12288:uA8b3z5nmz9dfaq4uJGB69RtCSE9joVdd8qR2WBb:L8gyqBcB6txOcDlR2WBb
Malware Config
Signatures
Files
-
d08d07bc71f7847cf0fbf1201589bf0efce8d4b269a25cc3a20146cdb52bd8ba.exe windows x86
9a4578d9d52b26aa9d1632964d4b0556
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
gdi32
GetObjectW
GetDeviceCaps
Polygon
GetTextColor
SelectClipRgn
SetWindowExtEx
CreateCompatibleBitmap
DeleteObject
CreateDCW
GetDIBits
GetRgnBox
DeleteDC
CreatePen
comctl32
ImageList_GetImageCount
ord17
ImageList_Create
InitCommonControlsEx
comdlg32
GetSaveFileNameA
PageSetupDlgA
advapi32
RegQueryValueExA
RegOpenKeyA
RegCreateKeyExA
RegCloseKey
DeleteService
RegOpenKeyExA
oleaut32
LoadTypeLi
kernel32
GetLastError
FlushFileBuffers
CloseHandle
InterlockedIncrement
GetStdHandle
GetStringTypeW
InitializeCriticalSection
HeapAlloc
TlsGetValue
TlsAlloc
SetFilePointer
QueryPerformanceCounter
GetCPInfo
DeleteCriticalSection
InterlockedDecrement
RaiseException
GetModuleHandleW
GetCurrentThreadId
VirtualFree
LoadLibraryA
GetCommandLineW
MultiByteToWideChar
GetModuleFileNameW
GetTickCount
LeaveCriticalSection
GetVersion
FreeEnvironmentStringsW
GetCurrentProcessId
LCMapStringW
LoadLibraryW
GetCurrentProcess
GetEnvironmentStringsW
InterlockedExchange
EnterCriticalSection
GetStringTypeA
GetStartupInfoA
HeapCreate
GetSystemTime
HeapDestroy
TlsSetValue
GetSystemTimeAsFileTime
TerminateProcess
GetEnvironmentStrings
SetUnhandledExceptionFilter
SetHandleCount
CompareStringW
GetStartupInfoW
GetModuleHandleA
FreeEnvironmentStringsA
LCMapStringA
CreateMutexW
HeapFree
GetModuleFileNameA
VirtualQuery
GetFileType
ReadFile
GetLocalTime
SetStdHandle
WideCharToMultiByte
IsBadCodePtr
GetCommandLineA
ExitProcess
WriteFile
CompareStringA
RtlUnwind
HeapReAlloc
SetLastError
SetEnvironmentVariableA
UnhandledExceptionFilter
VirtualAlloc
GetTimeZoneInformation
GetProcAddress
ole32
OleInitialize
RevokeDragDrop
OleFlushClipboard
CoRegisterMessageFilter
CoCreateInstance
CreateStreamOnHGlobal
user32
IsWindowVisible
PostQuitMessage
RegisterClassW
KillTimer
ShowWindow
IsZoomed
DestroyIcon
LoadCursorW
MessageBoxW
LoadBitmapW
LoadStringW
DispatchMessageW
RedrawWindow
LoadIconW
DefWindowProcW
DestroyWindow
RegisterClassExW
GetMenuItemID
SetDlgItemInt
CreateWindowExW
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 254KB - Virtual size: 254KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ