Static task
static1
Behavioral task
behavioral1
Sample
25a550b8ff87b65d5e3012ac22fa2160e7875ffc8fbbd0d04cb32e79b74e0540.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
25a550b8ff87b65d5e3012ac22fa2160e7875ffc8fbbd0d04cb32e79b74e0540.exe
Resource
win10v2004-20220812-en
General
-
Target
25a550b8ff87b65d5e3012ac22fa2160e7875ffc8fbbd0d04cb32e79b74e0540
-
Size
72KB
-
MD5
6909dfa985af32ee1253d065b1935720
-
SHA1
5253d0192abd20a025aaf375986cb7f69a3ba1c9
-
SHA256
25a550b8ff87b65d5e3012ac22fa2160e7875ffc8fbbd0d04cb32e79b74e0540
-
SHA512
f9893941833e00e98e850fd0fec4d551341527ab2bdc098e524aa38274abbff01afed899b347d08a02f4ed8655d381b66554c8fc3dfc3dc08a953606e801695f
-
SSDEEP
1536:SYazhLZlB6TYKeZ3KljlWeQOopKk6bTBK14/:7azhLZlllK9LGKNK1W
Malware Config
Signatures
Files
-
25a550b8ff87b65d5e3012ac22fa2160e7875ffc8fbbd0d04cb32e79b74e0540.exe windows x86
a4c4da5e800fe84f556ce2289c3aa98d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomW
GetFileSize
GlobalUnlock
LoadLibraryA
GetModuleFileNameW
ResumeThread
LoadLibraryW
LoadResource
InterlockedIncrement
ResetEvent
QueryDosDeviceW
ReadProcessMemory
GetUserDefaultLangID
WaitForMultipleObjects
GetDriveTypeW
Sleep
FreeLibrary
GetLogicalDrives
MultiByteToWideChar
GetProcAddress
CloseHandle
GlobalLock
FindResourceExW
lstrlenW
GetModuleHandleW
CreateWaitableTimerW
FreeResource
TerminateThread
SetFilePointer
ReadFile
WriteFile
GetLastError
user32
LoadImageW
AppendMenuW
IsWindow
GetWindowDC
DispatchMessageW
LoadStringW
SetForegroundWindow
SendMessageW
ReleaseCapture
GetSystemMetrics
IsDlgButtonChecked
LoadCursorW
PostThreadMessageW
DialogBoxParamW
MessageBoxW
PostQuitMessage
LoadIconW
gdi32
CreateDCW
GetClipBox
CreateICW
CreateCompatibleDC
SetBkMode
MoveToEx
CreateSolidBrush
CreateCompatibleBitmap
DeleteObject
SetTextColor
advapi32
RegSetValueExW
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1012B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE