Static task
static1
Behavioral task
behavioral1
Sample
2702603e8779e8d3d9866920eecd2f4dabeace18ac04e2badfada7370bf39176.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2702603e8779e8d3d9866920eecd2f4dabeace18ac04e2badfada7370bf39176.exe
Resource
win10v2004-20220901-en
General
-
Target
2702603e8779e8d3d9866920eecd2f4dabeace18ac04e2badfada7370bf39176
-
Size
155KB
-
MD5
5ac4ac1575ba011ae3db29e3792f1360
-
SHA1
cab3069867053bc0071abd2f8b4961f7b0a808ec
-
SHA256
2702603e8779e8d3d9866920eecd2f4dabeace18ac04e2badfada7370bf39176
-
SHA512
d7fb982fff6a76509405530a69ec54039f089400ad4b3d2bbb2dda2852c6ed3616109fff2c0bf78319ac849b36cf919bf33884d8d99ae447e41c0b5af1cb5e1e
-
SSDEEP
3072:WfDACBOMSFK+yjqjIwJoYAiRTM4aaqHWJMJqjB:Wf0MEYjqjIYCaqqRjB
Malware Config
Signatures
Files
-
2702603e8779e8d3d9866920eecd2f4dabeace18ac04e2badfada7370bf39176.exe windows x86
14fe7c32635e0d54d45fb86b020a5f8c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RemoveMenu
MessageBoxW
SystemParametersInfoW
GetCapture
EnumWindows
SetMenu
IsZoomed
ModifyMenuA
GetWindowLongW
DialogBoxParamW
KillTimer
wvsprintfW
CreateMenu
LoadBitmapW
CharPrevA
OemToCharBuffA
IsCharLowerA
EndPaint
SetParent
ScrollWindowEx
IsCharAlphaNumericA
GetTopWindow
GetCursorPos
MapDialogRect
NotifyWinEvent
DefFrameProcA
GetNextDlgTabItem
IsWindowUnicode
GetUserObjectInformationA
ole32
OleFlushClipboard
CreateDataAdviseHolder
WriteClassStg
advapi32
RegCreateKeyExW
gdi32
OffsetRgn
GetCharWidthW
DeleteObject
ResetDCW
CreateHalftonePalette
GetRasterizerCaps
StartDocW
GetClipBox
SetMiterLimit
PtInRegion
SetStretchBltMode
SelectClipRgn
SetBoundsRect
PlgBlt
GetSystemPaletteUse
CombineRgn
CreateBrushIndirect
kernel32
GetACP
GetCPInfo
LoadLibraryA
GetOEMCP
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
IsValidCodePage
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
lstrcpyW
GetStdHandle
FlushFileBuffers
SetSystemTimeAdjustment
GetVersion
GetProcessTimes
SetPriorityClass
GetTapeParameters
GetLastError
OpenProcess
CancelWaitableTimer
PeekNamedPipe
GetDiskFreeSpaceA
GetSystemDirectoryW
GetOverlappedResult
SetThreadLocale
ReadProcessMemory
CreateDirectoryA
SearchPathA
GlobalFlags
lstrcmpA
CreateEventW
DeleteFileW
HeapAlloc
GetCommandLineA
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetModuleFileNameA
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ