Static task
static1
Behavioral task
behavioral1
Sample
25b84ade00076e05d7f35a47b5a25940fd38b60442fab3abce1efd065303f18c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
25b84ade00076e05d7f35a47b5a25940fd38b60442fab3abce1efd065303f18c.exe
Resource
win10v2004-20220812-en
General
-
Target
25b84ade00076e05d7f35a47b5a25940fd38b60442fab3abce1efd065303f18c
-
Size
317KB
-
MD5
0aa9ccee093a1adf1bb24c2adbde6b30
-
SHA1
12b2dc0ec8a2b6f8c1ecc12f34e9122d895da0ff
-
SHA256
25b84ade00076e05d7f35a47b5a25940fd38b60442fab3abce1efd065303f18c
-
SHA512
7d4804a9e1838a27d41ae7fa701f3db21ca8d1fb8049b62fc87e3e165863d45e25094c35ba78195569ad7e9ba77a084c7a97c1df0f175a30e87e86513aa7f112
-
SSDEEP
1536:GTGYPNFvsmboAmTVViJSGz8j4YBUAFiv9++IFI0ocLjVKwv/YH63zlIpe35:Gq2NFihTzs8jVBUW+sIgjnYa3zypw5
Malware Config
Signatures
Files
-
25b84ade00076e05d7f35a47b5a25940fd38b60442fab3abce1efd065303f18c.exe windows x86
8e911a60290a5955fc198f4a78afc87e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
StrokePath
GetObjectType
GetObjectType
GetObjectType
GetObjectType
GetTextExtentPointW
GetPaletteEntries
GetPath
GetObjectType
CreateFontIndirectW
PlayMetaFile
GetObjectType
GetObjectType
DescribePixelFormat
GetObjectType
GetObjectType
GetObjectType
GetObjectType
GetObjectType
CreateRectRgnIndirect
GetLogColorSpaceA
ScaleViewportExtEx
CreateBrushIndirect
GetObjectType
GetObjectType
GetEnhMetaFileBits
FillRgn
SetMiterLimit
GetObjectType
GetObjectType
GetTextExtentPointW
GetTextExtentPointI
GetObjectType
GetObjectType
GetObjectType
PlayMetaFileRecord
GetObjectType
ResizePalette
GetObjectType
CopyMetaFileA
user32
GetGuiResources
IsIconic
GetClientRect
GetSysColorBrush
EnumDisplaySettingsExW
GetClientRect
GetSysColorBrush
GetClientRect
wsprintfA
TileChildWindows
LoadIconA
GetSysColorBrush
LoadIconA
EnableScrollBar
GetMenuStringA
ShowOwnedPopups
LoadIconA
LoadIconA
FlashWindow
IsIconic
LoadMenuIndirectW
GetSysColorBrush
GetCaretBlinkTime
GetClientRect
GetClientRect
GetScrollInfo
LoadIconA
IsIconic
LoadAcceleratorsW
LoadIconA
GetSysColorBrush
CreateDesktopW
GetSysColorBrush
GetSubMenu
CreatePopupMenu
RegisterClassA
GetClipboardFormatNameA
CloseDesktop
GetClientRect
GetClientRect
ShowWindow
LoadIconA
GetClientRect
CreateIconIndirect
GetSysColorBrush
LoadIconA
LoadIconA
FindWindowExA
GetClientRect
SetKeyboardState
LoadIconA
MonitorFromWindow
LoadIconA
CreateDesktopA
IsIconic
IsIconic
GetClientRect
GetSysColorBrush
DefMDIChildProcW
GetSysColorBrush
MapVirtualKeyA
IsDialogMessageW
GetMessageExtraInfo
DragDetect
GetClientRect
LoadBitmapA
IsIconic
UnhookWindowsHook
GetDlgItemTextA
kernel32
WriteProfileStringW
CreateFileW
BackupRead
QueryPerformanceCounter
WaitNamedPipeA
QueryPerformanceCounter
LocalHandle
QueryPerformanceCounter
QueryPerformanceCounter
QueryPerformanceCounter
QueryPerformanceCounter
QueryPerformanceCounter
QueryPerformanceCounter
FindAtomA
LocalReAlloc
DeviceIoControl
IsBadHugeReadPtr
GetProfileIntW
HeapReAlloc
QueryPerformanceCounter
GetStringTypeExA
HeapReAlloc
QueryPerformanceCounter
QueryPerformanceCounter
QueryPerformanceCounter
QueryPerformanceCounter
CreateHardLinkA
QueryPerformanceCounter
QueryPerformanceCounter
GetPrivateProfileStructW
QueryPerformanceCounter
lstrcmpW
QueryPerformanceCounter
QueryPerformanceCounter
OpenJobObjectW
QueryPerformanceCounter
OpenFileMappingW
QueryPerformanceCounter
QueryPerformanceCounter
GetCurrentDirectoryA
QueryPerformanceCounter
ReadConsoleOutputW
QueryPerformanceCounter
QueryPerformanceCounter
QueryPerformanceCounter
QueryPerformanceCounter
VirtualProtectEx
DeleteCriticalSection
Sections
.oqhc Size: 278KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.npwl Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.guoy Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gthf Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kmrd Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kjgk Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aywe Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE