Static task
static1
Behavioral task
behavioral1
Sample
7d864ddef99236bba4914506bd445b858b38004290096372d46511455be9e62c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7d864ddef99236bba4914506bd445b858b38004290096372d46511455be9e62c.exe
Resource
win10v2004-20220812-en
General
-
Target
7d864ddef99236bba4914506bd445b858b38004290096372d46511455be9e62c
-
Size
1.2MB
-
MD5
808f347ed8f087080228afcf9c41f760
-
SHA1
1b5f70ea610fe9872efd637d85caa5e354bd3736
-
SHA256
7d864ddef99236bba4914506bd445b858b38004290096372d46511455be9e62c
-
SHA512
87ada674338230b28f50b8ba44fcd584bbf48509137fc7c9157b01825507c27e05eb595a8f72b0126be7a6a43bdfc0a89acfdbead5ca511784b07d5fbb2779d0
-
SSDEEP
24576:PGSG+kYnskIrTrF6E1yx7FdvP6WBDG+kYnskIr:PGSGxYns5T5lYx7mWBGxYns5
Malware Config
Signatures
Files
-
7d864ddef99236bba4914506bd445b858b38004290096372d46511455be9e62c.exe windows x86
82268dd8e27c919c60d9e1ad9f605b5d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowTextA
CreateDesktopA
LoadMenuA
wsprintfA
GetWindowLongW
PostMessageA
IsChild
DrawStateA
LoadImageW
CharToOemA
IsCharLowerW
GetDlgItemTextA
GetCaretPos
CreateWindowExA
LoadCursorA
PeekMessageA
comsvcs
CoLoadServices
RecycleSurrogate
kernel32
ReadFile
FormatMessageA
CreateFileA
GetConsoleTitleW
LoadLibraryW
GetComputerNameA
GetConsoleAliasW
GetPrivateProfileIntA
ReadConsoleA
SetEnvironmentVariableW
lstrcpynA
GetDateFormatW
GetProcessId
GetCurrentDirectoryA
GetCommandLineA
GetModuleHandleA
VirtualProtect
GetNumberFormatW
GetAtomNameA
WaitForSingleObject
GetGeoInfoA
dsprop
CheckADsError
CrackName
ErrMsgParam
uxtheme
GetThemeRect
DrawThemeBackground
GetThemeBool
GetThemeEnumValue
CloseThemeData
GetThemeTextExtent
GetWindowTheme
SetWindowTheme
GetThemeColor
GetThemeInt
GetThemeTextMetrics
DrawThemeEdge
OpenThemeData
GetThemeSysSize
Sections
.text Size: 876KB - Virtual size: 875KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ