Static task
static1
Behavioral task
behavioral1
Sample
338086127d9bb8e5287305ab9de23bf755a5696793f5d939f605dbc68fe5c565.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
338086127d9bb8e5287305ab9de23bf755a5696793f5d939f605dbc68fe5c565.exe
Resource
win10v2004-20220901-en
General
-
Target
338086127d9bb8e5287305ab9de23bf755a5696793f5d939f605dbc68fe5c565
-
Size
119KB
-
MD5
a136984e54afa52686ff29204a51f3f6
-
SHA1
f4cb7d62846c53f4ef92e3eb40dcdf31db2e49d2
-
SHA256
338086127d9bb8e5287305ab9de23bf755a5696793f5d939f605dbc68fe5c565
-
SHA512
dbd032301b83f494a40cc70da4f703573436c3dd6d6e781bc665132b727be7d7e44f85d4b38b718f257357c3b39241308824e66552927f5bee2d2bba1ef32832
-
SSDEEP
3072:CggzrKSQADE7JSfrmO0XcNGHAaFT8OHwvz:CprYAgANf8HA6o
Malware Config
Signatures
Files
-
338086127d9bb8e5287305ab9de23bf755a5696793f5d939f605dbc68fe5c565.exe windows x86
8685a2d5149490d34e4ff67e45ccabaf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadTimes
GetComputerNameExA
GetFileSizeEx
FlushViewOfFile
CancelDeviceWakeupRequest
GetThreadTimes
CloseHandle
MapViewOfFile
GetThreadTimes
CreateMailslotA
GetTickCount
WriteFileEx
OpenFileMappingA
GetLogicalDriveStringsA
MulDiv
GlobalDeleteAtom
SetEndOfFile
SetSystemTimeAdjustment
TlsAlloc
GetThreadTimes
LCMapStringW
GetVolumePathNameA
GetDefaultCommConfigA
DebugBreak
FileTimeToLocalFileTime
CompareStringW
SetProcessShutdownParameters
GlobalSize
RtlFillMemory
CompareFileTime
user32
DdeFreeDataHandle
GetFocus
PostThreadMessageA
GetLastInputInfo
CreateAcceleratorTableW
AnimateWindow
LoadStringW
DdeReconnect
LoadAcceleratorsW
ArrangeIconicWindows
CreateIconIndirect
ReleaseCapture
LoadIconA
SetDlgItemTextA
MessageBoxIndirectW
EnumDisplayMonitors
OpenWindowStationA
TranslateAcceleratorW
SendDlgItemMessageW
DdeInitializeA
GetMessagePos
EnumClipboardFormats
IMPGetIMEW
GetCaretBlinkTime
RegisterWindowMessageA
GetWindowLongA
CreateIcon
TileChildWindows
ValidateRgn
CreateDesktopA
DestroyAcceleratorTable
GetMonitorInfoW
SetForegroundWindow
ChildWindowFromPointEx
BroadcastSystemMessageA
GetDoubleClickTime
GetWindowPlacement
DdeAbandonTransaction
DrawFocusRect
EnumThreadWindows
PtInRect
SetMenuDefaultItem
GetKeyState
DrawEdge
SetCursor
GetKeyboardLayoutNameW
PostQuitMessage
ImpersonateDdeClientWindow
GetProcessDefaultLayout
WinHelpA
LoadCursorA
UnpackDDElParam
OemKeyScan
CharPrevA
DrawIconEx
DlgDirListComboBoxW
GetClassInfoExW
DdeUnaccessData
GetSysColor
SetWindowsHookW
GetClassInfoW
IsWindowUnicode
GetClipCursor
GetPropW
SetDlgItemInt
GetTopWindow
CharLowerW
SendMessageTimeoutA
UnregisterHotKey
SendDlgItemMessageA
DefWindowProcA
GetListBoxInfo
ExcludeUpdateRgn
LoadIconW
MsgWaitForMultipleObjectsEx
DrawTextA
SetClassLongW
CharUpperBuffW
BeginPaint
IsHungAppWindow
GetInputState
GetShellWindow
RedrawWindow
SystemParametersInfoA
GetDlgCtrlID
WinHelpW
MonitorFromRect
SetWinEventHook
SetThreadDesktop
SendMessageCallbackA
SetScrollPos
LookupIconIdFromDirectoryEx
LockSetForegroundWindow
GetMenuItemRect
MonitorFromWindow
psapi
GetMappedFileNameA
GetDeviceDriverBaseNameA
GetDeviceDriverFileNameA
Sections
.text Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 40KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 317B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE