Static task
static1
Behavioral task
behavioral1
Sample
f61a3034d45371538b0bdddb470eea9c29fc14517848c4f9952c6faad9500794.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f61a3034d45371538b0bdddb470eea9c29fc14517848c4f9952c6faad9500794.exe
Resource
win10v2004-20220812-en
General
-
Target
f61a3034d45371538b0bdddb470eea9c29fc14517848c4f9952c6faad9500794
-
Size
1.9MB
-
MD5
050383b87b7b23b9a64932c8e692d528
-
SHA1
9ef5809851c17347b2c23a983859e465b69db11c
-
SHA256
f61a3034d45371538b0bdddb470eea9c29fc14517848c4f9952c6faad9500794
-
SHA512
9ab6f359aa064938b3be25dfeca3466f921d09175f31ba5c744bfaaaa3a8fdd46679d7a2637f7a412241c481f2542d915b0534c815e734dd0cda7401b3b34c0a
-
SSDEEP
49152:Gn1Bk/SGm6EqogyoBxVQHp0+zHTZuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuTue:Gn1Bk/SGm6EqoL0VQJ0+z9uuuuuuuuuv
Malware Config
Signatures
Files
-
f61a3034d45371538b0bdddb470eea9c29fc14517848c4f9952c6faad9500794.exe windows x86
375e99c150899f4a1953b1fbd5bea5aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
InterlockedIncrement
InterlockedDecrement
GetPrivateProfileStringA
WritePrivateProfileStringA
GetShortPathNameA
GetWindowsDirectoryA
TerminateProcess
GetLastError
CreateProcessA
GetModuleFileNameA
GetCurrentThreadId
GetTickCount
lstrlenA
FindFirstFileA
FindNextFileA
FindClose
DeleteFileA
RemoveDirectoryA
lstrcatA
WriteProfileStringA
GlobalLock
_lclose
GlobalHandle
GlobalUnlock
Sleep
LoadLibraryA
OpenProcess
CloseHandle
FreeResource
GetProcAddress
FreeLibrary
LockResource
FindResourceA
LoadResource
_lread
_lopen
_llseek
GetProfileIntA
GlobalAlloc
GetVersion
GetExitCodeProcess
SetEnvironmentVariableA
GetTimeZoneInformation
SetEndOfFile
CreateFileA
CompareStringA
SetStdHandle
GetStringTypeW
FlushFileBuffers
LCMapStringW
LCMapStringA
GetStringTypeA
RtlUnwind
GetFileType
MultiByteToWideChar
SetHandleCount
GetEnvironmentStringsW
GetStdHandle
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStrings
CompareStringW
GlobalFree
GetSystemTimeAsFileTime
MoveFileA
WriteFile
SetFilePointer
UnhandledExceptionFilter
HeapReAlloc
ReadFile
VirtualFree
HeapCreate
VirtualAlloc
GetOEMCP
GetACP
HeapDestroy
GetCurrentDirectoryA
GetCPInfo
WideCharToMultiByte
GetCurrentProcess
GetFullPathNameA
GetCommandLineA
GetStartupInfoA
ExitProcess
GetLocalTime
GetSystemTime
GetModuleHandleA
HeapAlloc
GetDriveTypeA
HeapFree
FileTimeToSystemTime
GetFileAttributesA
SetFileAttributesA
FileTimeToLocalFileTime
user32
ReleaseDC
FillRect
WaitForInputIdle
PostQuitMessage
GetDC
PostThreadMessageA
GetClientRect
PostMessageA
ShowCursor
PeekMessageA
IsWindow
GetWindowThreadProcessId
GetSystemMetrics
AttachThreadInput
SetForegroundWindow
GetTopWindow
SetWindowPos
ShowWindow
GetForegroundWindow
SystemParametersInfoA
EnumWindows
FindWindowExA
SendMessageA
GetWindowLongA
MessageBoxA
DialogBoxParamA
GetWindow
LoadStringA
CheckDlgButton
GetDlgItem
EnableWindow
SetTimer
DefWindowProcA
KillTimer
CreateWindowExA
LoadIconA
RegisterClassA
GetParent
InvalidateRect
UpdateWindow
CreateDialogParamA
BeginPaint
EndPaint
TranslateMessage
GetMessageA
IsDialogMessageA
SetRect
DispatchMessageA
DestroyWindow
GetDlgItemTextA
IsDlgButtonChecked
gdi32
SetDIBitsToDevice
SelectObject
CreateCompatibleDC
StretchBlt
BitBlt
RealizePalette
GetObjectA
TextOutA
SetBkColor
SelectPalette
GetStockObject
GetTextMetricsA
SetTextColor
DeleteObject
CreateDIBitmap
CreatePalette
DeleteDC
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
Sections
.text Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ