Static task
static1
Behavioral task
behavioral1
Sample
1fd6f00a1a29cf6c11c49a9c61b1bb7b76cd1d53b3cd4c76034089ef9da12176.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1fd6f00a1a29cf6c11c49a9c61b1bb7b76cd1d53b3cd4c76034089ef9da12176.exe
Resource
win10v2004-20220812-en
General
-
Target
1fd6f00a1a29cf6c11c49a9c61b1bb7b76cd1d53b3cd4c76034089ef9da12176
-
Size
180KB
-
MD5
782d734917711c498f06632065be646e
-
SHA1
58991ec8242cc90ec83721d07d4a109f2f672ae7
-
SHA256
1fd6f00a1a29cf6c11c49a9c61b1bb7b76cd1d53b3cd4c76034089ef9da12176
-
SHA512
9d637295ae45d6e77bcf4c8a0b750fbfebd377897706ffcfcdef90dd31e0407a625262acb4b3db0c604d5a11c34f8e13c5451a8d3d5b2732738262b0667b00a2
-
SSDEEP
3072:5nyYwifa6OMUoNbn8m17PAdI3F0+G6MGkgSvP+xTu867FH5lHvYXF04hg:5yYwiv5bn8k7PAdICJjOxTu8AF0Xhh
Malware Config
Signatures
Files
-
1fd6f00a1a29cf6c11c49a9c61b1bb7b76cd1d53b3cd4c76034089ef9da12176.exe windows x86
76d8e0e5e12cac7cc9dabe529277d95d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
LCMapStringW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
TerminateProcess
WriteFile
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
GetStringTypeA
GetStringTypeW
SetEndOfFile
MulDiv
GetCurrentProcess
MultiByteToWideChar
GetProcessTimes
FileTimeToLocalFileTime
FileTimeToSystemTime
LoadLibraryA
lstrlenA
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
VirtualProtect
WideCharToMultiByte
FreeEnvironmentStringsW
HeapAlloc
RtlUnwind
HeapReAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetLastError
CloseHandle
ReadFile
user32
CreatePopupMenu
AppendMenuA
TrackPopupMenuEx
DestroyMenu
CreateWindowExA
ShowWindow
IsWindowEnabled
MoveWindow
DestroyWindow
GetCursorPos
WindowFromPoint
GetWindowDC
SetRect
GetSysColorBrush
FillRect
SetWindowRgn
GetDC
GetWindowRect
SetCursorPos
GetSystemMenu
GetMenuItemCount
RemoveMenu
DrawMenuBar
gdi32
CreateDIBSection
BitBlt
GetDIBits
SetDIBitsToDevice
GetTextExtentPoint32A
ExtTextOutA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
TextOutA
CreateEllipticRgn
GetDeviceCaps
CreateFontA
Polygon
GetStockObject
CreatePolygonRgn
FillRgn
DeleteObject
DeleteDC
advapi32
OpenEventLogA
ClearEventLogA
ReportEventA
GetNumberOfEventLogRecords
GetOldestEventLogRecord
BackupEventLogA
CloseEventLog
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ