Static task
static1
Behavioral task
behavioral1
Sample
33606568935d9a41526ac4c0598e4d06630a6820e1ba955d30aa138f6aa47967.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
33606568935d9a41526ac4c0598e4d06630a6820e1ba955d30aa138f6aa47967.exe
Resource
win10v2004-20220812-en
General
-
Target
33606568935d9a41526ac4c0598e4d06630a6820e1ba955d30aa138f6aa47967
-
Size
355KB
-
MD5
7b4c479992c561b62b86eedb57a58b20
-
SHA1
c07be7cc59e30b8dc4f6455dcbc40574a8b58d0e
-
SHA256
33606568935d9a41526ac4c0598e4d06630a6820e1ba955d30aa138f6aa47967
-
SHA512
419004c68ce7325be609d313e10c5b638409fd8625f5bc164d3499193e7faa7e441b98fa520c989a49b91407c8d0c869d130ae17772966150866d98b3f2c05db
-
SSDEEP
6144:n0Bu3X70wMAtvrbgoHrCl/Pf4fs3hINGSiS:n0Mn7p/tDBqf4flLiS
Malware Config
Signatures
Files
-
33606568935d9a41526ac4c0598e4d06630a6820e1ba955d30aa138f6aa47967.exe windows x86
8d621fae931e76d5afe6fdbf60b08820
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
LocalAlloc
LocalFree
LockResource
OpenFile
QueryPerformanceCounter
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
TerminateProcess
UnhandledExceptionFilter
LoadLibraryA
WritePrivateProfileStringA
_hread
_lclose
_llseek
_lopen
_lread
lstrcatA
lstrcmpA
lstrcpyA
lstrcpynA
lstrlenA
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalFree
GlobalAlloc
GetVersion
GetTickCount
GetSystemTimeAsFileTime
GetStartupInfoA
GetProcAddress
GetPrivateProfileIntA
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
FreeResource
FindResourceA
VirtualAlloc
Sleep
GetStartupInfoW
GetCommandLineW
WinExec
CreateFileW
user32
GetParent
GetSystemMetrics
GetWindowLongA
GetWindowRect
GetWindowTextA
InvalidateRect
IsIconic
IsWindowVisible
LoadBitmapA
LoadStringA
MapVirtualKeyA
MessageBeep
MessageBoxA
MoveWindow
PeekMessageA
PostMessageA
PostQuitMessage
RedrawWindow
RegisterClassA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
SendDlgItemMessageA
SendMessageA
SetCapture
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetMenu
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
TranslateMessage
UnregisterClassA
UpdateWindow
WinHelpA
wsprintfA
GetMessageA
GetMenu
GetKeyNameTextA
GetDlgItemTextA
GetDlgItem
GetDC
GetCursorPos
FindWindowA
FillRect
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawTextA
DrawMenuBar
DispatchMessageA
DialogBoxParamA
DialogBoxIndirectParamA
DestroyWindow
DeleteMenu
DefWindowProcA
CreateWindowExA
CheckMenuItem
ChangeDisplaySettingsA
BeginPaint
LoadCursorA
LoadIconW
LoadIconA
GetDesktopWindow
gdi32
CreateCompatibleDC
CreateSolidBrush
DeleteDC
DeleteObject
GetDeviceCaps
GetLayout
GetObjectA
GetPaletteEntries
GetStockObject
GetSystemPaletteEntries
CreatePalette
ResizePalette
SelectObject
SelectPalette
SetBkMode
SetLayout
SetPaletteEntries
SetSystemPaletteUse
SetTextColor
StretchDIBits
RealizePalette
BitBlt
CreateCompatibleBitmap
CreateDIBitmap
advapi32
RegOpenKeyW
shell32
ShellAboutA
msvcrt
memcpy
Sections
.text Size: 336KB - Virtual size: 335KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 804B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 199B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
7 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
6 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
5 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
4 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ