Static task
static1
Behavioral task
behavioral1
Sample
7a9b65330e03cfb33e65e248b908b40449b35e4981fd22326daaf9e5c3461de5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7a9b65330e03cfb33e65e248b908b40449b35e4981fd22326daaf9e5c3461de5.exe
Resource
win10v2004-20220901-en
General
-
Target
7a9b65330e03cfb33e65e248b908b40449b35e4981fd22326daaf9e5c3461de5
-
Size
136KB
-
MD5
091302e12183e499f52d957e722ac59f
-
SHA1
779ee82c74327ff40ac46ed76af6d98aebeff49b
-
SHA256
7a9b65330e03cfb33e65e248b908b40449b35e4981fd22326daaf9e5c3461de5
-
SHA512
a14c42283667fae1b325cdb5a8b0cc5662feb4cb186dc1ba178dfb91bf47e895605bb4115564a3f8f63319232237b03076d0d68b67a267a54bf7d55c9c59e38a
-
SSDEEP
3072:RiIY1M+DG2xT90ka3fIrpky0J8NhprqS3kozE2bLx4JMBmptOJLX5o8E:RISrUyy0cLkoz7xI2mpmSP
Malware Config
Signatures
Files
-
7a9b65330e03cfb33e65e248b908b40449b35e4981fd22326daaf9e5c3461de5.exe windows x86
b35f96163b8ef588b3760deed7498ce3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetModuleHandleA
LocalAlloc
LocalFree
GetModuleHandleW
GetCurrentThreadId
GetModuleHandleW
GetModuleFileNameA
GetCommandLineA
GetModuleHandleW
FormatMessageW
SetEvent
QueryPerformanceCounter
GetCommandLineW
LocalAlloc
GetCommandLineW
GetModuleFileNameA
VirtualFree
GetCurrentThreadId
ntdll
NtAllocateVirtualMemory
gdi32
CreateCompatibleDC
SelectObject
MoveToEx
GetDeviceCaps
PatBlt
GetStockObject
CreateCompatibleDC
DeleteDC
LineTo
MoveToEx
GetObjectW
SetTextColor
CreateCompatibleBitmap
SelectObject
user32
DestroyWindow
SetTimer
GetDC
GetDlgItem
GetMessageW
CreateWindowExW
GetDlgItem
PostMessageW
GetWindowRect
ReleaseDC
GetWindowRect
DestroyWindow
GetDC
GetDC
PostMessageW
Sections
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ