Static task
static1
Behavioral task
behavioral1
Sample
f15f62e29c120f38565f79c062cb118205962fb8b08c596364d8148f78a39c88.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f15f62e29c120f38565f79c062cb118205962fb8b08c596364d8148f78a39c88.exe
Resource
win10v2004-20220812-en
General
-
Target
f15f62e29c120f38565f79c062cb118205962fb8b08c596364d8148f78a39c88
-
Size
504KB
-
MD5
34242bac18dd1a5dbcfb03c1a00be210
-
SHA1
bfb2569e611db029eeac5ba8a206d6c468fa48a4
-
SHA256
f15f62e29c120f38565f79c062cb118205962fb8b08c596364d8148f78a39c88
-
SHA512
795b71851eaece8f7d5f575e31c0585d167f95f31633e1498cfae1f0ec4f9cfb011c07fcb046b72cb4c454c62c3c514c85969be339ef1fcf4c8bc1f9f527f3b8
-
SSDEEP
6144:0vLpPV4I/w589NjIRmqZHF7S1M4IBprBnBsfaWubNawb9VSzxRCiMOEo:0vLpPnNu7Sm400Czbswb9VSxxLE
Malware Config
Signatures
Files
-
f15f62e29c120f38565f79c062cb118205962fb8b08c596364d8148f78a39c88.exe windows x86
7d8fa7c1e43d927cf18ca8ae169eb559
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
GetVersionExA
WaitForSingleObject
CreateProcessA
ResetEvent
SetEvent
WaitForMultipleObjects
Sleep
CreateThread
GetLastError
CreateMutexA
LoadLibraryExA
GetModuleHandleA
GetSystemDirectoryA
TerminateProcess
GlobalFree
GlobalAlloc
ReleaseMutex
GetCurrentProcessId
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
CompareStringW
CompareStringA
FindFirstFileA
GetLocaleInfoW
HeapSize
FlushFileBuffers
GetConsoleMode
GetConsoleCP
VirtualAlloc
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
OpenProcess
FindClose
CloseHandle
LoadLibraryA
GetProcAddress
FreeLibrary
CreateEventA
GetModuleFileNameA
WriteConsoleW
SetStdHandle
ReadFile
SetFilePointer
CreateFileA
SetEnvironmentVariableA
RaiseException
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
MultiByteToWideChar
GetFileAttributesA
RtlUnwind
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
WideCharToMultiByte
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FatalAppExitA
WriteFile
SetConsoleCtrlHandler
InterlockedExchange
SetEnvironmentVariableW
user32
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
SetWindowLongA
GetWindowLongA
DefWindowProcA
PostQuitMessage
LoadMenuA
GetSubMenu
DestroyMenu
SetMenuDefaultItem
GetCursorPos
SetForegroundWindow
TrackPopupMenu
CreatePopupMenu
GetMenuStringA
ModifyMenuA
EnableMenuItem
FindWindowA
GetWindowThreadProcessId
SendMessageA
AppendMenuA
MessageBoxA
LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA
PostMessageA
wsprintfA
gdi32
GetStockObject
advapi32
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegEnumKeyA
shell32
Shell_NotifyIconA
ShellExecuteA
Sections
.text Size: 300KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
�� Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE