Static task
static1
Behavioral task
behavioral1
Sample
69a0161cecc7b1a89d4877f96e997aaf8a11af72364be88c0692f0016e6b978d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
69a0161cecc7b1a89d4877f96e997aaf8a11af72364be88c0692f0016e6b978d.exe
Resource
win10v2004-20220901-en
General
-
Target
69a0161cecc7b1a89d4877f96e997aaf8a11af72364be88c0692f0016e6b978d
-
Size
8.8MB
-
MD5
2f735600ab65fb8930f8b7ad2a3f3f46
-
SHA1
f6ba2e5ee13e3317acb2e4852a7972541913e152
-
SHA256
69a0161cecc7b1a89d4877f96e997aaf8a11af72364be88c0692f0016e6b978d
-
SHA512
ea6a356e79c147f2cd52f473eae77ec8c90f80d7fdf0820bd5686453b221d2a6650fe3e5b5fb14c9e0aebb3720c773904a56a3e98b4802f7f81675a6dcc354b7
-
SSDEEP
196608:dZ5Y7eVwHUX5z87Psv7xXBeK3/R9ZCL3r8d4UKjgs6ZlutFjl8gz44QAJ:b5Y7eVwHUX5zAPuxXX/0brxUKjb6sttb
Malware Config
Signatures
Files
-
69a0161cecc7b1a89d4877f96e997aaf8a11af72364be88c0692f0016e6b978d.exe windows x86
ff160957d16df3dba33bb98b0c70170a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
shell32
SHBrowseForFolderW
SHGetSpecialFolderLocation
CommandLineToArgvW
ShellExecuteW
ShellExecuteExW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetMalloc
kernel32
FlushFileBuffers
CreateFileA
GetModuleFileNameW
LoadLibraryW
FreeLibrary
GetProcAddress
WaitForSingleObject
SetCurrentDirectoryW
CreateProcessW
CloseHandle
GetCurrentDirectoryW
LocalFree
SetFileApisToOEM
SetPriorityClass
GetCurrentThread
SetThreadPriority
GetEnvironmentVariableW
GetCurrentProcess
GetLastError
GetModuleHandleW
GetVersionExW
ExpandEnvironmentStringsW
GetCommandLineW
GetFileAttributesW
DeleteFileW
RemoveDirectoryW
CreateDirectoryW
FormatMessageW
InterlockedExchangeAdd
FindFirstFileW
FindClose
FindNextFileW
SetEndOfFile
SetFileTime
WriteFile
ReadFile
GetFileSize
CreateFileW
SetFilePointer
ResumeThread
WaitForMultipleObjects
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
lstrlenW
GetTempPathW
GetWindowsDirectoryW
GetFullPathNameW
SetFileAttributesW
GetTempFileNameW
GetLongPathNameW
MoveFileW
CreateEventW
SetEvent
ResetEvent
FindResourceW
FileTimeToSystemTime
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
HeapReAlloc
VirtualAlloc
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetACP
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
ExitThread
GetCurrentThreadId
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
user32
DispatchMessageW
IsDialogMessageW
CreateDialogParamW
LoadIconW
SetTimer
TranslateMessage
ScreenToClient
GetMessageW
DestroyIcon
SendMessageW
IsWindow
MessageBoxW
ShowWindow
PostMessageW
DialogBoxParamW
GetSystemMetrics
GetWindowRect
SetWindowPos
GetDlgItem
EndDialog
GetWindowTextW
SetWindowTextW
KillTimer
EnableWindow
GetActiveWindow
GetDesktopWindow
LoadStringW
IsWindowVisible
PostQuitMessage
gdi32
DeleteObject
CreateSolidBrush
ole32
CoCreateInstance
CoTaskMemFree
CoInitializeEx
CoUninitialize
CoInitialize
Sections
.text Size: 270KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ