Static task
static1
Behavioral task
behavioral1
Sample
2302b3e315d463a381b68ef5ce4edd46c02712fe9ab19a51d41a9d5792624fa6.exe
Resource
win7-20220901-en
General
-
Target
2302b3e315d463a381b68ef5ce4edd46c02712fe9ab19a51d41a9d5792624fa6
-
Size
114KB
-
MD5
3c5f6aa2ce906e4893b6b2ca5601b1f0
-
SHA1
a3fdce4453c9c9da09488451a1a6e93b607b99d1
-
SHA256
2302b3e315d463a381b68ef5ce4edd46c02712fe9ab19a51d41a9d5792624fa6
-
SHA512
cf89a9f5ab6ea193ad85f5d1d54d8136699dce88cff6b6b569a3b84c07a1d9e81ea88fc56a32675015df7894e399062699146766fdf6593e7d82047d2048392e
-
SSDEEP
1536:dVv0nd4BCAm/HCLP2Xg2kAefjv3La8JW0Y0qevaBZgd7owfGEqGe0ibFA4QHGXFh:dQ2VQH62wzz3La8JW02ZgRoEhPsidH43
Malware Config
Signatures
Files
-
2302b3e315d463a381b68ef5ce4edd46c02712fe9ab19a51d41a9d5792624fa6.exe windows x86
d622866af0bd34c315bf04ace5520c63
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
Sleep
UnmapViewOfFile
CloseHandle
MapViewOfFile
CreateFileMappingW
CreateMutexW
GetLastError
CreateEventW
ExitProcess
FreeLibrary
GetProcAddress
LoadLibraryW
GetVersionExW
VirtualQuery
GetModuleHandleA
OutputDebugStringW
CreateThread
SetEvent
WaitForSingleObject
ReleaseMutex
LocalFree
GetStartupInfoA
user32
wsprintfW
DefWindowProcW
FindWindowW
GetWindow
MessageBoxW
SetWinEventHook
UnhookWinEvent
LoadCursorW
SetCursorPos
GetCursorPos
mouse_event
TranslateMessage
GetWindowTextW
GetWindowRect
DispatchMessageW
GetMessageW
UpdateWindow
CreateWindowExW
WindowFromPoint
RegisterClassW
LoadIconW
gdi32
GetStockObject
advapi32
SetSecurityInfo
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
ole32
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
SysFreeString
SysAllocString
msvcp60
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?_Xlen@std@@YAXXZ
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_controlfp
_acmdln
exit
_XcptFilter
_exit
wcscmp
__CxxFrameHandler
wcslen
malloc
_wtoi
free
_except_handler3
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE