Static task
static1
Behavioral task
behavioral1
Sample
18c3f6395a2c34703bd3170f1c06c4064909786b683375f5e96fafbda1923cbc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
18c3f6395a2c34703bd3170f1c06c4064909786b683375f5e96fafbda1923cbc.exe
Resource
win10v2004-20220901-en
General
-
Target
18c3f6395a2c34703bd3170f1c06c4064909786b683375f5e96fafbda1923cbc
-
Size
253KB
-
MD5
91f8e7a57d05ca0569ea15525f33d1d0
-
SHA1
52440e8979083d75e9691505ed66c1468a8d7dc2
-
SHA256
18c3f6395a2c34703bd3170f1c06c4064909786b683375f5e96fafbda1923cbc
-
SHA512
d440f547b6d6647d939945eb3d505796ec03e175a9b9b620334f507d13efa1c14f8268d5fc9d0d6c45eb4e2b21bd2aa2d2ba710216be2d0c7796f2099ca6f050
-
SSDEEP
6144:2lX8hRqyL+KOkBxrVr/+yT4l9L373Kllbt:2lX4Rqq5BxrpWl376llbt
Malware Config
Signatures
Files
-
18c3f6395a2c34703bd3170f1c06c4064909786b683375f5e96fafbda1923cbc.exe windows x86
2f872deac0a80b97f16a331a90013ef0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCP
FlushFileBuffers
LCMapStringW
GetConsoleMode
OutputDebugStringW
GetStringTypeW
RtlUnwind
HeapAlloc
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
GetModuleHandleW
GetLastError
SetLastError
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsGetValue
TlsSetValue
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStdHandle
WriteFile
GetModuleFileNameW
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExW
CreateFileW
user32
EndPaint
DestroyWindow
SetTimer
GetMessageW
PostQuitMessage
KillTimer
DialogBoxParamW
LoadCursorW
GetClientRect
BeginPaint
TranslateMessage
RegisterClassExW
LoadIconW
InvalidateRect
EndDialog
ShowWindow
LoadBitmapW
CreateWindowExW
UpdateWindow
DefWindowProcW
DispatchMessageW
gdi32
DeleteDC
DeleteObject
SelectObject
CreateCompatibleDC
GetObjectW
BitBlt
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 176KB - Virtual size: 177KB
IMAGE_SCN_MEM_READ