Static task
static1
Behavioral task
behavioral1
Sample
05f92eec8c4118524af379805daf13f5adf383cfda53565e1690a62865118c51.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
05f92eec8c4118524af379805daf13f5adf383cfda53565e1690a62865118c51.exe
Resource
win10v2004-20220812-en
General
-
Target
05f92eec8c4118524af379805daf13f5adf383cfda53565e1690a62865118c51
-
Size
52KB
-
MD5
213615f1df0c61a81c67c919b6cc53bc
-
SHA1
937258e45643abc0b5cf6618a1acb72fcf9fb66f
-
SHA256
05f92eec8c4118524af379805daf13f5adf383cfda53565e1690a62865118c51
-
SHA512
49b0166a6384295afd3e1190999b314130b8f4357a13a82cff07622371bdcc7c7b51dbfcc9a3ae8525f0fb89f5d8ec20b0b6f10085f05c53c6d14100f8c6c762
-
SSDEEP
768:wiB+yQnKwhPfHhgZngc+E+ynHpF2zT6Qtb:wiB+ynwhPfHuWyz2H6Q
Malware Config
Signatures
Files
-
05f92eec8c4118524af379805daf13f5adf383cfda53565e1690a62865118c51.exe windows x86
fb0f8f105262db6b95bbd77389e98fe2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
WSACleanup
kernel32
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryA
GetStartupInfoA
GetModuleHandleA
DeviceIoControl
GetVolumeInformationA
GlobalAlloc
CreateFileA
FindFirstFileA
FindClose
FindFirstFileW
GlobalFree
GetModuleFileNameA
user32
MessageBoxA
LoadIconA
LoadCursorA
RegisterClassExA
DefWindowProcA
CreateWindowExA
ShowWindow
FindWindowA
GetMessageA
PostQuitMessage
TranslateMessage
DispatchMessageA
GetDC
GetClientRect
DrawTextA
ReleaseDC
gdi32
DPtoLP
CreateFontIndirectA
SetBkMode
SelectObject
SetTextColor
DeleteObject
GetDeviceCaps
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__set_app_type
_except_handler3
_controlfp
_stricmp
malloc
time
fclose
fopen
free
_strnicmp
fread
ftell
fseek
strchr
atoi
sprintf
strtoul
localtime
memmove
strncpy
strncmp
_mbsinc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
netapi32
Netbios
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WWBRWSEX Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE