Static task
static1
Behavioral task
behavioral1
Sample
32765bc991ca7448102b95bfb83b27285d3a60048fcd6ae4048c1ba9ea4bc7b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
32765bc991ca7448102b95bfb83b27285d3a60048fcd6ae4048c1ba9ea4bc7b8.exe
Resource
win10v2004-20220812-en
General
-
Target
32765bc991ca7448102b95bfb83b27285d3a60048fcd6ae4048c1ba9ea4bc7b8
-
Size
572KB
-
MD5
6105268a74591d80d7370a8149147fb7
-
SHA1
1933e8662d71cf80800084ba0bd0befd615c0ded
-
SHA256
32765bc991ca7448102b95bfb83b27285d3a60048fcd6ae4048c1ba9ea4bc7b8
-
SHA512
daf2bd96670c207b1b26b9d2ad66e79d1ca74bb2d7e5f04964561daf9696f3db839421e24b39dbbd989d7886fe44e3bf24e8139a845f7dbc6e43ace1c312df12
-
SSDEEP
12288:WBwb2a04AqQCyp5gzmMAWZmkGxNe+lr7UKO+HOd1Mx/:Wyb2k3y7gzcNBHXqid
Malware Config
Signatures
Files
-
32765bc991ca7448102b95bfb83b27285d3a60048fcd6ae4048c1ba9ea4bc7b8.exe windows x86
50a391d6ca4dba542b797ba223733c0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetCurrentProcessId
GetCurrentThreadId
GetCurrentThread
GetVersion
GetModuleHandleA
GetTickCount
ExitProcess
GetCommandLineA
VirtualAlloc
LeaveCriticalSection
HeapCreate
CloseHandle
FormatMessageA
FindClose
LoadResource
InitializeCriticalSection
TerminateProcess
LocalFree
FindNextFileA
CreateFileMappingA
GetSystemTimeAsFileTime
GetConsoleCP
GetStartupInfoA
WriteFile
SetUnhandledExceptionFilter
ReadFile
GetCPInfo
CompareStringA
SetStdHandle
GetProcessHeap
GetProcAddress
SetEvent
LoadLibraryExW
DeleteFileA
GetFileSize
GetStringTypeW
GetConsoleMode
GetEnvironmentStrings
GetCurrentProcess
LoadLibraryA
HeapAlloc
GetOEMCP
GetVersionExW
WaitForSingleObject
GlobalFree
lstrlenA
SetHandleCount
ReleaseMutex
EnterCriticalSection
HeapFree
user32
TrackPopupMenu
CreateWindowExA
GetWindowLongA
ScreenToClient
GetDlgItem
IsWindowVisible
TranslateMessage
SetWindowLongA
SetDlgItemTextA
GetWindowRect
ShowWindow
PostQuitMessage
EndDialog
Sections
.text Size: 539KB - Virtual size: 862KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ