Static task
static1
Behavioral task
behavioral1
Sample
2f014b4c191ab1df840956a3f6d73d57820da8919b1ec75b282248b82ef25088.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2f014b4c191ab1df840956a3f6d73d57820da8919b1ec75b282248b82ef25088.exe
Resource
win10v2004-20220812-en
General
-
Target
2f014b4c191ab1df840956a3f6d73d57820da8919b1ec75b282248b82ef25088
-
Size
119KB
-
MD5
842a2edf8eb59a9a446806dc895996e0
-
SHA1
8ce91662caa5adacbcc36a8928a2d0c74d9a54e6
-
SHA256
2f014b4c191ab1df840956a3f6d73d57820da8919b1ec75b282248b82ef25088
-
SHA512
1b59e0f36f0672c5038428945b2f7eee9f2507cf049cdee66d77ca21094be9879a535d742d892716cbfef80d4f404ce564f10cf9d442b1a0390512117461856d
-
SSDEEP
3072:CggzrKSQADE7JSfrmO0XcNGHAaFT8OHwvz:CprYAgANf8HA6o
Malware Config
Signatures
Files
-
2f014b4c191ab1df840956a3f6d73d57820da8919b1ec75b282248b82ef25088.exe windows x86
8685a2d5149490d34e4ff67e45ccabaf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadTimes
GetComputerNameExA
GetFileSizeEx
FlushViewOfFile
CancelDeviceWakeupRequest
GetThreadTimes
CloseHandle
MapViewOfFile
GetThreadTimes
CreateMailslotA
GetTickCount
WriteFileEx
OpenFileMappingA
GetLogicalDriveStringsA
MulDiv
GlobalDeleteAtom
SetEndOfFile
SetSystemTimeAdjustment
TlsAlloc
GetThreadTimes
LCMapStringW
GetVolumePathNameA
GetDefaultCommConfigA
DebugBreak
FileTimeToLocalFileTime
CompareStringW
SetProcessShutdownParameters
GlobalSize
RtlFillMemory
CompareFileTime
user32
DdeFreeDataHandle
GetFocus
PostThreadMessageA
GetLastInputInfo
CreateAcceleratorTableW
AnimateWindow
LoadStringW
DdeReconnect
LoadAcceleratorsW
ArrangeIconicWindows
CreateIconIndirect
ReleaseCapture
LoadIconA
SetDlgItemTextA
MessageBoxIndirectW
EnumDisplayMonitors
OpenWindowStationA
TranslateAcceleratorW
SendDlgItemMessageW
DdeInitializeA
GetMessagePos
EnumClipboardFormats
IMPGetIMEW
GetCaretBlinkTime
RegisterWindowMessageA
GetWindowLongA
CreateIcon
TileChildWindows
ValidateRgn
CreateDesktopA
DestroyAcceleratorTable
GetMonitorInfoW
SetForegroundWindow
ChildWindowFromPointEx
BroadcastSystemMessageA
GetDoubleClickTime
GetWindowPlacement
DdeAbandonTransaction
DrawFocusRect
EnumThreadWindows
PtInRect
SetMenuDefaultItem
GetKeyState
DrawEdge
SetCursor
GetKeyboardLayoutNameW
PostQuitMessage
ImpersonateDdeClientWindow
GetProcessDefaultLayout
WinHelpA
LoadCursorA
UnpackDDElParam
OemKeyScan
CharPrevA
DrawIconEx
DlgDirListComboBoxW
GetClassInfoExW
DdeUnaccessData
GetSysColor
SetWindowsHookW
GetClassInfoW
IsWindowUnicode
GetClipCursor
GetPropW
SetDlgItemInt
GetTopWindow
CharLowerW
SendMessageTimeoutA
UnregisterHotKey
SendDlgItemMessageA
DefWindowProcA
GetListBoxInfo
ExcludeUpdateRgn
LoadIconW
MsgWaitForMultipleObjectsEx
DrawTextA
SetClassLongW
CharUpperBuffW
BeginPaint
IsHungAppWindow
GetInputState
GetShellWindow
RedrawWindow
SystemParametersInfoA
GetDlgCtrlID
WinHelpW
MonitorFromRect
SetWinEventHook
SetThreadDesktop
SendMessageCallbackA
SetScrollPos
LookupIconIdFromDirectoryEx
LockSetForegroundWindow
GetMenuItemRect
MonitorFromWindow
psapi
GetMappedFileNameA
GetDeviceDriverBaseNameA
GetDeviceDriverFileNameA
Sections
.text Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 40KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 317B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE