Static task
static1
Behavioral task
behavioral1
Sample
204960a0c11a3f812bc74b14a7606cab2a0e6b86c9aabefa2215e96f543c9083.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
204960a0c11a3f812bc74b14a7606cab2a0e6b86c9aabefa2215e96f543c9083.exe
Resource
win10v2004-20221111-en
General
-
Target
204960a0c11a3f812bc74b14a7606cab2a0e6b86c9aabefa2215e96f543c9083
-
Size
84KB
-
MD5
b7e261c4494c9b0025847e0dd7b0c814
-
SHA1
4a14247622de7e99c5e214463016b5d4b4a82fb3
-
SHA256
204960a0c11a3f812bc74b14a7606cab2a0e6b86c9aabefa2215e96f543c9083
-
SHA512
5bde425e96a6ec34f5def4827023ee2566b2bbcf519f60139ac1ac493c28664ff4db6a83015c82060a90d2c5fa679fc0670c708f818dba100b1d63f5782495c4
-
SSDEEP
1536:sAzC6NOhVwsHi8t8M1KcLaoaEcu5ebweaB5dpky+F:NNNOhxDmM1zuoaEZ8bw9Bnun
Malware Config
Signatures
Files
-
204960a0c11a3f812bc74b14a7606cab2a0e6b86c9aabefa2215e96f543c9083.exe windows x86
ae7dbb3a9cd4ec910f8832698ce34e89
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLangID
CreateThread
CloseHandle
Sleep
GetLastError
GetProcAddress
LoadLibraryA
GetPrivateProfileSectionA
GetPrivateProfileStringA
DeleteFileA
CopyFileA
SetLastError
LocalAlloc
LocalFree
GetVersion
GetSystemDirectoryA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
HeapReAlloc
VirtualAlloc
HeapAlloc
SetFilePointer
GetTimeZoneInformation
GetStringTypeW
GetCurrentDirectoryA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetOEMCP
SetEnvironmentVariableA
GetACP
GetCPInfo
ExitProcess
GetCommandLineA
GetStartupInfoA
GetWindowsDirectoryA
GetStringTypeA
lstrlenA
FindFirstFileA
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleHandleA
user32
UpdateWindow
CharUpperA
IsDlgButtonChecked
EnableWindow
FindWindowExA
EnumChildWindows
GetWindowTextA
SendDlgItemMessageA
SetDlgItemTextA
MessageBoxA
DefWindowProcA
GetDlgItem
ShowWindow
LoadIconA
SendMessageA
EndDialog
DialogBoxParamA
setupapi
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoA
SetupDiGetDriverInfoDetailA
SetupDiDestroyDriverInfoList
SetupDefaultQueueCallbackA
SetupOpenInfFileA
SetupDiGetActualSectionToInstallA
SetupOpenFileQueue
SetupInitDefaultQueueCallbackEx
SetupInstallFilesFromInfSectionA
SetupCommitFileQueueA
SetupCloseFileQueue
SetupCloseInfFile
SetupTermDefaultQueueCallback
SetupCopyOEMInfA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiSetDeviceRegistryPropertyA
cfgmgr32
CM_Reenumerate_DevNode
CM_Locate_DevNodeA
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
mpyhxee Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE