Static task
static1
Behavioral task
behavioral1
Sample
cff41b8089f9f3269ec6eea7a800fd67f139c8bea68dfceda20e4e2e60a9ebb3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cff41b8089f9f3269ec6eea7a800fd67f139c8bea68dfceda20e4e2e60a9ebb3.exe
Resource
win10v2004-20220901-en
General
-
Target
cff41b8089f9f3269ec6eea7a800fd67f139c8bea68dfceda20e4e2e60a9ebb3
-
Size
147KB
-
MD5
38b58f0a36d112993534302265bd7662
-
SHA1
8c8126d49ed0f52278fcb0ebf37a2e0bf09f43dc
-
SHA256
cff41b8089f9f3269ec6eea7a800fd67f139c8bea68dfceda20e4e2e60a9ebb3
-
SHA512
951731fa5f418875dfb3abbd413a4e63dae68ebb32ee4307e0c87d3a1a6ef025e40549069c2bd92ea9be42575d28d3d387af68ccf89c39b20ca74286de110252
-
SSDEEP
3072:bJiOOgu5iSDI9N+6ELrOqA4XiXsWKQp+6dNgP8Y:MOOVHG6Oykhg6w
Malware Config
Signatures
Files
-
cff41b8089f9f3269ec6eea7a800fd67f139c8bea68dfceda20e4e2e60a9ebb3.exe windows x86
1cc86aa7144ba857024dbb2647d715b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateIcon
GetFocus
GetWindowTextLengthA
GetDlgItem
DrawTextW
LoadMenuA
IsMenu
DialogBoxParamW
CopyRect
AppendMenuW
GetWindowTextA
LoadCursorA
GetMenu
CloseWindow
GetDC
DialogBoxParamA
GetCursor
LoadMenuA
GetWindowTextLengthA
InsertMenuA
DrawTextA
CalcMenuBar
CopyRect
AppendMenuW
LoadCursorA
IsMenu
IsWindow
DrawTextA
GetFocus
DialogBoxParamA
DrawIconEx
EndDialog
IsWindow
CopyImage
DrawTextW
CalcMenuBar
GetMenu
CreateIcon
GetDC
DialogBoxParamW
CopyIcon
CloseWindow
LoadCursorA
AppendMenuA
CopyRect
GetWindowTextLengthA
DialogBoxParamA
EndDialog
DrawTextA
DrawIconEx
LoadCursorA
LoadMenuA
AlignRects
IsMenu
CopyImage
InsertMenuA
DrawIcon
GetMenu
kernel32
CreateThread
GetUserDefaultLangID
DeleteFileW
GetLastError
CreateDirectoryA
GetFileTime
OpenFile
FindAtomA
GetCPInfo
DeleteAtom
GetConsoleOutputCP
GetConsoleMode
ExitProcess
GlobalFree
CopyFileW
GetComputerNameA
GetStdHandle
FindFirstFileA
GetCommandLineA
CreateProcessA
GetCPInfo
GetConsoleOutputCP
CreateDirectoryA
GlobalFree
DeleteAtom
GetFileSize
ExitProcess
GetCurrentThread
GetOEMCP
GetCurrentProcess
OpenFile
GetCurrentThreadId
GetComputerNameA
GlobalFree
GetFileSize
OpenFile
DeleteFileA
GetCurrentThread
DeleteAtom
GetFileTime
Sleep
GetUserDefaultLangID
CopyFileW
CreateThread
GetCurrentProcess
GetCommandLineA
FindAtomA
GetConsoleMode
DeleteFileA
GetFileSize
CreateDirectoryA
GetOEMCP
GetCurrentThread
GetCPInfo
GetCommandLineA
DeleteFileW
OpenFile
GetComputerNameA
GetCurrentThreadId
Sleep
FindAtomA
ExitThread
DeleteFileA
GetOEMCP
DeleteAtom
GetCurrentThread
GetCommandLineA
GetStdHandle
CreateProcessA
Sleep
GetFileSize
GlobalFree
GetUserDefaultLangID
GetLastError
ExitThread
CreateThread
GetCPInfo
FindFirstFileA
OpenFile
GetConsoleMode
GetOEMCP
OpenFile
CopyFileW
CreateThread
ExitThread
GetCurrentThreadId
GetFileSize
Sleep
GetStdHandle
GlobalFree
DeleteFileA
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 102KB - Virtual size: 405KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ