Static task
static1
Behavioral task
behavioral1
Sample
b476c8582ec8dcb33dfe9afcef83a0477ae15f0a11c6ddab1dcc50bed7835e22.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b476c8582ec8dcb33dfe9afcef83a0477ae15f0a11c6ddab1dcc50bed7835e22.exe
Resource
win10v2004-20220901-en
General
-
Target
b476c8582ec8dcb33dfe9afcef83a0477ae15f0a11c6ddab1dcc50bed7835e22
-
Size
265KB
-
MD5
864ee922b5b964ef465db6d515aab702
-
SHA1
29320b4577e7108a94753e71ac0614219f489aae
-
SHA256
b476c8582ec8dcb33dfe9afcef83a0477ae15f0a11c6ddab1dcc50bed7835e22
-
SHA512
c9f543f71a518c7a60cae22a41fbc5816634ff05ebb3ee201e5f26061acb3c1ee1cd7a1ec9a6885b80def2a159d030c8e38b1e3ad0548d44b2836d80e85f7475
-
SSDEEP
6144:9eK782phAsVGv+wAtfYTpOJQUZLHSPWwq2OHRD:9Y2p+sVSAhsIJ3Zf2O
Malware Config
Signatures
Files
-
b476c8582ec8dcb33dfe9afcef83a0477ae15f0a11c6ddab1dcc50bed7835e22.exe windows x86
26fd94bcf04045363ad926d246f7a75a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
kernel32
RtlUnwind
GetCurrentDirectoryA
GlobalAddAtomA
SetErrorMode
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetTimeZoneInformation
GetSystemTime
RaiseException
HeapReAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetLocalTime
FreeEnvironmentStringsA
HeapAlloc
MulDiv
HeapFree
UnhandledExceptionFilter
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetLocaleInfoA
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileTime
GetProcAddress
Sleep
FindFirstFileA
DeleteFileA
FindNextFileA
GetFileSize
GetFileAttributesA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GlobalFlags
GetProcessVersion
SizeofResource
GlobalAlloc
GlobalDeleteAtom
GetCurrentThread
SetLastError
lstrcmpiA
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
MultiByteToWideChar
FindClose
WideCharToMultiByte
InterlockedDecrement
GetEnvironmentStringsW
GetEnvironmentStrings
GetCurrentThreadId
GetPrivateProfileStringA
InterlockedIncrement
WritePrivateProfileStringA
GetVersion
GlobalUnlock
GlobalGetAtomNameA
GlobalLock
LoadResource
FindResourceA
lstrcatA
LockResource
GlobalFree
FileTimeToLocalFileTime
lstrcmpA
lstrcpyA
FileTimeToSystemTime
lstrlenA
_lwrite
GetDriveTypeA
GetProfileStringA
_llseek
_lclose
CreateFileA
ReleaseMutex
CreateMutexA
WaitForSingleObject
SetHandleCount
GetModuleHandleA
GetStdHandle
FreeEnvironmentStringsW
GetVersionExA
CreateEventA
CreateProcessA
GetModuleFileNameA
GetLastError
CloseHandle
GetSystemInfo
LocalFree
FormatMessageA
LoadLibraryA
FreeLibrary
user32
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
EnableMenuItem
LoadStringA
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
ShowOwnedPopups
SetCursor
CharUpperA
PostQuitMessage
GetCursorPos
ValidateRect
GetMessageA
LoadCursorA
GetSysColorBrush
GetClassNameA
PtInRect
ClientToScreen
GetDesktopWindow
DestroyMenu
InvalidateRect
OffsetRect
WindowFromPoint
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
IsIconic
BringWindowToTop
IntersectRect
InflateRect
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
SetScrollInfo
ShowScrollBar
SetScrollRange
GetScrollPos
SetWindowTextA
GetSysColor
IsChild
WinHelpA
MoveWindow
GetSubMenu
GetMenuItemID
GetMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
SetWindowsHookExA
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
SetWindowLongA
RegisterWindowMessageA
GetNextDlgTabItem
EndDialog
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
MapDialogRect
SetWindowPos
ShowWindow
PostMessageA
GetCapture
GetActiveWindow
SetActiveWindow
GetAsyncKeyState
GetDlgItem
GetWindowLongA
IsWindowEnabled
GetFocus
SetFocus
GetParent
PeekMessageA
TranslateMessage
IsDialogMessageA
DispatchMessageA
CharLowerA
CharNextA
CharUpperBuffA
wvsprintfA
SetForegroundWindow
FindWindowA
CreateWindowExA
DefWindowProcA
UnregisterClassA
RegisterClassA
MessageBoxA
LoadIconA
ScreenToClient
GetWindowRect
SendMessageA
SetCapture
LoadBitmapA
ReleaseCapture
EnableWindow
SetDlgItemTextA
UpdateWindow
SendDlgItemMessageA
SystemParametersInfoA
MapWindowPoints
wsprintfA
GetClassInfoA
GetMenuItemCount
SetScrollPos
GetTopWindow
GetClassLongA
CallNextHookEx
CallWindowProcA
GetKeyState
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
gdi32
DeleteObject
BitBlt
SelectObject
DeleteDC
SetBkColor
GetPixel
CreateCompatibleDC
GetDeviceCaps
SetTextColor
CreateBitmap
SaveDC
RestoreDC
SetBkMode
GetStockObject
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
GetObjectA
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextExtentPointA
PatBlt
GetClipBox
CreateDIBitmap
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
shell32
DragFinish
DragQueryFileA
comctl32
ord17
DestroyPropertySheetPage
PropertySheetA
CreatePropertySheetPageA
ImageList_Destroy
Sections
.text Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE