Static task
static1
Behavioral task
behavioral1
Sample
23f0efb4c2e91de4ef9bbfe67fed062b38a271ad8306e7d45d8a87f2b9989b4f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
23f0efb4c2e91de4ef9bbfe67fed062b38a271ad8306e7d45d8a87f2b9989b4f.exe
Resource
win10v2004-20220812-en
General
-
Target
23f0efb4c2e91de4ef9bbfe67fed062b38a271ad8306e7d45d8a87f2b9989b4f
-
Size
584KB
-
MD5
60347f73613a2785b51a93ccffe23820
-
SHA1
28d710d1bf161dc351e0edd9b75fe9f78f96cbfb
-
SHA256
23f0efb4c2e91de4ef9bbfe67fed062b38a271ad8306e7d45d8a87f2b9989b4f
-
SHA512
e2a7a86f4aaa27b9c39c08346e0a3c18b2aff11e64b0b91134e55e1a37d3fe2ba185394f978659a20c8ebadab8e80d20fecebcfc7229316beef62669e7c60c67
-
SSDEEP
12288:lXikhGtgjN6oufbtszR5dJJVBbvZE+HH2QGwTVRplmRTVm3:s5tKN6Pf5s95djvZE+HWQ3xR/mRZw
Malware Config
Signatures
Files
-
23f0efb4c2e91de4ef9bbfe67fed062b38a271ad8306e7d45d8a87f2b9989b4f.exe windows x86
19ceffa5c91fd030f3d763a0877b6f4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowLongW
EnumDisplaySettingsExW
GetWindowRect
CheckMenuRadioItem
MoveWindow
ScrollDC
IsCharAlphaNumericW
CreateDialogIndirectParamW
SetThreadDesktop
DdePostAdvise
RemoveMenu
DrawTextExW
DdeDisconnect
DdeConnectList
DrawTextW
SetDlgItemInt
RegisterClassExA
DdeImpersonateClient
RegisterClassA
comctl32
ImageList_LoadImageW
ImageList_DragLeave
ImageList_GetIconSize
InitCommonControlsEx
ImageList_GetDragImage
ImageList_DrawEx
ImageList_AddMasked
ImageList_GetFlags
kernel32
UnhandledExceptionFilter
QueryPerformanceCounter
RtlFillMemory
HeapSize
SetFileAttributesW
InterlockedCompareExchange
GetSystemDefaultLangID
VirtualFree
GetConsoleMode
SetLastError
GetDiskFreeSpaceW
CreateDirectoryW
SetUnhandledExceptionFilter
GetLocaleInfoW
TlsAlloc
GetLocaleInfoA
WaitForDebugEvent
GetThreadPriority
SetFilePointer
SetStdHandle
GetModuleFileNameW
SetFileAttributesA
IsDebuggerPresent
TlsGetValue
GetStringTypeA
CreateFileMappingA
LCMapStringA
GetACP
CloseHandle
VirtualAlloc
GetCurrentThread
GetSystemTimeAsFileTime
GetEnvironmentStringsW
GetConsoleOutputCP
WideCharToMultiByte
LocalHandle
GetCommandLineW
FreeEnvironmentStringsW
GetTempPathW
GetTempFileNameA
CreateThread
FindNextFileW
GetTimeZoneInformation
HeapAlloc
CreateWaitableTimerW
GetStartupInfoW
AddAtomA
HeapCreate
VirtualQuery
GetShortPathNameA
LoadModule
GetCurrentProcessId
ExitProcess
GlobalAlloc
WaitForSingleObjectEx
GetCurrentProcess
WriteConsoleInputA
IsBadReadPtr
FindNextChangeNotification
RtlUnwind
FindClose
InterlockedExchange
GetLastError
LCMapStringW
WriteFile
ReadConsoleOutputCharacterW
GetCPInfo
GetProcessAffinityMask
GetConsoleCP
GetPrivateProfileSectionNamesA
EnumResourceLanguagesA
CreateFileA
GetUserDefaultLCID
ReadConsoleOutputA
Sleep
DeleteCriticalSection
ReadFile
HeapReAlloc
GetCurrentThreadId
GetProfileIntA
HeapFree
IsValidCodePage
CompareStringA
EnumTimeFormatsW
TlsSetValue
SetHandleCount
OpenMutexA
MoveFileW
GetShortPathNameW
GetStdHandle
GetStringTypeW
ResumeThread
GetProcAddress
GetLongPathNameW
TlsFree
GetThreadSelectorEntry
WritePrivateProfileStructA
EnterCriticalSection
lstrcmpi
CreateMutexA
GetModuleHandleA
GetDateFormatA
GetCommandLineA
GetPriorityClass
GetTimeFormatA
HeapDestroy
MultiByteToWideChar
SetConsoleCtrlHandler
GetAtomNameA
GetUserDefaultLangID
SetConsoleTextAttribute
GetLogicalDrives
VirtualProtect
SetThreadLocale
CompareStringW
GetConsoleTitleA
GetOEMCP
InterlockedExchangeAdd
GetFileType
FreeLibraryAndExitThread
LoadLibraryA
OpenProcess
GetCompressedFileSizeA
TerminateProcess
GetStringTypeExW
WriteConsoleW
EnumSystemLocalesA
GetStartupInfoA
ReadConsoleW
InterlockedDecrement
FoldStringW
GetModuleHandleW
SetEnvironmentVariableA
InitializeCriticalSectionAndSpinCount
InterlockedIncrement
LeaveCriticalSection
SetLocaleInfoA
GetModuleFileNameA
GlobalLock
FlushFileBuffers
FreeLibrary
EnumCalendarInfoExA
ExpandEnvironmentStringsW
IsValidLocale
WriteConsoleA
GetTickCount
Sections
.text Size: 192KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ