Static task
static1
Behavioral task
behavioral1
Sample
908f7d8384bd1880c79a7355c743550ee5185340d72cd5265e5e671852e46a8e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
908f7d8384bd1880c79a7355c743550ee5185340d72cd5265e5e671852e46a8e.exe
Resource
win10v2004-20220812-en
General
-
Target
908f7d8384bd1880c79a7355c743550ee5185340d72cd5265e5e671852e46a8e
-
Size
83KB
-
MD5
1d4d79ab7d1fe03cbceeb7a1a937bca8
-
SHA1
33ff908d16a7150c2fcb843fe1af95bd804b264a
-
SHA256
908f7d8384bd1880c79a7355c743550ee5185340d72cd5265e5e671852e46a8e
-
SHA512
8b5d1887b3bf00c8b51ff4276722f68dea55c1eec16bf24a8a0da290d37134c14d92882fe920a1503b1b67cd0799be9f788558a1f5cf1e8e100931c27ded07b3
-
SSDEEP
1536:rLgx2FnjmS69x7nIrD68+/qJlz9ekDiOEWNakxiVchIjK0EeD0:vggFjmh9BIPI/Gl2+Nxi2hb0Ec
Malware Config
Signatures
Files
-
908f7d8384bd1880c79a7355c743550ee5185340d72cd5265e5e671852e46a8e.exe windows x86
a5f7caacea242e807d5f28343b90b5e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
SetWindowPos
EnableMenuItem
PostQuitMessage
GetScrollPos
EnumWindows
GetMessageA
UnhookWindowsHookEx
EqualRect
GetSysColorBrush
SetWindowTextA
FrameRect
GetSysColor
GetSubMenu
kernel32
VirtualAllocEx
GetSystemTime
GetTickCount
GetOEMCP
GetACP
GetCurrentProcessId
GetThreadLocale
ExitProcess
GetTimeZoneInformation
GetStartupInfoA
FileTimeToSystemTime
QueryPerformanceCounter
SetUnhandledExceptionFilter
InterlockedExchange
GetFileAttributesA
RtlUnwind
GetTempPathA
gdi32
CopyEnhMetaFileA
SelectClipPath
DPtoLP
FillRgn
SetViewportExtEx
GetMapMode
ExcludeClipRect
CreateICW
CreateCompatibleBitmap
ole32
CoInitialize
OleRun
CoTaskMemRealloc
DoDragDrop
CoInitializeSecurity
StgOpenStorage
StringFromGUID2
CoRevokeClassObject
CoCreateInstance
advapi32
CheckTokenMembership
GetUserNameA
GetSecurityDescriptorDacl
RegCreateKeyA
CryptHashData
AdjustTokenPrivileges
QueryServiceStatus
FreeSid
RegQueryValueExW
RegCreateKeyExW
msvcrt
__getmainargs
strncpy
fprintf
__setusermatherr
strlen
_fdopen
signal
puts
iswspace
_CIpow
_strdup
__initenv
_mbscmp
fflush
_lock
strcspn
raise
_flsbuf
comctl32
ImageList_DragEnter
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_LoadImageA
InitCommonControls
ImageList_Destroy
CreatePropertySheetPageA
ImageList_GetBkColor
ImageList_Write
ImageList_LoadImageW
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_DrawEx
shell32
SHGetPathFromIDList
ShellExecuteW
DragQueryFileA
DoEnvironmentSubstW
ExtractIconExW
SHBrowseForFolderA
CommandLineToArgvW
ExtractIconW
ShellExecuteEx
DragAcceptFiles
DragQueryFileW
oleaut32
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayPutElement
SysReAllocStringLen
SafeArrayCreate
SafeArrayPtrOfIndex
VariantCopy
SafeArrayRedim
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE