Static task
static1
Behavioral task
behavioral1
Sample
eff13df350c87379b85e375ffe25b9d134bb75e134f45c985fa16c728ac09187.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eff13df350c87379b85e375ffe25b9d134bb75e134f45c985fa16c728ac09187.exe
Resource
win10v2004-20220812-en
General
-
Target
eff13df350c87379b85e375ffe25b9d134bb75e134f45c985fa16c728ac09187
-
Size
203KB
-
MD5
a186892e1df27ca6a34df39abf885501
-
SHA1
1eb65506612fbc5377c164631bf99c657bede0c9
-
SHA256
eff13df350c87379b85e375ffe25b9d134bb75e134f45c985fa16c728ac09187
-
SHA512
56590260bdca9d5b30f8b5e297e5c852bb0471a8d3b87743d5621b7279f49361eae49df5f4868d0c6ba628305f7724d72d63d0531ca55aba629663adb99dca82
-
SSDEEP
3072:7ER5Nb87yd6SuK1JvXDhAqZtLHaEBbaYsPj7:7EJ2K1JvNheEB5sb
Malware Config
Signatures
Files
-
eff13df350c87379b85e375ffe25b9d134bb75e134f45c985fa16c728ac09187.exe windows x86
136db80e703cd4e800a7bb0c71c67b71
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
IsIconic
SetCapture
FillRect
SetWindowsHookExA
CharNextA
SetActiveWindow
PeekMessageW
IsDialogMessageA
GetWindowLongW
GetKeyboardLayoutNameA
PtInRect
EnumWindows
GetClassInfoA
DefFrameProcA
GetMenu
RemoveMenu
SetParent
OffsetRect
GetWindowLongA
GetSysColor
MessageBeep
IsWindow
OemToCharA
MessageBoxA
EndPaint
GetWindowThreadProcessId
GetWindow
GetKeyboardState
RegisterWindowMessageA
GetClientRect
GetDlgItem
UnhookWindowsHookEx
InsertMenuA
GetKeyNameTextA
GetSystemMetrics
SetForegroundWindow
CheckMenuItem
SetWindowPlacement
GetMenuItemCount
SetScrollPos
DrawFrameControl
GetKeyboardLayout
GetWindowDC
ReleaseCapture
ScreenToClient
GetClipboardData
SendMessageW
SetWindowTextA
SetRect
GetDesktopWindow
ActivateKeyboardLayout
CloseClipboard
GetMenuStringA
InflateRect
TrackPopupMenu
DefWindowProcA
DestroyMenu
DrawEdge
SetFocus
CharUpperBuffA
SetWindowPos
SendMessageA
DrawAnimatedRects
LoadCursorA
GetClassLongA
DestroyCursor
CharLowerBuffA
LoadIconA
DefMDIChildProcA
SetScrollInfo
GetKeyboardLayoutList
kernel32
VirtualAllocEx
VirtualAlloc
LocalAlloc
GetCommandLineA
GetModuleHandleA
ExitProcess
GlobalAlloc
GetProcAddress
LoadLibraryA
ExitThread
IsBadReadPtr
GetLastError
GetVersionExA
comctl32
ImageList_Remove
ImageList_Create
ImageList_DrawEx
ImageList_Destroy
ImageList_GetBkColor
ImageList_DragShowNolock
ImageList_Draw
ImageList_Add
gdi32
GetPaletteEntries
GetDIBits
GetDIBColorTable
CreatePenIndirect
SetBkMode
GetObjectA
CreatePalette
LineTo
GetPixel
oleaut32
SafeArrayPtrOfIndex
RegisterTypeLib
SafeArrayGetElement
SysStringLen
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC6 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC9 Size: 1024B - Virtual size: 950B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC5 Size: 512B - Virtual size: 463B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC1 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC8 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ