Static task
static1
Behavioral task
behavioral1
Sample
dfc271ceb4a78c32a15ffc022e06ed4b0555471bcafdec2c649effa24b43a1ca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dfc271ceb4a78c32a15ffc022e06ed4b0555471bcafdec2c649effa24b43a1ca.exe
Resource
win10v2004-20220812-en
General
-
Target
dfc271ceb4a78c32a15ffc022e06ed4b0555471bcafdec2c649effa24b43a1ca
-
Size
209KB
-
MD5
052e35473497e212e593b1c7cc5d6030
-
SHA1
97e7c8a8c8b2246bc33aa12cf42ea896351e1320
-
SHA256
dfc271ceb4a78c32a15ffc022e06ed4b0555471bcafdec2c649effa24b43a1ca
-
SHA512
5e05dd1758399f015d84f7d836b4b81364a297bd66fd51ee5bfd6fd87ccb4ce3ebe3d1fc9304fc0de082b1fbfc644b1417bc97086bd0ffab8da6fa6a24fbd7e8
-
SSDEEP
6144:2yrit7/a7D785czWMESwua4YaJ9xd4rKZUtFqEdzuXtQa5qzUnd1:2KE/aAmrLrmaJ9xdQKut1dzutqzMd1
Malware Config
Signatures
Files
-
dfc271ceb4a78c32a15ffc022e06ed4b0555471bcafdec2c649effa24b43a1ca.exe windows x86
3ee8bdcfb8e8788df30ece1af7160c52
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClientRect
SetDlgItemTextW
GetWindowRect
GetDlgItem
DestroyWindow
DispatchMessageW
TranslateMessage
SetCursor
InvalidateRect
LoadCursorW
IsRectEmpty
GetDlgItemInt
IsWindowVisible
ClientToScreen
EnableWindow
GetWindowLongW
CheckRadioButton
MoveWindow
GetDesktopWindow
ReleaseDC
CheckDlgButton
DefWindowProcW
GetDC
PeekMessageW
IsWindow
LoadStringW
SetDlgItemInt
ShowWindow
SendMessageW
kernel32
lstrcpynW
IsBadWritePtr
GetPrivateProfileStringW
GlobalHandle
LeaveCriticalSection
DeleteCriticalSection
lstrlenA
GetTickCount
GetSystemInfo
GetFullPathNameW
CreateFileW
ReadFile
GetCurrentProcessId
InterlockedExchange
GlobalLock
SetUnhandledExceptionFilter
SetEndOfFile
lstrcmpW
HeapFree
GetLastError
GetCurrentProcess
WriteFile
FreeLibrary
InterlockedIncrement
GetVersionExW
WaitForMultipleObjects
lstrlenW
GetModuleFileNameA
SetEvent
GetProcessHeap
GetSystemTimeAsFileTime
WideCharToMultiByte
QueryPerformanceCounter
WaitForSingleObject
InterlockedDecrement
GetProfileIntA
MulDiv
VirtualFree
HeapAlloc
IsBadReadPtr
CreateThread
GetQueuedCompletionStatus
IsBadCodePtr
CreateEventW
GlobalUnlock
lstrcmpiW
lstrcpyA
LoadLibraryW
EnterCriticalSection
GetEnvironmentStringsW
ResetEvent
MultiByteToWideChar
GetThreadPriority
GlobalFree
GetDiskFreeSpaceW
GetCurrentThread
InitializeCriticalSection
SetFilePointer
lstrcpyW
GetFileSize
GlobalAlloc
GetACP
GlobalMemoryStatus
GetFileAttributesW
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ