Static task
static1
Behavioral task
behavioral1
Sample
1487dd9b9d5df6b925292023f38dac3fe2d92931943c3f260ca54a7e5c16ff7f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1487dd9b9d5df6b925292023f38dac3fe2d92931943c3f260ca54a7e5c16ff7f.exe
Resource
win10v2004-20220812-en
General
-
Target
1487dd9b9d5df6b925292023f38dac3fe2d92931943c3f260ca54a7e5c16ff7f
-
Size
248KB
-
MD5
59f7a6e42a94f80faa9997c952303d1b
-
SHA1
2b78c5cd0f83dc945ad9e3ce37da48c36c50f9a9
-
SHA256
1487dd9b9d5df6b925292023f38dac3fe2d92931943c3f260ca54a7e5c16ff7f
-
SHA512
506a0b5eed7648ec8a90d2eb4f60ce8122f799394f3def3bd3a90fba358c24c7a298e82cbe604e67ba4fe9ee9ff0d0d77ab3f6e862ab54743c55446082b0370e
-
SSDEEP
3072:F2OemzGfHjvL2z4PMsJrmTguNGGVNzgg+UTDdhfDGy+H+U9ABylfz/Cr8IxG8A5c:F2ODzGfDvL2E0sJMguNxgrv9l9SXxd
Malware Config
Signatures
Files
-
1487dd9b9d5df6b925292023f38dac3fe2d92931943c3f260ca54a7e5c16ff7f.exe windows x86
7dfb0340ce2ea2fb0517a0d33560f132
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LocalReAlloc
lstrlenA
SetFilePointer
ReadFile
VirtualFree
MoveFileA
VirtualAllocEx
LoadLibraryExA
GetCommandLineA
lstrcpyA
RaiseException
ExitProcess
ExitThread
SetThreadLocale
SetHandleCount
WriteFile
GetVersionExA
SizeofResource
IsBadReadPtr
WaitForSingleObject
SetLastError
VirtualAlloc
IsBadHugeReadPtr
MoveFileExA
GetCommandLineW
LocalFree
GetProcAddress
MulDiv
lstrcatA
lstrcmpA
lstrcmpiA
user32
GetKeyboardType
GetMenuItemID
GetKeyboardLayoutNameA
GetWindowLongA
GetMessagePos
GetSystemMenu
GetDC
InflateRect
GetMenuStringA
IsWindow
GetKeyNameTextA
GetClientRect
GetClassNameA
GetFocus
GetWindowRect
IsZoomed
IsChild
GetDlgItem
GetWindowThreadProcessId
GetCursor
IsWindowVisible
GetForegroundWindow
IsIconic
GetScrollInfo
GetTopWindow
GetDCEx
gdi32
CopyEnhMetaFileA
CreateBitmap
BitBlt
Sections
.text Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES40 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES45 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES11 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES77 Size: 512B - Virtual size: 185B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES04 Size: 512B - Virtual size: 283B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES59 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES63 Size: 512B - Virtual size: 83B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES21 Size: 512B - Virtual size: 259B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ