Static task
static1
Behavioral task
behavioral1
Sample
f8028230b8f5dfcff54d286fef79856589bba86de363b231c610b1d53557fffc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8028230b8f5dfcff54d286fef79856589bba86de363b231c610b1d53557fffc.exe
Resource
win10v2004-20220812-en
General
-
Target
f8028230b8f5dfcff54d286fef79856589bba86de363b231c610b1d53557fffc
-
Size
159KB
-
MD5
796c8409837d5037330b54ab50715fa8
-
SHA1
2ca9da9b6931fef0f3aba7773f6e3ec3d696d1ac
-
SHA256
f8028230b8f5dfcff54d286fef79856589bba86de363b231c610b1d53557fffc
-
SHA512
6c014d9dc8d7257713f2fb8a33251198567395a3cfa30c7770ea59377921327af8e4d425ed7b05f5a69e44d3a7db5ff7c060b46a3b057fd0d26ba2661a7aa162
-
SSDEEP
3072:fV7b4YFt/YKjTg9pxnQ4hC+n/Faeq9N/+b4p6YC9a5sITB:fV70YFTg9LQg/weqH+EKq
Malware Config
Signatures
Files
-
f8028230b8f5dfcff54d286fef79856589bba86de363b231c610b1d53557fffc.exe windows x86
60fa3ba044ca7c0e634b9e64b0416dd3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetPropW
UnregisterClassA
EnumThreadWindows
SetDlgItemTextW
DestroyWindow
MessageBoxA
OffsetRect
GetForegroundWindow
wsprintfA
RegisterClassA
SetRect
PostThreadMessageW
SetScrollPos
LoadMenuW
CreatePopupMenu
FindWindowA
LoadIconW
GetKeyState
LoadImageW
EqualRect
IsDialogMessageA
CharNextA
TrackPopupMenu
GetDC
GetParent
GetWindowRect
DestroyMenu
SetActiveWindow
kernel32
FreeEnvironmentStringsA
IsValidCodePage
GetEnvironmentVariableW
DebugBreak
CloseHandle
LCMapStringW
GetModuleHandleW
WaitForSingleObject
CreateMutexW
GetExitCodeProcess
LoadLibraryW
GetCommandLineA
ResetEvent
IsBadReadPtr
IsProcessorFeaturePresent
GetCPInfo
GetDriveTypeW
GlobalUnlock
GlobalFindAtomA
FreeEnvironmentStringsW
DeleteFileA
WritePrivateProfileStringA
GetSystemInfo
GetTempFileNameA
gdi32
SetROP2
GetClipBox
SetBkColor
RealizePalette
SetMapMode
GetTextMetricsA
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
CryptReleaseContext
SetSecurityDescriptorDacl
ole32
CoTaskMemRealloc
CoCreateInstance
OleUninitialize
CreateStreamOnHGlobal
msvcrt
wcsrchr
exit
__p__commode
__CxxFrameHandler
_amsg_exit
fprintf
__dllonexit
__setusermatherr
_wcsicmp
__set_app_type
__getmainargs
Sections
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ