Static task
static1
Behavioral task
behavioral1
Sample
f1d5dc4dffcf863e94564dc93dd69be8527284bf41286d5d045c76badc35213b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1d5dc4dffcf863e94564dc93dd69be8527284bf41286d5d045c76badc35213b.exe
Resource
win10v2004-20220901-en
General
-
Target
f1d5dc4dffcf863e94564dc93dd69be8527284bf41286d5d045c76badc35213b
-
Size
125KB
-
MD5
01bad36e785f96a1ded0eac7e3c2c0f1
-
SHA1
08db08599803d798aaffd7fb516e768d3019429d
-
SHA256
f1d5dc4dffcf863e94564dc93dd69be8527284bf41286d5d045c76badc35213b
-
SHA512
526f159fdcce6e59166fd516da5c64b978da68cd1ec89d8f4cee1f36ffc0684abc0844920dcd0dfbefdb93a265a67edb69e5fe617a66ced875f18e9cd56caf67
-
SSDEEP
1536:AcPdwIG1cnbCo87UADi7wRxNko01dSIkQXCyypXSlJnxpvnc1r5LSOU/nkG4FmH/:NWI7URxNkMITpvnW5Mnj5kgwGX
Malware Config
Signatures
Files
-
f1d5dc4dffcf863e94564dc93dd69be8527284bf41286d5d045c76badc35213b.exe windows x86
6ab5ff7887182592423456833a6b6003
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
IsProcessorFeaturePresent
ConvertDefaultLocale
SetThreadAffinityMask
TlsGetValue
FoldStringA
EnumSystemLanguageGroupsA
GetDateFormatA
SleepEx
GetProfileStringA
GetCurrentDirectoryW
DuplicateHandle
FindCloseChangeNotification
LocalCompact
GetCurrencyFormatW
AssignProcessToJobObject
CommConfigDialogA
CreateDirectoryW
EnumResourceLanguagesW
InitializeCriticalSection
GetCommMask
GetCPInfoExA
IsBadWritePtr
GetThreadContext
OpenSemaphoreW
SetFileApisToANSI
GetStringTypeExA
user32
CallWindowProcA
GetCapture
SetForegroundWindow
CharNextA
MenuItemFromPoint
DestroyMenu
GetDCEx
GetMessageExtraInfo
SendMessageTimeoutW
DdeSetUserHandle
GetKeyboardLayoutNameW
SetWindowsHookW
DrawTextExW
GetScrollPos
CreateAcceleratorTableW
GetTopWindow
IsDialogMessageW
UnpackDDElParam
DrawTextW
GetScrollRange
GetKeyNameTextW
DestroyIcon
DdeUnaccessData
LoadAcceleratorsW
GetClassLongA
RegisterClipboardFormatA
MessageBoxA
LoadKeyboardLayoutW
TrackMouseEvent
SetClipboardViewer
GetWindowPlacement
SetWindowLongA
SetKeyboardState
DdeInitializeA
GetWindowWord
FillRect
TranslateMessage
ClipCursor
ScreenToClient
IntersectRect
GetShellWindow
OpenInputDesktop
LoadCursorW
EnumPropsA
SendIMEMessageExA
GetGuiResources
GetSubMenu
RemoveMenu
GetWindowTextA
CharToOemW
GetLastActivePopup
FindWindowExW
GetMenuStringA
DeferWindowPos
GetMenuBarInfo
OpenWindowStationW
LockSetForegroundWindow
GetActiveWindow
ToUnicode
RealGetWindowClassW
DrawStateW
SetRectEmpty
GetMenuInfo
UnloadKeyboardLayout
DdeSetQualityOfService
RegisterWindowMessageA
DlgDirListW
SetDlgItemInt
OffsetRect
CheckDlgButton
DdeCreateDataHandle
WaitMessage
SetClipboardData
OemToCharBuffA
PostThreadMessageW
IMPGetIMEW
AppendMenuW
CharLowerA
GetProcessWindowStation
GetUserObjectInformationW
LoadBitmapW
GetMenuContextHelpId
GetClassInfoExW
IMPSetIMEW
DdeConnect
GetParent
MonitorFromRect
IsIconic
DdeAbandonTransaction
VkKeyScanA
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 43KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE