Static task
static1
Behavioral task
behavioral1
Sample
00f87e835fc926a3ef7c6a867e9034add93a311aa332af03893a24d4a8a7b9f7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
00f87e835fc926a3ef7c6a867e9034add93a311aa332af03893a24d4a8a7b9f7.exe
Resource
win10v2004-20220812-en
General
-
Target
00f87e835fc926a3ef7c6a867e9034add93a311aa332af03893a24d4a8a7b9f7
-
Size
250KB
-
MD5
0750653673621fb9b299d59f7910bc6f
-
SHA1
a8254ded065b1f221f9963b5e3d941416bef1721
-
SHA256
00f87e835fc926a3ef7c6a867e9034add93a311aa332af03893a24d4a8a7b9f7
-
SHA512
6c11c6cc6319efbf14738f0b8f85352c096a253a52bbcff15c6564c2d0eedaddbbc82147f0a57a3ada17fbea62f1e59c202426348c2744603f484f027092f6a8
-
SSDEEP
3072:emrIvWEINyWbGorZlLurlZSJKDEiA7g1g5jUV/hQxhYTTy8Sr8fmHZKo2kqIiTOb:emafIMHyl86eEi1uoyxOxosOhx
Malware Config
Signatures
Files
-
00f87e835fc926a3ef7c6a867e9034add93a311aa332af03893a24d4a8a7b9f7.exe windows x86
223aa88343cf1c856d55fc206fb62c58
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetWindowRect
SendDlgItemMessageW
MoveWindow
PostQuitMessage
GetClientRect
DestroyWindow
ShowWindow
CreateDialogParamW
DefWindowProcW
MessageBoxW
DestroyMenu
ScreenToClient
PostMessageW
LoadStringW
EnumWindowStationsW
TrackPopupMenuEx
CheckMenuItem
GetSubMenu
LoadMenuW
SetWindowPos
LoadImageW
LoadCursorW
RegisterClassW
CreateWindowExW
UpdateWindow
FindWindowW
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
IsIconic
BeginPaint
DrawIconEx
SystemParametersInfoW
DrawTextW
EndPaint
EnableWindow
SetForegroundWindow
SendMessageW
GetDlgItem
kernel32
CreateFileW
GetModuleHandleW
WriteFile
ReadProcessMemory
OpenProcess
GetModuleFileNameW
GetCurrentProcessId
GetCommandLineW
CreateMutexW
OpenMutexW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
GetStartupInfoA
ExitProcess
GetVersionExA
GetVersionExW
InitializeCriticalSection
DeleteCriticalSection
GetUserDefaultLangID
lstrlenW
ReadFile
CloseHandle
GetFileSize
comctl32
InitCommonControlsEx
comdlg32
GetSaveFileNameW
GetOpenFileNameW
msvcr71
swprintf
__security_error_handler
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
_onexit
__dllonexit
memset
strncmp
strncpy
strstr
swscanf
wcsrchr
__CxxFrameHandler
??2@YAPAXI@Z
wcscmp
??_V@YAXPAX@Z
??_U@YAPAXI@Z
wcscat
free
??3@YAXPAX@Z
wcslen
wcscpy
_except_handler3
_controlfp
Sections
.code Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ