Static task
static1
Behavioral task
behavioral1
Sample
295aa61c2b635202244036b5fb0fa5f9db6a7ad4a50943974c36a88a6f1ce640.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
295aa61c2b635202244036b5fb0fa5f9db6a7ad4a50943974c36a88a6f1ce640.exe
Resource
win10v2004-20220812-en
General
-
Target
295aa61c2b635202244036b5fb0fa5f9db6a7ad4a50943974c36a88a6f1ce640
-
Size
45KB
-
MD5
65c7d193b4ed23275bef98ef7b7dc3f4
-
SHA1
fc9495374d1f6da098c80369f7f5c77f940201d7
-
SHA256
295aa61c2b635202244036b5fb0fa5f9db6a7ad4a50943974c36a88a6f1ce640
-
SHA512
16918914cadd58b797a1ddc4de48786d9ebebf54a958101569bbbe42b11047edab407f381ad31841e3994f22aee5dbd9cccb806e6cceb0006a83e7dd7fe8ddff
-
SSDEEP
768:WiL0dl+GagrevIrBiiVhcbCWe9ILWYyUiNi6uovCig:WiLmgJgIIrdVhPRXixig
Malware Config
Signatures
Files
-
295aa61c2b635202244036b5fb0fa5f9db6a7ad4a50943974c36a88a6f1ce640.exe windows x86
bbeec381ef4fead399c53c0750caa1d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExW
GetConsoleMode
HeapCreate
CreateMutexA
GlobalUnlock
GetStdHandle
SetLastError
TerminateThread
TlsGetValue
lstrlenW
GetModuleHandleA
Sleep
GetCurrentThreadId
CloseHandle
FindResourceA
SetEnvironmentVariableA
PulseEvent
LocalFree
CreateFileA
ReleaseMutex
user32
CallWindowProcA
DrawMenuBar
DrawEdge
CopyRect
SetFocus
FillRect
GetDC
CheckRadioButton
GetIconInfo
DispatchMessageA
IsWindow
GetDlgItem
GetClipCursor
apphelp
SdbCloseDatabase
SdbGetDatabaseID
SdbFindFirstTag
ApphelpCheckIME
SdbFindNextTag
clbcatq
ComPlusMigrate
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE