Static task
static1
Behavioral task
behavioral1
Sample
f2f2087ce3907a2cfa4eaa36c563805df45c372006c047c0afea3f69e08d1e87.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f2f2087ce3907a2cfa4eaa36c563805df45c372006c047c0afea3f69e08d1e87.exe
Resource
win10v2004-20220812-en
General
-
Target
f2f2087ce3907a2cfa4eaa36c563805df45c372006c047c0afea3f69e08d1e87
-
Size
862KB
-
MD5
48687e74f1c7690b627449a18752da20
-
SHA1
0f7b6b3a7b9bea98fcaed16face026325a56f8be
-
SHA256
f2f2087ce3907a2cfa4eaa36c563805df45c372006c047c0afea3f69e08d1e87
-
SHA512
c8d868f3406b404a6b0f30aed8e1a91f80c8f71b3b4d7c132a668f30d885f0925e3394d6588e676797ca22a5be2fad5fc39bfab5b31fa76d92c35a519ccfc364
-
SSDEEP
24576:rqJ+GjQYTHweeG002OFGZaXR4e+U3s0UqA:rqJ+GjQCHweI02OFGsB4KH1A
Malware Config
Signatures
Files
-
f2f2087ce3907a2cfa4eaa36c563805df45c372006c047c0afea3f69e08d1e87.exe windows x86
d757645fac9a3c3895270456883c7a40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
VirtualAlloc
GetOEMCP
Sleep
VirtualFree
WriteFile
HeapCreate
CreateProcessA
GetEnvironmentStrings
GetModuleHandleW
GetACP
CloseHandle
ReadFile
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
GetCPInfo
GetCommandLineW
LockResource
SizeofResource
RemoveDirectoryA
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
lstrlenA
UnmapViewOfFile
LCMapStringW
LoadLibraryExW
LeaveCriticalSection
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
ExpandEnvironmentStringsA
DuplicateHandle
FindNextFileA
CreateFileMappingA
CompareStringA
FindFirstFileA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
GetStartupInfoA
LoadLibraryA
GetVersionExA
QueryPerformanceCounter
SetEvent
GetCurrentThread
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
SetEndOfFile
GetConsoleMode
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
SetFileAttributesA
CreateThread
SetFilePointer
MultiByteToWideChar
UnhandledExceptionFilter
GetPrivateProfileStringA
LoadLibraryExA
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentVariableA
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
FreeLibrary
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WideCharToMultiByte
GetTempPathA
SetStdHandle
FreeEnvironmentStringsW
SetErrorMode
LocalAlloc
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
WaitForSingleObject
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetVersion
GetCommandLineA
GetLastError
GetTickCount
GetModuleHandleA
GetCurrentProcessId
LoadLibraryW
GetCurrentThreadId
advapi32
RegCloseKey
RegQueryValueExA
RegQueryInfoKeyA
user32
MessageBoxA
EndDialog
LoadIconA
LoadCursorA
ScreenToClient
GetDlgItem
GetWindowLongA
CheckMenuItem
SetWindowTextA
SetWindowLongA
ReleaseCapture
SetCapture
GetWindowRect
GetSystemMetrics
BeginPaint
SetFocus
CreateWindowExA
GetSubMenu
LoadStringA
PeekMessageA
EnableWindow
UpdateWindow
GetMessageA
DestroyWindow
GetClientRect
GetDC
DispatchMessageA
IsWindow
SetWindowPos
ReleaseDC
InvalidateRect
wsprintfA
CallWindowProcA
SystemParametersInfoA
gdi32
SetBkColor
DeleteDC
SetTextColor
Sections
.text Size: 826KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ