Static task
static1
Behavioral task
behavioral1
Sample
91490cfd7f004900eaa9823316803fce263b4d45a15446edd4937cd0fe6e553f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
91490cfd7f004900eaa9823316803fce263b4d45a15446edd4937cd0fe6e553f.exe
Resource
win10v2004-20220812-en
General
-
Target
91490cfd7f004900eaa9823316803fce263b4d45a15446edd4937cd0fe6e553f
-
Size
260KB
-
MD5
30afe93c87bd81bec830a9f75ddd40d1
-
SHA1
6d53825e666feb1326a8aefe395c792c0c7f1c20
-
SHA256
91490cfd7f004900eaa9823316803fce263b4d45a15446edd4937cd0fe6e553f
-
SHA512
3f1c49f2d197e16c9d16eaa75520ee865a26f84e8d05c42e44d5fe251ff006d76e09e92166098b464dc6723aa0b1e5c5b5e7d48338a6753e26627931db7eb7a9
-
SSDEEP
6144:dWUDlAzeYvngvY8GbkCxk0XlbbUALORt:dWUDiCE3xDXpZ
Malware Config
Signatures
Files
-
91490cfd7f004900eaa9823316803fce263b4d45a15446edd4937cd0fe6e553f.exe windows x86
9f892979e3140eae2c5abecc8e8162e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSettings
SHGetSpecialFolderPathA
Shell_NotifyIconW
SHFileOperationA
DragFinish
ExtractIconExW
DragQueryPoint
ws2_32
recv
WSAHtons
WSARecv
WSAEnumNameSpaceProvidersA
WSASendDisconnect
WSADuplicateSocketA
WSAAsyncGetHostByName
getservbyname
WSASetLastError
WSALookupServiceNextW
WSAInstallServiceClassW
advapi32
RegOpenKeyW
GetFileSecurityA
SetSecurityDescriptorGroup
CryptSetProvParam
CreateProcessAsUserW
GetAclInformation
RegRestoreKeyW
BuildTrusteeWithNameW
RegDeleteKeyW
RegOpenKeyExA
version
VerQueryValueA
comdlg32
PrintDlgA
GetSaveFileNameW
kernel32
GetStartupInfoA
GetModuleHandleA
CompareStringA
CreateDirectoryExA
VirtualAlloc
lstrlenA
SetErrorMode
VirtualQueryEx
GlobalReAlloc
IsBadReadPtr
OpenFile
SetConsoleActiveScreenBuffer
VirtualAllocEx
ConnectNamedPipe
lstrcpynA
WritePrivateProfileStringA
GetSystemTime
SetThreadAffinityMask
DosDateTimeToFileTime
UnhandledExceptionFilter
_hread
GetFileType
SetEnvironmentVariableA
GetCurrentDirectoryW
SetEvent
GetFileAttributesA
GetSystemDefaultLangID
GlobalUnlock
EnumSystemCodePagesA
GetOverlappedResult
GlobalFlags
FreeLibraryAndExitThread
GetFileAttributesExA
CopyFileExW
GetSystemDirectoryW
FindFirstFileExW
FlushConsoleInputBuffer
SetConsoleWindowInfo
GetCommModemStatus
GetTapeStatus
GetDriveTypeW
GetUserDefaultLangID
GetTempFileNameA
GetCompressedFileSizeW
EnumResourceNamesW
RemoveDirectoryW
oleaut32
SetErrorInfo
ole32
CoReleaseMarshalData
OleSetContainedObject
CoUninitialize
user32
HiliteMenuItem
DefWindowProcW
InflateRect
SetWindowLongA
MonitorFromPoint
CheckRadioButton
DispatchMessageA
ReleaseCapture
IsIconic
DialogBoxParamW
SetUserObjectSecurity
IsCharUpperW
AppendMenuW
GetDCEx
EndDeferWindowPos
DrawIcon
ScrollWindow
SetProcessDefaultLayout
LoadMenuW
RegisterWindowMessageW
GetDesktopWindow
SetCursorPos
GetPropW
gdi32
ModifyWorldTransform
EnumFontsW
SelectClipPath
GetPolyFillMode
SetGraphicsMode
GetEnhMetaFileHeader
SetMapperFlags
LPtoDP
GetOutlineTextMetricsA
PolyBezier
GetEnhMetaFileDescriptionA
Ellipse
GetTextFaceA
FrameRgn
SelectPalette
EndPage
SetWindowOrgEx
SetTextColor
CopyMetaFileA
msvcrt
_exit
_XcptFilter
exit
_strnicmp
_fileno
_tell
_getcwd
srand
_beginthreadex
_mbsnbicmp
vfwprintf
strtol
fopen
_wtoi
getc
_lseek
_read
putc
remove
_isatty
rand
islower
_ismbcspace
_mbsnbcmp
_errno
bsearch
_chdrive
vswprintf
fgetwc
_getch
floor
_close
atoi
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
rename
isspace
fgetc
_vsnprintf
_dup
_wstrdate
fgetws
_wtoi64
__doserrno
strpbrk
wcsncat
_mbsrchr
_wcsdup
_spawnv
free
ungetc
sscanf
isupper
_iob
Sections
.text Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE