Static task
static1
Behavioral task
behavioral1
Sample
27c1a31c9896a8f9fd6e62265934dcba3d6842c7b45932d1dad77ebe6701a73b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
27c1a31c9896a8f9fd6e62265934dcba3d6842c7b45932d1dad77ebe6701a73b.exe
Resource
win10v2004-20220901-en
General
-
Target
27c1a31c9896a8f9fd6e62265934dcba3d6842c7b45932d1dad77ebe6701a73b
-
Size
71KB
-
MD5
df69e33ee98cdee821d74675e47e803f
-
SHA1
33ce362905230850e055693a2b35893f39dff425
-
SHA256
27c1a31c9896a8f9fd6e62265934dcba3d6842c7b45932d1dad77ebe6701a73b
-
SHA512
212a05f95f0b7aca9acbde7aa46c4c9abc1f848cc21faf9d6833ce209cfdbe2e97996f23d30f06a64d88bacb30cefff1f6ae6997e69e9c10efcd7c425f125f21
-
SSDEEP
768:h8Doh8QaDHWw25Er7GOZYpvCfLJ7Uz1nC3rjN7uuGeDKLefMYyhDFrR3Pw8S4Q66:yqwUEkpKVMynN/FKC0ZDFtfSFCZjG
Malware Config
Signatures
Files
-
27c1a31c9896a8f9fd6e62265934dcba3d6842c7b45932d1dad77ebe6701a73b.exe windows x86
3ec6d7a201f6b9683dd1283f9a378e7a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CompareFileTime
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FreeLibrary
GetLastError
GetSystemTime
GetSystemTimeAsFileTime
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsValidCodePage
IsValidLocale
LeaveCriticalSection
LocalAlloc
LocalFree
QueryPerformanceCounter
QueryPerformanceFrequency
SetEvent
SetUnhandledExceptionFilter
SystemTimeToFileTime
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
lstrcpyA
lstrcpynA
lstrlenA
lstrlenW
user32
IsWindow
RegisterShellHookWindow
ole32
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoUninitialize
SetErrorInfo
oleaut32
LoadRegTypeLib
LoadTypeLib
RegisterTypeLib
SysAllocString
SysAllocStringLen
SysFreeString
VariantClear
wininet
CommitUrlCacheEntryW
CreateUrlCacheEntryW
HttpOpenRequestA
InternetOpenUrlW
SetUrlCacheEntryInfoW
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 255B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ