Static task
static1
Behavioral task
behavioral1
Sample
991c2400e44d5811bccd2a0279069377d1f32f186abc85997801c861dbf9523c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
991c2400e44d5811bccd2a0279069377d1f32f186abc85997801c861dbf9523c.exe
Resource
win10v2004-20220812-en
General
-
Target
991c2400e44d5811bccd2a0279069377d1f32f186abc85997801c861dbf9523c
-
Size
111KB
-
MD5
6ba4a023dbbad614ab54a64628bbd7ac
-
SHA1
9095c0e76352948bc64abe5409896b5f692fe8ca
-
SHA256
991c2400e44d5811bccd2a0279069377d1f32f186abc85997801c861dbf9523c
-
SHA512
bb2587a12ffb9cd12aece9112dc98cac356b97807db71b4ccb447fd73744fc1dea002c803d9cd41b57c9a50c80103b40132dfead00f2b4d8ba57c4fc872c8773
-
SSDEEP
3072:OdKtMOFMdm2tg8jINVtzkC5eJtThj4kcoBl:OgtxOmN8jmVtzk2ez4UB
Malware Config
Signatures
Files
-
991c2400e44d5811bccd2a0279069377d1f32f186abc85997801c861dbf9523c.exe windows x86
94c8ce974fd8b40c615a69d50108c073
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
CreateNamedPipeA
GetLocalTime
GetCommandLineA
GetStartupInfoA
GetComputerNameExW
VirtualAllocEx
GetTempPathA
GetModuleFileNameW
TerminateThread
_lopen
ChangeTimerQueueTimer
_lcreat
HeapFree
GetSystemDefaultLCID
HeapAlloc
SetEnvironmentVariableA
FormatMessageA
lstrcmpW
DosDateTimeToFileTime
WaitForMultipleObjects
GetCurrencyFormatA
HeapCreate
CreateActCtxA
lstrcmpiA
user32
KillTimer
IsCharLowerA
SetWindowTextA
GetDesktopWindow
DefWindowProcA
wsprintfA
SetWindowTextW
LoadCursorA
GetSysColorBrush
BeginPaint
CharPrevExA
PeekMessageW
EnableWindow
DispatchMessageA
SetCursor
SendMessageA
IsWindow
CharPrevW
CharNextA
SetDlgItemInt
SetTimer
ShowWindow
SendMessageW
LoadIconA
GetWindowLongW
DispatchMessageW
GetClientRect
SetWindowLongW
PostMessageA
SetWindowLongA
TranslateMessageEx
PostQuitMessage
SetForegroundWindow
CreateWindowExW
IsWindow
SendDlgItemMessageA
gdi32
SetBrushOrgEx
GetTextCharsetInfo
GetStretchBltMode
UpdateColors
GetCurrentPositionEx
EnumObjects
CreateSolidBrush
RealizePalette
advapi32
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 54KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE