Static task
static1
Behavioral task
behavioral1
Sample
2418b0dab1e2fd1538066a99c8839b9089e3936043014238e2fa80f68170049f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2418b0dab1e2fd1538066a99c8839b9089e3936043014238e2fa80f68170049f.exe
Resource
win10v2004-20220812-en
General
-
Target
2418b0dab1e2fd1538066a99c8839b9089e3936043014238e2fa80f68170049f
-
Size
117KB
-
MD5
498dd50a6d6d175c0609c1892b4aedf1
-
SHA1
2f87fcb10cfcaa9b6b78c79677230c26199dbc63
-
SHA256
2418b0dab1e2fd1538066a99c8839b9089e3936043014238e2fa80f68170049f
-
SHA512
0c8f14b4c71ba336879c8276e8bfa20ff4125029d039756a9d9bfa5a4218813f4f9c349cbf9bd20436e4205b482f7e034bc8f605c058153ca659c5c4722a51ac
-
SSDEEP
3072:llYHZhfiFXNHMgPnGfMSKvaV/E77Xj9Qxl:LYHWXNHMknGfQaV/EHXjix
Malware Config
Signatures
Files
-
2418b0dab1e2fd1538066a99c8839b9089e3936043014238e2fa80f68170049f.exe windows x86
f1444a48217eeb6911cadc7e19304568
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfoExW
GetDiskFreeSpaceW
FindResourceExA
CreateEventW
CloseHandle
GetStringTypeExW
SetSystemPowerState
InterlockedCompareExchange
GetLongPathNameA
EnumResourceLanguagesA
TlsGetValue
RemoveDirectoryA
PostQueuedCompletionStatus
DeviceIoControl
IsBadReadPtr
GetEnvironmentVariableW
InterlockedDecrement
GetSystemTimeAdjustment
VerifyVersionInfoW
FlushInstructionCache
ConnectNamedPipe
_llseek
InterlockedExchangeAdd
IsValidLanguageGroup
GlobalFix
GetVolumeInformationA
QueueUserAPC
CallNamedPipeA
SearchPathA
_lcreat
MapViewOfFile
PostQueuedCompletionStatus
GetFileSizeEx
GetTempPathA
GlobalWire
Process32FirstW
PostQueuedCompletionStatus
lstrcatW
FindFirstVolumeW
SetTapePosition
CreateTimerQueue
psapi
GetModuleFileNameExA
GetDeviceDriverFileNameW
EmptyWorkingSet
user32
SendDlgItemMessageA
DdeFreeStringHandle
RedrawWindow
GetLastInputInfo
GetMenuStringA
EditWndProc
SetScrollInfo
SetForegroundWindow
SetScrollPos
GetTopWindow
IsIconic
LoadIconW
RegisterClipboardFormatA
MapVirtualKeyW
DdeUninitialize
SetMessageExtraInfo
EnumThreadWindows
AnimateWindow
DdeGetLastError
GetMessageTime
CreateCaret
GetClassWord
OpenInputDesktop
DestroyMenu
LoadMenuIndirectW
SetDlgItemTextW
IMPSetIMEW
GetMenuItemInfoA
GetAncestor
DrawFrameControl
FlashWindowEx
DialogBoxIndirectParamW
VkKeyScanW
IsWindow
PtInRect
SetUserObjectSecurity
CharNextA
GetSysColorBrush
ChangeMenuW
SetShellWindow
SetWindowLongW
TranslateMDISysAccel
InvertRect
SendMessageTimeoutA
ToAscii
PostThreadMessageW
TabbedTextOutW
LockWorkStation
GetWindow
RegisterDeviceNotificationW
IsCharAlphaNumericA
IsZoomed
FindWindowExA
LoadStringA
GetWindowTextA
ChildWindowFromPoint
GetKeyNameTextW
MapVirtualKeyA
DefMDIChildProcW
DdeInitializeA
UnhookWinEvent
RealChildWindowFromPoint
GetMenuContextHelpId
GetMenuItemCount
InflateRect
DestroyIcon
UnregisterHotKey
BeginPaint
CallMsgFilterA
EnableScrollBar
SubtractRect
IsCharLowerW
ReuseDDElParam
GetMenuItemRect
ReleaseCapture
VkKeyScanExW
IsDlgButtonChecked
EnumPropsExW
ExcludeUpdateRgn
LookupIconIdFromDirectoryEx
GetMenuBarInfo
EnumPropsA
WaitMessage
FillRect
GetComboBoxInfo
SetSystemCursor
BroadcastSystemMessageA
AppendMenuW
CountClipboardFormats
AttachThreadInput
SetWindowContextHelpId
IsWindowUnicode
DdeKeepStringHandle
DdeEnableCallback
RegisterClipboardFormatW
GetMessageExtraInfo
GetProcessDefaultLayout
IsDialogMessageA
PostQuitMessage
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 503B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 37KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 445B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE