Static task
static1
Behavioral task
behavioral1
Sample
b66a76004426c30e520b4996c253036eb8c704c43805f06023e0f95b30165f91.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b66a76004426c30e520b4996c253036eb8c704c43805f06023e0f95b30165f91.exe
Resource
win10v2004-20221111-en
General
-
Target
b66a76004426c30e520b4996c253036eb8c704c43805f06023e0f95b30165f91
-
Size
743KB
-
MD5
0757c84f6c067b421ea35a52667ef0b0
-
SHA1
624270c77c456cf0c8982c59c16d18ede3829583
-
SHA256
b66a76004426c30e520b4996c253036eb8c704c43805f06023e0f95b30165f91
-
SHA512
af386afbd6f017fa524ace6e765bc3213371dbb1b3be34d80fa7c46001e996a0d35479373a6533f3f7c0cfff81fa7d987ca8244170978f5781dbe85b7aaf4340
-
SSDEEP
12288:I8+/QuwXXxkJ4KgoB0B7Pes32T7as8dnNJ0qj5RbLJVubZl:I8+4uAxkJV+jZ/FNjnJ8Zl
Malware Config
Signatures
Files
-
b66a76004426c30e520b4996c253036eb8c704c43805f06023e0f95b30165f91.exe windows x86
8888ab10eee71097a3aa417ffea29939
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetBrushOrgEx
CloseMetaFile
CreatePolygonRgn
RestoreDC
GetTextExtentPoint32A
CreateCompatibleBitmap
EnumFontFamiliesExA
SaveDC
CreateBitmap
CreatePen
ExtFloodFill
BeginPath
OffsetRgn
EndPath
SetMapMode
CreateRectRgn
CreateMetaFileA
PolyBezier
GetWindowExtEx
OffsetViewportOrgEx
StretchDIBits
SetWindowOrgEx
GetViewportExtEx
GetMapMode
SetROP2
PaintRgn
Rectangle
Pie
CreateCompatibleDC
CreateFontA
Polygon
SetDIBitsToDevice
SetRectRgn
DeleteObject
SetViewportOrgEx
CreateFontIndirectA
PtInRegion
kernel32
MultiByteToWideChar
GetOEMCP
IsValidCodePage
LCMapStringW
EnterCriticalSection
GetConsoleOutputCP
HeapFree
LoadLibraryA
HeapCreate
SetConsoleCtrlHandler
TlsAlloc
GetTickCount
InterlockedIncrement
GetProcAddress
WideCharToMultiByte
CloseHandle
FlushFileBuffers
FreeEnvironmentStringsW
CompareStringA
EnumSystemLocalesA
GetProcessHeap
VirtualQuery
HeapDestroy
GetVersionExA
GetTimeFormatA
RaiseException
RtlUnwind
FreeLibrary
HeapReAlloc
VirtualFree
UnhandledExceptionFilter
GetTimeZoneInformation
GetEnvironmentStringsW
GetCommandLineA
Sleep
SetFilePointer
IsDebuggerPresent
GetCurrentThread
GetStringTypeW
InterlockedDecrement
SetLastError
TerminateProcess
CompareStringW
TlsSetValue
LCMapStringA
GetEnvironmentStrings
FatalAppExitA
IsValidLocale
GetStartupInfoA
GetLastError
LeaveCriticalSection
GetConsoleMode
WriteConsoleA
SetEnvironmentVariableA
GetUserDefaultLCID
FreeEnvironmentStringsA
SetHandleCount
ReadFile
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
SetStdHandle
InterlockedExchange
VirtualAlloc
GetCurrentThreadId
GetCurrentProcessId
HeapAlloc
GetConsoleCP
HeapSize
InitializeCriticalSection
GetModuleHandleA
GetCurrentProcess
GetDateFormatA
GetStringTypeA
GetCPInfo
TlsGetValue
GetLocaleInfoA
GetFileType
CreateFileA
GetLocaleInfoW
GetACP
CreateMutexA
GetStdHandle
DeleteCriticalSection
QueryPerformanceCounter
ExitProcess
GetModuleFileNameA
WriteFile
WriteConsoleW
TlsFree
user32
GetCursorPos
IsDlgButtonChecked
GetScrollInfo
GetDlgCtrlID
CreateWindowExA
EnumWindows
InsertMenuItemA
DestroyMenu
SetScrollPos
DestroyWindow
SetRectEmpty
SendDlgItemMessageA
RegisterClassA
GetParent
CharLowerA
TrackPopupMenuEx
ClientToScreen
GetActiveWindow
GetMenuState
EnableWindow
DrawEdge
DefWindowProcA
MessageBoxA
CallNextHookEx
PtInRect
ShowWindow
MoveWindow
ExcludeUpdateRgn
GetMenuItemCount
GetWindowTextLengthA
RegisterClassExA
PeekMessageA
IsIconic
IsZoomed
IsMenu
GetClientRect
GetSystemMetrics
advapi32
RegEnumValueA
GetTokenInformation
RegQueryValueExA
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
RegSetValueExA
CreateServiceA
OpenSCManagerA
OpenProcessToken
CloseServiceHandle
RegDeleteValueA
comctl32
InitCommonControlsEx
ImageList_GetIcon
ImageList_SetImageCount
ImageList_Destroy
_TrackMouseEvent
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 449KB - Virtual size: 449KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ