Static task
static1
Behavioral task
behavioral1
Sample
a7df29ea98bc74bd2f3cd1a84a9ceb852f16763896aa2c1023afc56c62fb38e2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a7df29ea98bc74bd2f3cd1a84a9ceb852f16763896aa2c1023afc56c62fb38e2.exe
Resource
win10v2004-20220812-en
General
-
Target
a7df29ea98bc74bd2f3cd1a84a9ceb852f16763896aa2c1023afc56c62fb38e2
-
Size
170KB
-
MD5
7017a3265fdc71d3ef07ba5527789833
-
SHA1
29c7a521a416f7c49a2a609a15303a5795a90907
-
SHA256
a7df29ea98bc74bd2f3cd1a84a9ceb852f16763896aa2c1023afc56c62fb38e2
-
SHA512
c0f5ec16d89f58c08c9115aba3724e612ca251466391030f6987b43d05705068f26715e4d4ed98a4c99262aeac25dee7d955210311b6775548f34f65d603a5ac
-
SSDEEP
3072:kMOUKHF36LMYcKUM0LWl8oRPvleZgQt36CDa2mz7V1kH5V3puv7FYeXqz:krHFIQn4Y36CDLmz7Lw1p47vK
Malware Config
Signatures
Files
-
a7df29ea98bc74bd2f3cd1a84a9ceb852f16763896aa2c1023afc56c62fb38e2.exe windows x86
84b06ee5ea5b5c3741a4cb370e2b3d55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClientRect
wsprintfA
ReleaseCapture
EndPaint
MoveWindow
SetWindowLongA
SetCursor
GetWindowLongA
GetFocus
MessageBoxA
ScreenToClient
UpdateWindow
DispatchMessageA
LoadIconA
TranslateMessage
wvsprintfA
RegisterClassA
GetClassLongA
SubtractRect
GetMessageA
OffsetRect
CreateWindowExA
PeekMessageA
CallWindowProcA
IsWindow
SetWindowTextA
BeginPaint
DefWindowProcA
GetWindowRect
ShowWindow
InvalidateRect
SetFocus
DestroyWindow
SendMessageA
GetKeyState
LoadCursorA
SetCapture
comctl32
CreateToolbarEx
avifil32
AVIStreamRelease
AVIStreamInfoA
AVIStreamSetFormat
AVIStreamGetFrameOpen
AVIFileOpenA
AVIFileInit
AVIStreamWrite
AVIStreamGetFrame
AVIStreamGetFrameClose
AVIFileGetStream
AVIFileRelease
AVISaveOptions
AVIFileCreateStreamA
AVIMakeCompressedStream
gdi32
SetDIBColorTable
CreateRectRgn
CombineRgn
FillRgn
CreateDIBSection
GetObjectA
StretchDIBits
SelectObject
CreateCompatibleDC
SetDIBitsToDevice
BitBlt
SetStretchBltMode
GetCurrentObject
DeleteObject
DeleteDC
GetStockObject
StretchBlt
msvfw32
ICDecompress
ICOpen
ICSendMessage
ICClose
kernel32
ReadFile
QueryDosDeviceW
CreateFileA
CreateFileMappingA
GetProcessId
SetFilePointer
MapViewOfFile
GlobalSize
ProcessIdToSessionId
UnmapViewOfFile
LocalFree
EnumResourceTypesA
GetFileSize
LocalAlloc
Sleep
ExitProcess
WriteFile
DisableThreadLibraryCalls
GlobalAlloc
CloseHandle
lstrlenA
GlobalFree
avicap32
capCreateCaptureWindowA
capGetDriverDescriptionA
Sections
.text Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ