?sesmic@@YGKPA_K@Z
Static task
static1
Behavioral task
behavioral1
Sample
263f9c36aa84a3467d39dba0e24c51021c9f7f291084fb283ad41287ddfae22c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
263f9c36aa84a3467d39dba0e24c51021c9f7f291084fb283ad41287ddfae22c.exe
Resource
win10v2004-20220901-en
General
-
Target
263f9c36aa84a3467d39dba0e24c51021c9f7f291084fb283ad41287ddfae22c
-
Size
303KB
-
MD5
a1f617983308999373fc7c3c9fd95990
-
SHA1
c43391111a16f188964028f585fe45d873493c32
-
SHA256
263f9c36aa84a3467d39dba0e24c51021c9f7f291084fb283ad41287ddfae22c
-
SHA512
f741388b299420d73fa5e6dbb8a75746d64fdbc990dd4391743725a2c82fb43ff8ab458cf68c4f3e74fe94a8318c916f6d5995bf38ba246fb8a3c1b346c9eb06
-
SSDEEP
6144:C5O9kEwiJDmlh1kfUzlDaIap8olkgxdcwNNpaKdQVYD:C5ZG0MUzlba5lk7wNNp4c
Malware Config
Signatures
Files
-
263f9c36aa84a3467d39dba0e24c51021c9f7f291084fb283ad41287ddfae22c.exe windows x86
7d1573cd3e591d62a5c81ff395e893ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ord67
SHEmptyRecycleBinA
SHGetIconOverlayIndexW
SHGetIconOverlayIndexA
ord25
ShellExecuteW
SHGetFolderPathAndSubDirW
ord652
ord147
SHSetLocalizedName
ord27
FindExecutableW
ord193
ord103
comctl32
ImageList_Read
InitCommonControlsEx
ImageList_GetIcon
kernel32
WriteProfileStringA
GetSystemInfo
GetNumberFormatW
CreateFileMappingW
CloseHandle
FindFirstVolumeW
DebugBreak
SuspendThread
GetFileAttributesExW
GetConsoleAliasesLengthW
GetConsoleAliasExesA
GetCPInfo
GetTickCount
VirtualFree
GetConsoleAliasesA
SetFileTime
GetPrivateProfileIntA
HeapDestroy
lstrcatA
GetEnvironmentVariableA
IsBadStringPtrA
ReleaseSemaphore
SetThreadLocale
lstrcmpiA
GetLongPathNameA
GetComputerNameExW
DefineDosDeviceW
SetStdHandle
GetDiskFreeSpaceW
SetFileApisToOEM
user32
RegisterClipboardFormatW
MessageBoxW
BroadcastSystemMessageA
SetMenu
LoadStringW
DestroyCursor
GetWindowLongA
CascadeWindows
OpenWindowStationA
CallWindowProcA
GetClassInfoExW
ShowCaret
EnumDesktopsW
wsprintfA
DefFrameProcA
CharUpperA
OemToCharBuffW
CreateWindowStationW
CloseWindowStation
ReplyMessage
MonitorFromPoint
GetNextDlgGroupItem
GetUserObjectInformationA
SetUserObjectInformationW
SetCursor
GetClipboardFormatNameW
ClientToScreen
ValidateRect
GetMonitorInfoW
OemToCharBuffA
ToUnicodeEx
CharToOemW
gdi32
CreateCompatibleBitmap
GetEnhMetaFileHeader
StretchBlt
SetViewportExtEx
GetTextFaceW
Exports
Exports
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.closer Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.cpp Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.artp Size: 1024B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dctp Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gktp Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdtp Size: 1024B - Virtual size: 628B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iftp Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdat1 Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdat2 Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdat3 Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ