Static task
static1
Behavioral task
behavioral1
Sample
270fcc3ce9bb43b115449da1642ca080dcd5db6114261b0eb62151109d0c7ffc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
270fcc3ce9bb43b115449da1642ca080dcd5db6114261b0eb62151109d0c7ffc.exe
Resource
win10v2004-20220812-en
General
-
Target
270fcc3ce9bb43b115449da1642ca080dcd5db6114261b0eb62151109d0c7ffc
-
Size
239KB
-
MD5
0ab521d3e37c76473e357a36d4505892
-
SHA1
914ba43a44e5ed56079c430313e4a3401e8ddecb
-
SHA256
270fcc3ce9bb43b115449da1642ca080dcd5db6114261b0eb62151109d0c7ffc
-
SHA512
17a1d2ab17bc1ba2079baa4d067b43bc4a87b4a86b0e35087bdfb55b26ed4040505dfbcdbbfcbb6ec758ed911318f7db1c57b8e8a8d701809f55ab79d443caaa
-
SSDEEP
6144:1cbF9JTZHVIaOd0o528sCy/h2kBQDZ0AECiU:u4aOd9sCya7ECZ
Malware Config
Signatures
Files
-
270fcc3ce9bb43b115449da1642ca080dcd5db6114261b0eb62151109d0c7ffc.exe windows x86
16982e592c6ec23ff9fe1b66fd74e18f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
GetSystemDefaultLangID
GlobalDeleteAtom
GetSystemDefaultLCID
GetProcessHeap
EnumLanguageGroupLocalesA
FindFirstVolumeMountPointA
GetTempFileNameW
FindResourceExA
GetDefaultCommConfigA
GetQueuedCompletionStatus
GetUserDefaultLangID
DosDateTimeToFileTime
QueueUserWorkItem
ExitProcess
SetVolumeLabelA
FatalAppExitA
GetProcessVersion
GlobalFlags
GlobalGetAtomNameW
FreeEnvironmentStringsA
LocalAlloc
WritePrivateProfileSectionW
GetBinaryTypeA
GetProcessHeaps
GetNamedPipeInfo
DnsHostnameToComputerNameW
SetFilePointer
GetPrivateProfileSectionW
DeleteVolumeMountPointW
EndUpdateResourceW
GlobalLock
FindFirstVolumeMountPointW
MapViewOfFileEx
GetDiskFreeSpaceExW
LocalFree
Process32First
GetProcessAffinityMask
CreateMailslotA
GlobalGetAtomNameA
WriteProfileStringW
ResetEvent
GlobalWire
EnumUILanguagesW
user32
SendMessageTimeoutW
ExcludeUpdateRgn
GetMenuItemInfoA
IsCharAlphaW
GetSysColor
CheckRadioButton
DlgDirListW
SetProcessDefaultLayout
CharPrevW
ScrollWindow
CheckMenuItem
GetKeyState
CreatePopupMenu
CreateDesktopA
BroadcastSystemMessageW
UnregisterClassA
OemToCharA
CreateCaret
CascadeChildWindows
IsHungAppWindow
CopyRect
SetCursor
LoadBitmapW
EnumDesktopsW
LoadMenuIndirectW
GetClassNameW
LoadBitmapA
TrackPopupMenuEx
GetMenu
SetWinEventHook
SetClipboardViewer
DispatchMessageW
SetWindowsHookA
MsgWaitForMultipleObjectsEx
GetWindowPlacement
GetLastActivePopup
SetWindowsHookW
SetKeyboardState
DdePostAdvise
AppendMenuW
LoadImageW
DestroyCursor
HiliteMenuItem
SwitchToThisWindow
WINNLSGetIMEHotkey
GetAncestor
UpdateLayeredWindow
CharToOemW
ChangeMenuW
ModifyMenuA
RegisterHotKey
MapVirtualKeyW
DdeGetLastError
DdeCreateStringHandleA
OpenIcon
MonitorFromRect
GetMenuStringA
InvalidateRgn
GetKBCodePage
SendDlgItemMessageA
RegisterWindowMessageW
GetDialogBaseUnits
UnhookWinEvent
IsWindow
GetWindowLongW
CharNextExA
ScreenToClient
ShowCursor
RemoveMenu
GetParent
DefMDIChildProcW
DrawStateA
FindWindowW
ScrollDC
SendNotifyMessageW
DrawTextA
SetRect
LoadCursorFromFileA
CopyAcceleratorTableA
PostQuitMessage
DdeCreateStringHandleW
GetFocus
BroadcastSystemMessageA
DefFrameProcW
CallMsgFilterA
GetAltTabInfoW
ChangeClipboardChain
PostMessageW
DdeDisconnect
GetMenuItemRect
OemToCharW
GetWindowModuleFileNameA
EnumClipboardFormats
Sections
.text Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ