Static task
static1
Behavioral task
behavioral1
Sample
7c2978d60e32bd5b46ff0588e45c7471baa642978dd7b3668b189c96991d275f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7c2978d60e32bd5b46ff0588e45c7471baa642978dd7b3668b189c96991d275f.exe
Resource
win10v2004-20220812-en
General
-
Target
7c2978d60e32bd5b46ff0588e45c7471baa642978dd7b3668b189c96991d275f
-
Size
708KB
-
MD5
011a2865bb54c97ec7598f137c188b30
-
SHA1
6a15071323440087bee405f29fd038cd1d120cf9
-
SHA256
7c2978d60e32bd5b46ff0588e45c7471baa642978dd7b3668b189c96991d275f
-
SHA512
89b47a1f7daf561b8bfb93a8dfe92a9d2eb0b1dea0bc2ab9db86f3510d38f61666047d6168d388a3fbb5c31dd5d164cd6536882576c0a5227063b93125d09adb
-
SSDEEP
12288:8cy/DBtujLOFHgxsOhqJ28IOmJvr/r4cFZNC8z/RGHD4z5xFlV:8cyrBq4JOvYuNC8rKe
Malware Config
Signatures
Files
-
7c2978d60e32bd5b46ff0588e45c7471baa642978dd7b3668b189c96991d275f.exe windows x86
1982c2c783783fbdcf2b1578eadd803a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ReuseDDElParam
IsDialogMessageA
FillRect
TrackPopupMenu
GetActiveWindow
DestroyWindow
RegisterClassExA
PostMessageA
InvalidateRect
SetWindowPos
GetFocus
ClientToScreen
SetActiveWindow
CloseClipboard
CreateCaret
LoadBitmapA
GetMenuStringA
FrameRect
DestroyIcon
GetWindowTextA
WindowFromPoint
LoadCursorA
GetKeyState
GetMenuItemCount
GetForegroundWindow
GetWindow
CopyIcon
wsprintfA
LoadStringA
ShowWindow
PostQuitMessage
GetSystemMenu
CreateIconIndirect
SetWindowTextA
IsChild
MapDialogRect
GetMessageTime
UnionRect
GetDesktopWindow
PtInRect
LoadIconA
SetCaretPos
DefWindowProcA
DeleteMenu
RegisterClipboardFormatA
DrawEdge
CopyRect
LoadAcceleratorsA
InsertMenuItemA
GetKeyboardLayout
KillTimer
OffsetRect
AppendMenuA
CharNextA
SetFocus
EnableMenuItem
SetWindowPlacement
AdjustWindowRectEx
PostThreadMessageA
SetScrollPos
EnableWindow
EndPaint
FindWindowA
SetWindowLongA
SetDlgItemTextA
GetMessageA
PeekMessageA
SetCapture
DestroyCursor
SetRect
SetRectEmpty
GetWindowPlacement
BeginPaint
GetDC
GetTabbedTextExtentA
SetParent
GetSystemMetrics
CheckMenuItem
GetDCEx
InsertMenuA
RemovePropA
RegisterClassA
SetClassLongA
TranslateMessage
GetNextDlgGroupItem
oleaut32
LoadTypeLi
gdi32
RoundRect
EndPath
DeleteDC
SelectClipRgn
DeleteObject
GetBitmapDimensionEx
EndDoc
SetMapMode
GetDeviceCaps
CreateDIBitmap
BeginPath
SetBkColor
Ellipse
FrameRgn
StartDocA
CreateDCA
ScaleWindowExtEx
GetClipRgn
GetFontData
SelectObject
OffsetRgn
SetRectRgn
EndPage
ScaleViewportExtEx
SetBitmapDimensionEx
SetWindowExtEx
StartPage
GetObjectA
CreateCompatibleDC
LineTo
shlwapi
PathFindExtensionA
PathIsUNCA
PathFindFileNameA
wsock32
WSACleanup
comdlg32
ChooseColorA
PageSetupDlgA
comctl32
_TrackMouseEvent
ImageList_ReplaceIcon
InitCommonControlsEx
ord17
kernel32
HeapCreate
DeleteCriticalSection
GetStringTypeW
FlushFileBuffers
LoadLibraryA
GetCommandLineA
QueryPerformanceCounter
GetEnvironmentStringsW
CloseHandle
RaiseException
GetVersion
GetStringTypeA
TlsSetValue
CompareStringA
GetModuleHandleA
HeapAlloc
GetLocalTime
SetUnhandledExceptionFilter
WriteFile
GetTickCount
SetStdHandle
InterlockedExchange
GetEnvironmentStrings
RtlUnwind
VirtualFree
GetOEMCP
ReadFile
SetFilePointer
GetStdHandle
GetFileType
GetCurrentProcess
GetLastError
EnterCriticalSection
GetCPInfo
SetEnvironmentVariableA
CompareStringW
GetStartupInfoA
FreeEnvironmentStringsW
GetCurrentThreadId
LCMapStringA
GetSystemTimeAsFileTime
HeapFree
InterlockedIncrement
LCMapStringW
SetLastError
GetTimeZoneInformation
TlsAlloc
VirtualQuery
HeapDestroy
GetSystemTime
WideCharToMultiByte
TlsGetValue
MultiByteToWideChar
SetHandleCount
TerminateProcess
FreeEnvironmentStringsA
CreateMutexA
UnhandledExceptionFilter
InitializeCriticalSection
IsBadCodePtr
ExitProcess
HeapReAlloc
GetProcAddress
GetModuleFileNameA
InterlockedDecrement
VirtualAlloc
GetACP
GetCurrentProcessId
LeaveCriticalSection
advapi32
RegDeleteValueA
RegSetValueExA
RegCloseKey
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
winspool.drv
ord204
EnumPrintersA
DeviceCapabilitiesA
Sections
.text Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 464KB - Virtual size: 463KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ