Static task
static1
Behavioral task
behavioral1
Sample
df603c7a5b9e19bb58360f17a90999ee44d5d7375a8f58d50555d197020baa92.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
df603c7a5b9e19bb58360f17a90999ee44d5d7375a8f58d50555d197020baa92.exe
Resource
win10v2004-20220812-en
General
-
Target
df603c7a5b9e19bb58360f17a90999ee44d5d7375a8f58d50555d197020baa92
-
Size
76KB
-
MD5
e353c26de4b33bdfd742ab316b1ffa02
-
SHA1
2b0bed6d527ca7e9275a9aba26940d6da81cf46a
-
SHA256
df603c7a5b9e19bb58360f17a90999ee44d5d7375a8f58d50555d197020baa92
-
SHA512
fdad15c3341aaa289a11ceb9805cfe22444c533d8eca477a4fdb7ebe6c11aa386c1aaf0d847aee4e6ba5afa538f7e0f34cd75acc044054766c0846c101ca12b7
-
SSDEEP
1536:e9pZeTgJePO1eAZoxbeGj2xZzZloi5wPYhcxt0hKRkV1qMH8xD:ukg1eks1j2/T+kNpch
Malware Config
Signatures
Files
-
df603c7a5b9e19bb58360f17a90999ee44d5d7375a8f58d50555d197020baa92.exe windows x86
1e51879f116875acc43c110bde26f8d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
SetWindowTextA
GetSysColor
SetWindowPos
PostQuitMessage
GetSubMenu
UnhookWindowsHookEx
EnableMenuItem
GetMessageA
EqualRect
EnumWindows
GetSysColorBrush
FrameRect
GetScrollPos
kernel32
VirtualAllocEx
GetSystemTime
InterlockedExchange
GetFileAttributesA
RtlUnwind
GetOEMCP
ExitProcess
GetTickCount
GetCurrentProcessId
QueryPerformanceCounter
FileTimeToSystemTime
GetACP
GetStartupInfoA
GetThreadLocale
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetTempPathA
gdi32
DPtoLP
CopyEnhMetaFileA
CreateICW
GetMapMode
ExcludeClipRect
CreateCompatibleBitmap
SetViewportExtEx
SelectClipPath
FillRgn
ole32
OleRun
CoCreateInstance
StringFromGUID2
CoInitializeSecurity
DoDragDrop
CoInitialize
StgOpenStorage
CoTaskMemRealloc
CoRevokeClassObject
advapi32
CryptHashData
FreeSid
QueryServiceStatus
RegCreateKeyA
GetUserNameA
RegQueryValueExW
RegCreateKeyExW
CheckTokenMembership
GetSecurityDescriptorDacl
AdjustTokenPrivileges
msvcrt
strncpy
_mbscmp
_strdup
_CIpow
fprintf
_flsbuf
signal
__getmainargs
_lock
__initenv
__setusermatherr
raise
puts
strcspn
_fdopen
fflush
strlen
iswspace
comctl32
InitCommonControls
ImageList_SetIconSize
ImageList_Destroy
ImageList_GetBkColor
CreatePropertySheetPageA
ImageList_Write
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_DrawEx
ImageList_LoadImageA
ImageList_GetIcon
ImageList_LoadImageW
ImageList_DragEnter
shell32
CommandLineToArgvW
ShellExecuteW
DragAcceptFiles
ShellExecuteEx
SHBrowseForFolderA
ExtractIconW
ExtractIconExW
DoEnvironmentSubstW
DragQueryFileW
DragQueryFileA
SHGetPathFromIDList
oleaut32
SafeArrayPutElement
SafeArrayUnaccessData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayPtrOfIndex
SafeArrayGetUBound
SysReAllocStringLen
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ