Static task
static1
Behavioral task
behavioral1
Sample
1cfaf415e89cc8426bffa46d8def65c1695fbeb282441dabe37c14481ab52089.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1cfaf415e89cc8426bffa46d8def65c1695fbeb282441dabe37c14481ab52089.exe
Resource
win10v2004-20220812-en
General
-
Target
1cfaf415e89cc8426bffa46d8def65c1695fbeb282441dabe37c14481ab52089
-
Size
159KB
-
MD5
4731ebe84172b058da87b2b70da49e80
-
SHA1
a69ee69a0d72dd051a56c9ea98dde05791715509
-
SHA256
1cfaf415e89cc8426bffa46d8def65c1695fbeb282441dabe37c14481ab52089
-
SHA512
6047dd8b8eeddc33f16ad56c4560264ad60e259a202c6bed29bfc6e9d73929aa8c9c75d239f641c3ce67b18e55203edd9f808b88237885f1a0c0dd573dc2da27
-
SSDEEP
3072:fV7b4YFt/YKjTg9pxnQ4hC+n/Faeq9N/+b4p6YC9a5sI5M:fV70YFTg9LQg/weqH+EK1
Malware Config
Signatures
Files
-
1cfaf415e89cc8426bffa46d8def65c1695fbeb282441dabe37c14481ab52089.exe windows x86
60fa3ba044ca7c0e634b9e64b0416dd3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetPropW
UnregisterClassA
EnumThreadWindows
SetDlgItemTextW
DestroyWindow
MessageBoxA
OffsetRect
GetForegroundWindow
wsprintfA
RegisterClassA
SetRect
PostThreadMessageW
SetScrollPos
LoadMenuW
CreatePopupMenu
FindWindowA
LoadIconW
GetKeyState
LoadImageW
EqualRect
IsDialogMessageA
CharNextA
TrackPopupMenu
GetDC
GetParent
GetWindowRect
DestroyMenu
SetActiveWindow
kernel32
FreeEnvironmentStringsA
IsValidCodePage
GetEnvironmentVariableW
DebugBreak
CloseHandle
LCMapStringW
GetModuleHandleW
WaitForSingleObject
CreateMutexW
GetExitCodeProcess
LoadLibraryW
GetCommandLineA
ResetEvent
IsBadReadPtr
IsProcessorFeaturePresent
GetCPInfo
GetDriveTypeW
GlobalUnlock
GlobalFindAtomA
FreeEnvironmentStringsW
DeleteFileA
WritePrivateProfileStringA
GetSystemInfo
GetTempFileNameA
gdi32
SetROP2
GetClipBox
SetBkColor
RealizePalette
SetMapMode
GetTextMetricsA
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
CryptReleaseContext
SetSecurityDescriptorDacl
ole32
CoTaskMemRealloc
CoCreateInstance
OleUninitialize
CreateStreamOnHGlobal
msvcrt
wcsrchr
exit
__p__commode
__CxxFrameHandler
_amsg_exit
fprintf
__dllonexit
__setusermatherr
_wcsicmp
__set_app_type
__getmainargs
Sections
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ