Static task
static1
Behavioral task
behavioral1
Sample
2a206135fdd3d9038aee75676523daf1714ea705b0418478131d512fea2f136d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2a206135fdd3d9038aee75676523daf1714ea705b0418478131d512fea2f136d.exe
Resource
win10v2004-20220812-en
General
-
Target
2a206135fdd3d9038aee75676523daf1714ea705b0418478131d512fea2f136d
-
Size
734KB
-
MD5
5c43f17d0ca03ae7390ec7c955939cd3
-
SHA1
5847e4a038c845bffff0e06906abf2f1ad6dd80a
-
SHA256
2a206135fdd3d9038aee75676523daf1714ea705b0418478131d512fea2f136d
-
SHA512
41ca9b9cf593cdf4e99932285a707822ad16f510294ad242b4c0579029226caf8ad6718e68ee4dff184cb6846e444dfd3f15f6ac73e72cc51baaec68f3687852
-
SSDEEP
12288:PIKxiosSuDx/L4X3Jf5ZpNJ9dq9B9Ek6F2xooHn/se4fMGsKVDB/Ddc:H4osFcZBZfsEk+2xX/TGHVdLm
Malware Config
Signatures
Files
-
2a206135fdd3d9038aee75676523daf1714ea705b0418478131d512fea2f136d.exe windows x86
d1977a61ebf030c0aa0f06d0c3cbbe8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SelectObject
CreateCompatibleDC
SetTextColor
GetStockObject
GetDeviceCaps
SetBkColor
CreateSolidBrush
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
kernel32
GetStdHandle
GetConsoleOutputCP
GetCommandLineA
GetVersion
GetCurrentThread
GetTickCount
GetModuleHandleA
GetCurrentProcessId
GetLastError
GetCurrentThreadId
ExitProcess
HeapAlloc
GetProcessHeap
GetOEMCP
VirtualAlloc
VirtualFree
HeapCreate
IsValidCodePage
SizeofResource
GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
MapViewOfFile
RaiseException
HeapSize
GetCPInfo
GetCommandLineW
LockResource
GetEnvironmentStrings
FileTimeToLocalFileTime
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
LCMapStringW
InterlockedIncrement
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
Sleep
CreateEventW
GlobalLock
FindFirstFileW
CompareStringA
FindFirstFileA
CompareStringW
GetProcAddress
DeleteFileW
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
QueryPerformanceCounter
SetEvent
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
LeaveCriticalSection
GetLocaleInfoA
SetEndOfFile
GlobalAlloc
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
SetUnhandledExceptionFilter
CreateThread
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
IsDebuggerPresent
GetModuleFileNameW
InterlockedDecrement
SetLastError
OutputDebugStringA
FormatMessageA
TlsGetValue
FindClose
LoadResource
InitializeCriticalSection
GetExitCodeProcess
FormatMessageW
LocalFree
FreeLibrary
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
WideCharToMultiByte
GetTempPathA
SetStdHandle
FreeEnvironmentStringsW
LocalAlloc
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetLocalTime
HeapDestroy
FindNextFileA
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
user32
DefWindowProcA
PostQuitMessage
IsWindow
GetFocus
CallWindowProcA
GetClientRect
SendMessageA
SystemParametersInfoA
GetSysColor
MessageBoxA
SetDlgItemTextA
GetDesktopWindow
LoadCursorA
ScreenToClient
SetWindowTextA
SetWindowLongA
GetWindowRect
GetSystemMetrics
BeginPaint
SetFocus
DispatchMessageA
FillRect
SetTimer
GetSubMenu
EnableMenuItem
SetWindowPos
ShowWindow
GetParent
DestroyWindow
GetDC
PeekMessageA
EndPaint
Sections
.text Size: 701KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ