Static task
static1
Behavioral task
behavioral1
Sample
feb3e19de9ae387251de230195e0e69cff8bb76b94dbdc49d238348a89e23419.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
feb3e19de9ae387251de230195e0e69cff8bb76b94dbdc49d238348a89e23419.exe
Resource
win10v2004-20220812-en
General
-
Target
feb3e19de9ae387251de230195e0e69cff8bb76b94dbdc49d238348a89e23419
-
Size
398KB
-
MD5
a037dc87225a6597d6acd02fccbf08f6
-
SHA1
0d508eca05c13a7a497bb10cbcb1fd05f82db4ce
-
SHA256
feb3e19de9ae387251de230195e0e69cff8bb76b94dbdc49d238348a89e23419
-
SHA512
7a152e992978eb5cbfa084f15484a61ea25f4e8859c787e4ee908a9a9d5ff7e8e3367ef417d2b56b8d7b1c39fa0b74118534468c90b2c9e6258fbba192f496de
-
SSDEEP
12288:AWk/h9FEa3/qZ8p/3TxZPvLJV+QHZnmu5J+:A3J9uy/889NlXR5mQ+
Malware Config
Signatures
Files
-
feb3e19de9ae387251de230195e0e69cff8bb76b94dbdc49d238348a89e23419.exe windows x86
a56708bbc69045b1e1ad3d5129f0956b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
Imports
kernel32
CloseHandle
WriteFile
GetLocalTime
CreateFileA
LocalAlloc
GetLastError
CreateFileW
ReadFile
FlushFileBuffers
HeapReAlloc
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
HeapSize
HeapCreate
MultiByteToWideChar
RtlUnwind
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
HeapAlloc
WriteProfileStringA
GlobalLock
GlobalUnlock
CopyFileA
FormatMessageA
LocalSize
LocalFree
GetCurrentProcess
GetTickCount
lstrlenA
EnumDateFormatsA
GetProfileIntA
RaiseException
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LoadLibraryW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
GetModuleFileNameW
GetStdHandle
LeaveCriticalSection
EnterCriticalSection
HeapFree
TerminateProcess
EncodePointer
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
user32
CallNextHookEx
LoadAcceleratorsA
MessageBoxW
DestroyWindow
CreateDialogParamW
PostMessageA
GetWindowLongA
GetUserObjectSecurity
SendMessageA
GetDlgItem
EnumDisplaySettingsA
IsWindow
GetClassLongA
LoadIconA
GetWindowTextA
ShowWindow
MonitorFromWindow
GetMonitorInfoA
SystemParametersInfoA
GetMenu
CountClipboardFormats
BeginPaint
EndPaint
DefWindowProcA
PostQuitMessage
MessageBoxA
GetMenuItemInfoA
SetMenuItemInfoA
WindowFromPoint
GetClassNameA
MessageBeep
wsprintfA
gdi32
GetStockObject
SelectObject
SetDCPenColor
Rectangle
MoveToEx
LineTo
CreatePen
DeleteObject
CreateFontIndirectA
comdlg32
FindTextW
advapi32
CryptGetProvParam
CryptReleaseContext
CryptAcquireContextA
shell32
SHCreateDirectoryExA
SHGetFolderPathA
DragQueryFileW
SHGetSpecialFolderPathA
Shell_NotifyIconA
DragQueryFileA
ole32
CoTaskMemFree
OleGetClipboard
ReleaseStgMedium
shlwapi
StrRetToStrA
PathFileExistsW
PathIsRelativeW
PathStripPathW
opengl32
glColor3f
glClear
glRectf
dbghelp
EnumerateLoadedModules
setupapi
SetupCopyOEMInfA
msi
ord144
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 219KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kedata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reza Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hera Size: 1024B - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ