Static task
static1
Behavioral task
behavioral1
Sample
29a6e4bdb5d6f11a62fb224b8995d43585211f2707020910bd23a4c04137eb64.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29a6e4bdb5d6f11a62fb224b8995d43585211f2707020910bd23a4c04137eb64.exe
Resource
win10v2004-20220812-en
General
-
Target
29a6e4bdb5d6f11a62fb224b8995d43585211f2707020910bd23a4c04137eb64
-
Size
192KB
-
MD5
5571971c40e45b3288da05de98a16100
-
SHA1
261ceb0f681352f026fd27dc1d5e476f71ec8a6a
-
SHA256
29a6e4bdb5d6f11a62fb224b8995d43585211f2707020910bd23a4c04137eb64
-
SHA512
11b5f8c7f5953d82d1a85c2f37cd492f461eb627ddbc84ace04c66259febf46c2cb5f33ccccaac624dd52e9d5002f4f4aa561f607057f45ae322e1417c7881e6
-
SSDEEP
3072:sXa6LcjOMEBodXG52YNB6G/6eE7hfoXdbveY72cqKCvFulfmJfn4xJmMiOioMou:sX5dvB7gYNB606eEedDeFupoKoMaoW
Malware Config
Signatures
Files
-
29a6e4bdb5d6f11a62fb224b8995d43585211f2707020910bd23a4c04137eb64.exe windows x86
52a1904affd9d847f31c84e381001bd8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
RtlUnwind
GetProcAddress
SetHandleCount
GetEnvironmentStringsW
LoadLibraryA
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
LCMapStringA
LCMapStringW
ReadFile
GetModuleHandleA
GetFileType
LocalHandle
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
MultiByteToWideChar
GetCPInfo
CompareStringA
CompareStringW
GetLastError
WriteFile
GetStdHandle
GetModuleFileNameA
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
CloseHandle
user32
CreateMenu
GetClipCursor
OemToCharBuffW
UnhookWinEvent
GetDlgItemTextW
UnpackDDElParam
SetWindowPlacement
CheckRadioButton
ExcludeUpdateRgn
LoadMenuIndirectA
DestroyAcceleratorTable
DialogBoxParamW
LoadCursorA
gdi32
SetBitmapDimensionEx
GetEnhMetaFileW
CreateSolidBrush
SwapBuffers
GdiComment
CreateEnhMetaFileA
GetTextCharacterExtra
IntersectClipRect
GetTextCharset
CreateEllipticRgn
CreateBitmapIndirect
RoundRect
Sections
.text Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE