Static task
static1
Behavioral task
behavioral1
Sample
1121fcdb68d636e7ab9345e972be515a5a1d2ba4a334cf071a7df916b81d9986.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1121fcdb68d636e7ab9345e972be515a5a1d2ba4a334cf071a7df916b81d9986.exe
Resource
win10v2004-20220901-en
General
-
Target
1121fcdb68d636e7ab9345e972be515a5a1d2ba4a334cf071a7df916b81d9986
-
Size
614KB
-
MD5
d21b641c007ca2cf89fa220fcc69b95f
-
SHA1
3eb0deedfc0cef457a5b106b98e4f0c5bd7615e6
-
SHA256
1121fcdb68d636e7ab9345e972be515a5a1d2ba4a334cf071a7df916b81d9986
-
SHA512
b369f0b241121a9333bbb319461c9c61d675e79a4e40adf0f4b7e085b2eadafdabde9215b7bd1c2e030a6e49d9dfc0aaceab8d2842c328902c0cedbd69fc1ee0
-
SSDEEP
12288:WZLwrTd+z4fGp0OfBofQ1iX/math/rgYdB4mklf3Ys6Mcw9LhrxV+IVagH7CgZP:WZLqM4fh+AlBShf3R6E9N9VxCgp
Malware Config
Signatures
Files
-
1121fcdb68d636e7ab9345e972be515a5a1d2ba4a334cf071a7df916b81d9986.exe windows x86
5a36a1f8d2ecf51b960e32d735e9ca2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
kernel32
GetExitCodeThread
WaitForSingleObject
CreateThread
GetLastError
SystemTimeToFileTime
GetLocalTime
GetFileAttributesW
CreateDirectoryW
VirtualFree
GetModuleHandleW
GetProcAddress
LoadLibraryA
LockResource
LoadResource
SizeofResource
FindResourceExA
GetSystemDefaultLCID
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
MultiByteToWideChar
GetLocaleInfoW
lstrlenA
lstrcmpiW
GetEnvironmentVariableW
GlobalMemoryStatusEx
VirtualAlloc
WideCharToMultiByte
ExpandEnvironmentStringsW
lstrcmpW
RemoveDirectoryW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
CompareFileTime
GetSystemTimeAsFileTime
Sleep
GetTempPathW
SetEnvironmentVariableW
CloseHandle
WriteFile
CreateFileW
GetDriveTypeW
SetCurrentDirectoryW
GetExitCodeProcess
GetModuleFileNameW
GetCommandLineW
GetVersionExW
CreateEventW
SetEvent
ResetEvent
InitializeCriticalSection
MulDiv
TerminateThread
ResumeThread
SuspendThread
LocalFree
lstrcpyW
FormatMessageW
GetSystemDirectoryW
DeleteCriticalSection
GetFileSize
SetFilePointer
ReadFile
SetFileTime
SetEndOfFile
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
GetModuleHandleA
SetLastError
SetFileAttributesW
GetDiskFreeSpaceExW
lstrcatW
ExitProcess
lstrlenW
GetStartupInfoA
user32
EndDialog
CharUpperW
SetTimer
DestroyWindow
KillTimer
DispatchMessageW
wsprintfW
GetSystemMenu
EnableMenuItem
IsWindow
EnableWindow
MessageBeep
LoadIconW
LoadImageW
wvsprintfW
DefWindowProcW
CallWindowProcW
GetWindowDC
DrawIconEx
DialogBoxIndirectParamW
GetWindow
ClientToScreen
GetDC
DrawTextW
ReleaseDC
ShowWindow
SetWindowPos
SystemParametersInfoW
SetFocus
GetWindowLongW
SetWindowLongW
GetSystemMetrics
GetClientRect
GetDlgItem
GetKeyState
wsprintfA
MessageBoxA
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
GetMessageW
GetWindowRect
ScreenToClient
CreateWindowExW
SendMessageW
GetParent
gdi32
CreateFontIndirectW
SelectObject
GetDeviceCaps
GetObjectW
DeleteObject
shell32
SHGetFileInfoW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
SHGetSpecialFolderPathW
SHGetMalloc
ole32
CoCreateInstance
CoInitialize
oleaut32
VariantClear
SysAllocString
msvcrt
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
_CxxThrowException
_beginthreadex
_EH_prolog
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
memset
_wcsnicmp
memcpy
malloc
memmove
_wtol
free
memcmp
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
_controlfp
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ