Static task
static1
Behavioral task
behavioral1
Sample
001c71af3a4bc946aa2b4f5a689e91cccf36dcecb3168b18a43c14f405d1cf0e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
001c71af3a4bc946aa2b4f5a689e91cccf36dcecb3168b18a43c14f405d1cf0e.exe
Resource
win10v2004-20220901-en
General
-
Target
001c71af3a4bc946aa2b4f5a689e91cccf36dcecb3168b18a43c14f405d1cf0e
-
Size
746KB
-
MD5
727d0363fe7d5f0cdc029e02b46a0b70
-
SHA1
c847947d7f9874070364ff1704f320361d08df17
-
SHA256
001c71af3a4bc946aa2b4f5a689e91cccf36dcecb3168b18a43c14f405d1cf0e
-
SHA512
50a4046a7693e3692e886109130568170c65c5d54d8949b1b53efb7c80a5e283ae5cfc23280d51993821875190ec8a6efdbc11f2d0dbbfc8d8844f085566f55f
-
SSDEEP
12288:Xs0qhPlpfqIrtACZudbEGOOCSjyLq1dACR:XqHLG4uJhr+CR
Malware Config
Signatures
Files
-
001c71af3a4bc946aa2b4f5a689e91cccf36dcecb3168b18a43c14f405d1cf0e.exe windows x86
049c2d401cbebd074f6b1b8f4a696e55
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetDC
GetParent
CallNextHookEx
SetParent
MenuItemFromPoint
SetWindowPlacement
ShowScrollBar
GetKeyNameTextW
SetClipboardData
SendMessageW
GetMessagePos
GetWindowTextLengthW
FrameRect
SetPropW
GetForegroundWindow
DeferWindowPos
SendDlgItemMessageW
ClientToScreen
IsWindowEnabled
IntersectRect
wsprintfA
GetWindowThreadProcessId
AppendMenuW
RegisterClipboardFormatW
PtInRect
GrayStringW
MapVirtualKeyW
EqualRect
SetMenu
UpdateWindow
GetDlgItem
MapWindowPoints
GetDoubleClickTime
InvertRect
TrackPopupMenu
GetClipboardData
GetMenuItemRect
EndDialog
WinHelpW
SetActiveWindow
GetMenuCheckMarkDimensions
kernel32
ActivateActCtx
CreateActCtxA
CreateThread
ExitProcess
GetACP
GetModuleHandleA
GetProcAddress
GetProcessHeap
LoadLibraryA
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
GetFullPathNameW
FreeEnvironmentStringsW
GetStartupInfoA
WriteConsoleA
GetFileTime
GetFileAttributesW
ConvertDefaultLocale
GetCommandLineA
GetModuleHandleW
GetModuleFileNameW
GlobalLock
GetLocaleInfoW
FreeResource
GetThreadLocale
GetLocaleInfoA
GetStdHandle
GetCurrentThread
GlobalSize
GetCurrentProcessId
GetSystemInfo
GetTempPathA
WritePrivateProfileStringW
GetCommandLineW
GetVersionExA
GlobalAddAtomW
HeapReAlloc
CloseHandle
ExitThread
EnterCriticalSection
GetConsoleOutputCP
GlobalFree
WriteFile
CreateFileA
GetTimeZoneInformation
CopyFileW
SetErrorMode
GetModuleFileNameA
VirtualQuery
GetStringTypeW
LCMapStringA
FlushFileBuffers
gdi32
SetTextColor
GetTextColor
Sections
.text Size: 615KB - Virtual size: 615KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE