Static task
static1
Behavioral task
behavioral1
Sample
2f838f5249691aaa3af18cca5ce95ebef2f6138f538a2357fb567c0745551957.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2f838f5249691aaa3af18cca5ce95ebef2f6138f538a2357fb567c0745551957.exe
Resource
win10v2004-20220812-en
General
-
Target
2f838f5249691aaa3af18cca5ce95ebef2f6138f538a2357fb567c0745551957
-
Size
140KB
-
MD5
6e5f35a0a69f71fd0ef78da00bdc4010
-
SHA1
a78c1d37fe26c4b078250b23ef0dcb86316176c3
-
SHA256
2f838f5249691aaa3af18cca5ce95ebef2f6138f538a2357fb567c0745551957
-
SHA512
b9dbfc7a3911b4d27c90fc3d7d24c2c3aa026adbd9098de875d169430c67608e56db08cb102c7bf35791761f0c7a182d4c58a642d5c951dc79853075c98d0bb9
-
SSDEEP
3072:PkP7h/oMvoMelvwh0iF4s4ancTiYIwBa39sPNz:MPN/qMeJwi2Z6TatsPNz
Malware Config
Signatures
Files
-
2f838f5249691aaa3af18cca5ce95ebef2f6138f538a2357fb567c0745551957.exe windows x86
719455ede6dfb8f60400ff23313d9806
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetProcAddress
CloseHandle
GetTempPathA
GetVersionExA
LoadLibraryA
RtlUnwind
CreateFileA
VirtualProtect
GetModuleHandleW
GetStartupInfoW
lstrlenW
crtdll
__GetMainArgs
exit
raise
signal
gdi32
CreateSolidBrush
BitBlt
SelectObject
DeleteObject
SetTextColor
CreateCompatibleDC
DeleteDC
CreateFontIndirectW
advapi32
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
user32
LoadIconW
GetWindowRect
ShowWindow
SetWindowLongW
LoadStringW
SendMessageW
GetDlgItem
wsprintfW
GetWindowLongW
MessageBoxW
ReleaseDC
GetDC
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 322B - Virtual size: 322B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc1 Size: 302B - Virtual size: 302B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE