Static task
static1
Behavioral task
behavioral1
Sample
913f062fb74ed1dacf25f1ea694547e93a2e18febff91dd835e85d497a20bd73.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
913f062fb74ed1dacf25f1ea694547e93a2e18febff91dd835e85d497a20bd73.exe
Resource
win10v2004-20220812-en
General
-
Target
913f062fb74ed1dacf25f1ea694547e93a2e18febff91dd835e85d497a20bd73
-
Size
159KB
-
MD5
6b54f86f99646b78f35ba4cd54694c60
-
SHA1
88e8aed6b8d4360584ef248cba0ae23cde21c58e
-
SHA256
913f062fb74ed1dacf25f1ea694547e93a2e18febff91dd835e85d497a20bd73
-
SHA512
041919eacd0613e2e7deccd4f443b9c8560da0064411494ff8da8737e2cd2b9b388641ef0ce43fc0fe835e51386f97ff83fe4350a9f5be4b11196fb230c1ea5b
-
SSDEEP
3072:w+CwXTZEHPYMX1PergCAjodvVjkbvnGewrkbMMj36icdEQx1hZqqHK+m2Nw:s8dvJ9BrkbMMdcuQ3hZqqq
Malware Config
Signatures
Files
-
913f062fb74ed1dacf25f1ea694547e93a2e18febff91dd835e85d497a20bd73.exe windows x86
10e0ef8d4560f9461c60708154542cce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetCursorPos
RegisterClassA
LoadCursorA
UnhookWindowsHookEx
CreateWindowExA
GetClassNameA
MessageBoxA
SetRect
DrawMenuBar
SetPropA
UnregisterClassA
SetMenu
LoadIconA
GetKeyState
DestroyMenu
EmptyClipboard
CloseClipboard
FindWindowA
SetActiveWindow
GetSysColorBrush
RegisterWindowMessageA
UpdateWindow
GetDesktopWindow
GetSysColor
SetWindowTextA
GetWindow
GetSystemMetrics
GetWindowTextA
kernel32
GlobalFree
IsBadCodePtr
GetStringTypeA
lstrcpyA
lstrcmpiW
WaitForSingleObject
GetUserDefaultLCID
SetFileAttributesA
GetCurrentProcess
GetFileTime
GetWindowsDirectoryA
lstrcmpiA
VirtualProtect
GetModuleHandleW
GetVersion
CompareStringA
GetDiskFreeSpaceA
GetFullPathNameA
SetErrorMode
CreateFileMappingA
FileTimeToDosDateTime
InterlockedExchange
GetModuleFileNameW
GetUserDefaultLangID
GetModuleHandleA
SetEnvironmentVariableA
LCMapStringA
WriteConsoleA
msvcrt
_onexit
__getmainargs
__setusermatherr
strlen
sprintf
__set_app_type
_exit
strrchr
strchr
_XcptFilter
_adjust_fdiv
exit
fflush
_except_handler3
calloc
strstr
__p___initenv
__p__commode
_controlfp
_initterm
_iob
__p__fmode
advapi32
RegEnumValueA
RegEnumKeyW
RegSetValueExA
DeregisterEventSource
RegEnumKeyExW
GetTokenInformation
RegCreateKeyA
LookupPrivilegeValueW
CheckTokenMembership
AllocateAndInitializeSid
RegCloseKey
RegEnumKeyA
RegQueryValueExA
InitializeAcl
RegOpenKeyA
GetSecurityDescriptorDacl
CryptCreateHash
SetSecurityDescriptorGroup
RegCreateKeyExA
RegOpenKeyExA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ