Static task
static1
Behavioral task
behavioral1
Sample
d7700daf2822c8b193fd10851fb56f63dfa65c56b5bbdef60be3554903d1268b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d7700daf2822c8b193fd10851fb56f63dfa65c56b5bbdef60be3554903d1268b.exe
Resource
win10v2004-20220901-en
General
-
Target
d7700daf2822c8b193fd10851fb56f63dfa65c56b5bbdef60be3554903d1268b
-
Size
146KB
-
MD5
02cd25e06854f30b7935f308b45f218a
-
SHA1
ab83fd8fc8828abf7adaa9cf246e7394408fc575
-
SHA256
d7700daf2822c8b193fd10851fb56f63dfa65c56b5bbdef60be3554903d1268b
-
SHA512
5c0095f8405c6e1b89a8d7c2eb29c3b857e8409a46d09d3641d34238726949217744499205a974d7c5ae027293a63db6f9484eda169b8f37c422c89963d8b48e
-
SSDEEP
3072:z4n9ArpE+JMTl5Gu1YG3QkV+qeVYD9xtMLcL:zRrpEWMTVYRkEWX8i
Malware Config
Signatures
Files
-
d7700daf2822c8b193fd10851fb56f63dfa65c56b5bbdef60be3554903d1268b.exe windows x86
31942c873690a4193820db482749f346
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleMode
GetStartupInfoA
GetModuleHandleW
LeaveCriticalSection
GetThreadContext
TlsAlloc
LCMapStringW
GetSystemInfo
TerminateProcess
LCMapStringA
GetCurrentProcess
GetCurrentProcessId
GetLastError
IsBadReadPtr
IsDebuggerPresent
SetLastError
FreeEnvironmentStringsW
TerminateThread
GetCurrentThreadId
SetPriorityClass
lstrcpynA
GetNumberFormatA
GlobalAlloc
IsBadStringPtrA
InterlockedIncrement
GetModuleHandleA
lstrcmpiA
GetCommandLineW
GetProcessHeap
WriteFile
DeviceIoControl
lstrcmpA
WaitForSingleObject
RtlUnwind
EnterCriticalSection
GetOEMCP
Module32Next
SetEvent
GetCurrentDirectoryA
TlsFree
HeapAlloc
GetExitCodeThread
GetModuleFileNameA
HeapReAlloc
GetProcessWorkingSetSize
GetFileTime
lstrcpyA
msvcrt
_wexecle
_getche
_exit
__getmainargs
strtoul
_strnset
__p__commode
_snscanf
_cprintf
_iob
_read
_acmdln
iscntrl
fscanf
_inpd
putwchar
_mbsbtype
gmtime
_ismbchira
_fpieee_flt
_adj_fdiv_r
_XcptFilter
_mbsset
_adj_fdivr_m64
atoi
_mbccpy
_strdup
mktime
_mbsnbcpy
_fpclass
__setusermatherr
_mbscoll
_resetstkoflw
iswctype
_controlfp
_fstati64
_mbsupr
_atoi64
_wexeclp
_adjust_fdiv
_getws
_isatty
_adj_fdivr_m16i
strerror
exit
acos
_mbsdec
_mbsnccnt
_gmtime64
_ismbcdigit
_ismbbgraph
_ismbcl1
__p__fmode
toupper
_amsg_exit
_aligned_malloc
_stati64
_fullpath
_mbsncpy
fgetwc
_futime
_except_handler3
realloc
swscanf
_cscanf
__set_app_type
_initterm
free
memcpy
_ismbcalnum
_strrev
_wcsnicmp
towlower
user32
MsgWaitForMultipleObjects
RedrawWindow
IsDialogMessageA
GetWindowPlacement
SetScrollInfo
GetCursorPos
GetClassNameA
EnumChildWindows
GetClassLongA
TrackPopupMenuEx
SetPropA
GetMenu
CreateDialogParamA
CreateIconIndirect
GetFocus
GetUserObjectSecurity
RegisterWindowMessageA
InvalidateRect
ExitWindowsEx
GetDlgItemTextA
EmptyClipboard
DestroyIcon
CheckDlgButton
SetWindowPos
IntersectRect
ModifyMenuA
CreatePopupMenu
DefFrameProcA
CheckMenuRadioItem
ScreenToClient
ShowWindow
SetWindowTextA
LoadStringA
FindWindowExA
DefMDIChildProcA
InflateRect
DialogBoxIndirectParamA
RegisterClassA
EndDeferWindowPos
DefDlgProcA
GetKeyState
EnableWindow
TranslateAcceleratorA
GetWindow
GetParent
ScrollWindowEx
MapWindowPoints
DrawFrameControl
MessageBoxA
DispatchMessageA
GetMenuItemID
SetCapture
LoadCursorA
SetClipboardData
CloseClipboard
FillRect
DeferWindowPos
FrameRect
SendMessageA
IsZoomed
GetUpdateRgn
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 99B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ