Static task
static1
Behavioral task
behavioral1
Sample
ba816df6f7d1db48e508322349c9838b6c4ed0d871027a81fa3830a51937d544.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
ba816df6f7d1db48e508322349c9838b6c4ed0d871027a81fa3830a51937d544.exe
Resource
win10v2004-20220414-en
General
-
Target
ba816df6f7d1db48e508322349c9838b6c4ed0d871027a81fa3830a51937d544
-
Size
168KB
-
MD5
b2b8d5d6dd1b3c21572279ee3aa40e34
-
SHA1
15d0c1aa151d612f56f8afcc2c914e49802dd9d8
-
SHA256
ba816df6f7d1db48e508322349c9838b6c4ed0d871027a81fa3830a51937d544
-
SHA512
a04ed5997d20ad97ef972d8256672246d48adbc0e5d943e06b7adbe366cde2df107042815504f8b5f34c1345a84ae8613444c263779ec16f8a8c002e2b13d60d
-
SSDEEP
1536:l0G5Em70r2vW0ZXhiQX7UwgzKixTk0nSOjMJ8Ab21KXNPLmuKmVY3xublLgc9/OS:bF0r2JXhb7t2ZVSzHC1K9PtKm2upLhX
Malware Config
Signatures
Files
-
ba816df6f7d1db48e508322349c9838b6c4ed0d871027a81fa3830a51937d544.exe windows x86
a732cafa44783f5c8650362f1edf3711
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateMenu
FillRect
CharNextA
GetDlgItemTextW
CreateDialogIndirectParamA
PostMessageA
IsChild
ReleaseDC
CharPrevW
CopyIcon
GetKeyState
TranslateMessage
ClientToScreen
GetKeyboardState
GetClassInfoW
DialogBoxIndirectParamW
ReuseDDElParam
InsertMenuA
DrawStateW
MessageBeep
DispatchMessageA
EnableScrollBar
IsDlgButtonChecked
CreateWindowExW
PtInRect
OffsetRect
GetDC
GetClipboardFormatNameW
mouse_event
SendInput
DdeConnect
ValidateRect
SetClipboardData
GetCapture
SetWindowPlacement
DefFrameProcW
ScrollWindow
DrawTextExA
PostThreadMessageA
CheckMenuItem
KillTimer
TranslateMDISysAccel
SetForegroundWindow
GetProcessWindowStation
LoadStringW
wininet
InternetCombineUrlW
GetUrlCacheEntryInfoExW
FtpGetCurrentDirectoryA
InternetAutodialHangup
FtpSetCurrentDirectoryA
FindNextUrlCacheEntryExA
InternetGetLastResponseInfoW
GopherOpenFileA
CommitUrlCacheEntryW
kernel32
VirtualQuery
CopyFileA
CreateDirectoryA
GetFileAttributesA
GetExitCodeProcess
GetProcessHeap
GetWindowsDirectoryA
DisconnectNamedPipe
GetFullPathNameA
LZCopy
Sections
.text Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ