Static task
static1
Behavioral task
behavioral1
Sample
b91689fcf0b0c7127e0d4d706685727a8ba7c753ba72149b06e418974bf186b9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b91689fcf0b0c7127e0d4d706685727a8ba7c753ba72149b06e418974bf186b9.exe
Resource
win10v2004-20220812-en
General
-
Target
b91689fcf0b0c7127e0d4d706685727a8ba7c753ba72149b06e418974bf186b9
-
Size
120KB
-
MD5
0179ceb3242d9f979d7002e57d7b3399
-
SHA1
e5d673cbcc42eca76ac79a6d6ac962145dab1db4
-
SHA256
b91689fcf0b0c7127e0d4d706685727a8ba7c753ba72149b06e418974bf186b9
-
SHA512
a3bd79493577d956dfcc2d70e876249588d5a53e2dc78eaa483fecc6c7cff2736b6a93f05fb89fc8538f78f7f5367463487d6a26b076c730ad80ae6e4bc46843
-
SSDEEP
1536:5YctbVwMgfzSmxwX1OOEKj5yGcLeuTf+Edcxi5nQlxSwlFcPL5YRPuAUCo/1F:ZBgHwX1Oaju7/dc91GLGGsC1
Malware Config
Signatures
Files
-
b91689fcf0b0c7127e0d4d706685727a8ba7c753ba72149b06e418974bf186b9.exe windows x86
e94027f4e41865d497f1f4fb5206dcb1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
CreateThread
OpenFileMappingA
FindFirstFileA
GetFileSize
GetCPInfo
ReadConsoleW
CopyFileExA
CopyFileExW
WriteFile
GetStdHandle
Sleep
GetFileTime
GlobalFree
ReadFile
advapi32
RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExA
RegEnumValueW
RegQueryValueExW
RegOpenKeyA
RegCreateKeyExW
RegFlushKey
RegDeleteValueA
RegEnumKeyExW
RegEnumKeyA
RegReplaceKeyW
RegEnumKeyExA
RegQueryValueExW
RegEnumKeyA
RegQueryValueW
RegCreateKeyW
RegDeleteValueA
RegOpenKeyExW
RegCreateKeyExA
RegEnumKeyExW
RegOpenKeyA
RegDeleteKeyA
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegEnumKeyA
RegCreateKeyExA
RegOpenKeyW
RegOpenKeyExW
RegReplaceKeyA
RegEnumValueW
RegDeleteKeyW
RegReplaceKeyW
RegQueryInfoKeyW
RegOpenKeyA
RegDeleteValueW
RegCreateKeyW
RegLoadKeyA
RegFlushKey
RegQueryValueA
RegQueryValueA
RegDeleteKeyA
RegCreateKeyExW
RegFlushKey
RegEnumKeyW
RegQueryValueExW
RegEnumValueW
RegDeleteValueW
RegQueryInfoKeyA
RegReplaceKeyA
RegQueryValueExA
RegLoadKeyA
RegCreateKeyExA
RegDeleteValueA
RegEnumKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegFlushKey
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExA
RegLoadKeyW
RegQueryValueW
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyA
RegCreateKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueA
RegEnumKeyExW
RegOpenKeyExW
comctl32
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Destroy
ImageList_AddIcon
ImageList_Create
ImageList_AddMasked
ImageList_Remove
ImageList_DrawIndirect
ImageList_DrawEx
ImageList_LoadImageA
ImageList_DragLeave
ImageList_LoadImage
user32
DrawIcon
InsertMenuA
AppendMenuA
LoadCursorA
AlignRects
CopyImage
CloseWindow
GetWindowTextA
DialogBoxParamW
GetWindowTextLengthA
GetMenu
CalcMenuBar
BlockInput
CreateIcon
GetCursor
DrawTextA
DialogBoxParamA
BlockInput
LoadMenuA
CopyRect
GetFocus
IsWindow
DrawIcon
GetMenu
AlignRects
GetWindowTextLengthA
EndDialog
GetDlgItem
LoadCursorA
DrawIcon
InsertMenuA
CopyIcon
AlignRects
LoadCursorA
CopyImage
GetFocus
GetWindowTextLengthA
DrawTextA
GetMenu
AppendMenuA
GetDC
GetWindowTextA
GetDlgItem
Sections
.TEXt Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.iTEXt Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.EData Size: 8KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bSs Size: 4KB - Virtual size: 115B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RdATa Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idaTa Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rSrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ