Static task
static1
Behavioral task
behavioral1
Sample
0f6d7c33b3b8a78977b2421c19f35ccc900e41507601b3fccc91e0e2c101aae6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0f6d7c33b3b8a78977b2421c19f35ccc900e41507601b3fccc91e0e2c101aae6.exe
Resource
win10v2004-20220812-en
General
-
Target
0f6d7c33b3b8a78977b2421c19f35ccc900e41507601b3fccc91e0e2c101aae6
-
Size
421KB
-
MD5
809185f43a49116d17bd881822972950
-
SHA1
4e33f9d687dfa7957517e7da1e6043e77692b70b
-
SHA256
0f6d7c33b3b8a78977b2421c19f35ccc900e41507601b3fccc91e0e2c101aae6
-
SHA512
10a5f9ea7a08926e5349a08609ba564542224875c7bba10344c8d824bed69641a0916357bec554c32cd18559f9b2699addaeca99e44929f9184f44f8d331134b
-
SSDEEP
6144:cPUDpE/Q7YOh6reRNVs6rUc5fPsrrqds9dqKhEFes:GUlQQ77Qms6z8rrqu8H
Malware Config
Signatures
Files
-
0f6d7c33b3b8a78977b2421c19f35ccc900e41507601b3fccc91e0e2c101aae6.exe windows x86
89d8f65ac746c8be4b468bfec5fbd278
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
GetForegroundWindow
GetMessageW
ReleaseDC
SendMessageW
DefWindowProcW
GetSystemMetrics
SetForegroundWindow
IsWindow
GetParent
GetDlgItemInt
SetScrollPos
wsprintfW
LoadIconW
PostQuitMessage
FindWindowW
GetCursorPos
EndDialog
RegisterWindowMessageW
RegisterClassW
SetDlgItemInt
CharNextW
PostMessageW
SystemParametersInfoW
GetClientRect
CreateWindowExW
EnableWindow
SetTimer
LoadStringW
WinHelpW
SendDlgItemMessageW
KillTimer
SetScrollRange
DialogBoxParamW
GetDlgItem
PeekMessageW
DispatchMessageW
msvcrt
__set_app_type
__setusermatherr
__p__commode
_adjust_fdiv
__p__fmode
_exit
__getmainargs
_except_handler3
_c_exit
_controlfp
_initterm
__initenv
_XcptFilter
exit
gdi32
GetStockObject
GetClipBox
PatBlt
kernel32
LoadLibraryW
GetVersionExW
HeapQueryInformation
DeleteFileA
HeapUnlock
HeapWalk
GetStartupInfoW
GetSystemTimeAsFileTime
GetCommandLineW
GetCurrentThreadId
HeapReAlloc
FreeLibrary
GetACP
GetModuleHandleA
GetSystemPowerStatus
HeapSetInformation
HeapLock
HeapSummary
GetCurrentProcess
HeapValidate
HeapSize
GetProcAddress
comctl32
InitCommonControlsEx
Sections
.text Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 749KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ