Static task
static1
Behavioral task
behavioral1
Sample
0761e2f7391248886502b86f1ba4d3492fc80ee344dc6534e3987fc4c232c68b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0761e2f7391248886502b86f1ba4d3492fc80ee344dc6534e3987fc4c232c68b.exe
Resource
win10v2004-20220812-en
General
-
Target
0761e2f7391248886502b86f1ba4d3492fc80ee344dc6534e3987fc4c232c68b
-
Size
696KB
-
MD5
96d2945a8a386b29684192512e01b0fe
-
SHA1
e2c3f0be1c8e34f9f78fcccb5c2d47c456f83b34
-
SHA256
0761e2f7391248886502b86f1ba4d3492fc80ee344dc6534e3987fc4c232c68b
-
SHA512
a1605cbf5143084cf97a346d161270c518c3addb641cdd49e0e374e3fc91a0659c745b1b699fc48b831a8b805facdb16e5b61311405ddd1707584be451e8c540
-
SSDEEP
12288:goon30ZMwcLL9QuCTwPGPfUUWHBQObdx6HgzHeAp0gl+ZNIxt2e9KUxxN7gxy:gX0ZM5muMLUdx6HgjeupEZNIWUr1p
Malware Config
Signatures
Files
-
0761e2f7391248886502b86f1ba4d3492fc80ee344dc6534e3987fc4c232c68b.exe windows x86
7ff663baa94ffdaf87e2da9360663c1e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetVersionExA
EnterCriticalSection
DeleteCriticalSection
FreeLibrary
VirtualProtect
GetProcAddress
CloseHandle
HeapFree
GetCurrentThreadId
ReadFile
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
GetModuleHandleW
UnhandledExceptionFilter
InterlockedDecrement
CreateThread
VirtualProtect
lstrlenA
VirtualProtect
SetLastError
GetModuleFileNameW
LoadLibraryA
lstrlenA
InterlockedExchange
GetCurrentProcess
VirtualProtect
DisableThreadLibraryCalls
UnhandledExceptionFilter
GetProcAddress
VirtualAlloc
CreateEventW
GetTickCount
InterlockedExchange
CloseHandle
CreateFileW
MultiByteToWideChar
LoadLibraryA
InterlockedDecrement
LocalAlloc
GetModuleHandleW
HeapAlloc
InterlockedExchange
GetProcAddress
CreateThread
InterlockedExchange
VirtualProtect
InterlockedIncrement
LoadLibraryA
FreeLibrary
lstrcmpiW
GetLastError
CreateFileW
GetSystemTimeAsFileTime
HeapFree
LocalAlloc
GetCurrentThreadId
GetCurrentProcess
LoadLibraryA
InterlockedCompareExchange
UnhandledExceptionFilter
MultiByteToWideChar
VirtualProtect
CreateThread
lstrlenA
InterlockedDecrement
lstrcmpiW
gdi32
SelectObject
CreateDIBSection
SelectObject
GetCurrentObject
PatBlt
Rectangle
MoveToEx
CreateDIBitmap
GetBrushOrgEx
SetBrushOrgEx
GetBkColor
SetBkMode
LineTo
GetCurrentObject
GetBrushOrgEx
GetWindowExtEx
LineTo
CreateCompatibleDC
CreateDIBSection
GetWindowOrgEx
LineTo
GetCurrentObject
SetBkMode
RoundRect
SetWindowExtEx
MoveToEx
GetCurrentObject
CreateDIBitmap
CreateFontIndirectA
CreateBitmapIndirect
CreateFontA
SetBkMode
RoundRect
StretchBlt
SetBkMode
CreateDIBitmap
GetPixel
CreateBitmapIndirect
SetTextColor
SelectObject
LineTo
CreateBitmap
CreateRectRgn
CreateBitmapIndirect
CombineRgn
GetPixel
CreateCompatibleDC
Ellipse
GetWindowOrgEx
LineTo
GetPixel
BitBlt
BitBlt
SetWindowOrgEx
MoveToEx
GetBkColor
CreateDIBitmap
PatBlt
CreateBitmapIndirect
Polygon
CreateCompatibleDC
CreateRectRgn
BitBlt
CreateBitmapIndirect
CreatePen
CombineRgn
Polygon
GetCurrentObject
SetTextColor
user32
MessageBoxW
TranslateMessage
BeginPaint
ShowWindow
SetWindowPos
PostMessageW
GetWindowLongW
GetWindowRect
PostMessageW
PostMessageW
PostMessageW
EnableWindow
KillTimer
BeginPaint
CharNextW
EndDialog
SetWindowPos
PostMessageW
GetDC
DispatchMessageW
GetSystemMetrics
SetWindowLongW
GetDC
GetWindowRect
DestroyWindow
DialogBoxParamW
EnableWindow
GetSystemMetrics
SetWindowLongW
TranslateMessage
DefWindowProcW
MessageBoxW
LoadStringW
EndDialog
CreateWindowExW
PostQuitMessage
CreateWindowExW
GetWindowLongW
CreateWindowExW
KillTimer
KillTimer
TranslateMessage
GetSysColor
SendMessageW
PostMessageW
GetSysColor
GetSysColor
BeginPaint
GetFocus
wsprintfA
SetTimer
LoadStringW
EnableWindow
SetFocus
BeginPaint
SetFocus
SetWindowTextW
GetDesktopWindow
IsDlgButtonChecked
EndDialog
SetWindowTextW
wsprintfA
SetTimer
GetClientRect
SetDlgItemTextW
SetWindowTextW
GetSystemMetrics
LoadStringW
DefWindowProcW
Sections
.text Size: 607KB - Virtual size: 976KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ