Static task
static1
Behavioral task
behavioral1
Sample
f0b01b5e7c32bdba752ffc3ecc3e1c459ffe46b304d5c0e18854315ecac8762d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f0b01b5e7c32bdba752ffc3ecc3e1c459ffe46b304d5c0e18854315ecac8762d.exe
Resource
win10v2004-20220812-en
General
-
Target
f0b01b5e7c32bdba752ffc3ecc3e1c459ffe46b304d5c0e18854315ecac8762d
-
Size
801KB
-
MD5
6c2e81acaa5b68d20c4518115ef2db50
-
SHA1
157cd0d6970f423b7a791b5d3fe34522e6de6efd
-
SHA256
f0b01b5e7c32bdba752ffc3ecc3e1c459ffe46b304d5c0e18854315ecac8762d
-
SHA512
e2882c1e8f43accda6a31e521353ec96be31bc9f9230a327869cf34c9d7ed08791b1cee0bbdad90a38d9fa770035b1ce9e381d2daceb8b71212c376778b42193
-
SSDEEP
12288:WIDPFfH4nSDGXN3HcbQueOqk2FIaHgv1HqdWZm6jORchUmaEvlUpSZA15WS77:WIDP5HQjNppWHhW5EvlSSq1
Malware Config
Signatures
Files
-
f0b01b5e7c32bdba752ffc3ecc3e1c459ffe46b304d5c0e18854315ecac8762d.exe windows x86
fd5796b2b9231aef3d6ab37d8f18f8f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileApisToANSI
GetTapeParameters
VirtualUnlock
GetConsoleScreenBufferInfo
GetCurrentProcess
GetTickCount
FreeResource
PurgeComm
Heap32Next
CommConfigDialogA
GetFileAttributesW
MulDiv
HeapReAlloc
GetCompressedFileSizeA
QueryPerformanceCounter
GetCurrentProcessId
WritePrivateProfileSectionA
OpenJobObjectW
GetNamedPipeHandleStateA
GetCurrentThreadId
GetUserDefaultUILanguage
EnumSystemLocalesW
GetSystemTime
GlobalWire
GetSystemDefaultLCID
OpenEventW
GetCommandLineA
GlobalDeleteAtom
user32
IsDialogMessageW
GetDialogBaseUnits
ChangeDisplaySettingsW
GetWindowRect
GetActiveWindow
GetMessagePos
ScrollWindowEx
MonitorFromRect
GetWindowRect
GetActiveWindow
DdeQueryConvInfo
GetFocus
GetDesktopWindow
VkKeyScanExW
GetKeyState
GetSysColor
GetDlgItem
GetDlgItem
SetActiveWindow
LoadIconA
MapDialogRect
SetWinEventHook
Sections
.dule Size: 211KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dule Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dule Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dule Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dule Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dule Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dule Size: 556KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE