Static task
static1
Behavioral task
behavioral1
Sample
00369bfb51dfbeb0c280fd15eb1c76f26dc224efcbd972dcaa17fabe00aa49f7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
00369bfb51dfbeb0c280fd15eb1c76f26dc224efcbd972dcaa17fabe00aa49f7.exe
Resource
win10v2004-20220812-en
General
-
Target
00369bfb51dfbeb0c280fd15eb1c76f26dc224efcbd972dcaa17fabe00aa49f7
-
Size
572KB
-
MD5
a0165b77b199e9dc1e30d9fca6d44779
-
SHA1
b0e6c18cc18561b76573dc67843ace6d3b1c21b4
-
SHA256
00369bfb51dfbeb0c280fd15eb1c76f26dc224efcbd972dcaa17fabe00aa49f7
-
SHA512
b76e8f9d0be8b4a7e6be30e51a397c9763473d45fdadd4ccc5360ef06dce0d677915edb727d9b40cba2ebd10a8e0804e0b0978acc8d3d6e37246a7fb6225f2be
-
SSDEEP
12288:WBwb2a04AqQCyp5gzmMAWZmkGxNe+lr7UKO+HOd1Mxl:Wyb2k3y7gzcNBHXqiv
Malware Config
Signatures
Files
-
00369bfb51dfbeb0c280fd15eb1c76f26dc224efcbd972dcaa17fabe00aa49f7.exe windows x86
50a391d6ca4dba542b797ba223733c0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetCurrentProcessId
GetCurrentThreadId
GetCurrentThread
GetVersion
GetModuleHandleA
GetTickCount
ExitProcess
GetCommandLineA
VirtualAlloc
LeaveCriticalSection
HeapCreate
CloseHandle
FormatMessageA
FindClose
LoadResource
InitializeCriticalSection
TerminateProcess
LocalFree
FindNextFileA
CreateFileMappingA
GetSystemTimeAsFileTime
GetConsoleCP
GetStartupInfoA
WriteFile
SetUnhandledExceptionFilter
ReadFile
GetCPInfo
CompareStringA
SetStdHandle
GetProcessHeap
GetProcAddress
SetEvent
LoadLibraryExW
DeleteFileA
GetFileSize
GetStringTypeW
GetConsoleMode
GetEnvironmentStrings
GetCurrentProcess
LoadLibraryA
HeapAlloc
GetOEMCP
GetVersionExW
WaitForSingleObject
GlobalFree
lstrlenA
SetHandleCount
ReleaseMutex
EnterCriticalSection
HeapFree
user32
TrackPopupMenu
CreateWindowExA
GetWindowLongA
ScreenToClient
GetDlgItem
IsWindowVisible
TranslateMessage
SetWindowLongA
SetDlgItemTextA
GetWindowRect
ShowWindow
PostQuitMessage
EndDialog
Sections
.text Size: 539KB - Virtual size: 862KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ