Static task
static1
Behavioral task
behavioral1
Sample
03058fd9ad0fc850a6bd9fe076875cc6b067e67391173a83e2eef1985e42fa54.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
03058fd9ad0fc850a6bd9fe076875cc6b067e67391173a83e2eef1985e42fa54.exe
Resource
win10v2004-20220812-en
General
-
Target
03058fd9ad0fc850a6bd9fe076875cc6b067e67391173a83e2eef1985e42fa54
-
Size
699KB
-
MD5
d2ebeb0c8b24da15a25c00c02bf8a08e
-
SHA1
281ed801e874134714c6404ab877b359ef59f000
-
SHA256
03058fd9ad0fc850a6bd9fe076875cc6b067e67391173a83e2eef1985e42fa54
-
SHA512
fc93a374cc04b2524885563da0b6d163a2c1e2240c14c7f374e15deed179d1e88d55431539f0a445a5c8f79f5d0679a2a71af2576ab0cb71acaaa7d77e1e48d7
-
SSDEEP
12288:qeFSssNXNuhFfdhk9dhbM5Ru3aujVNrgOxwTVzCmYSR5knyg:JSssNXNqFzNE3nppgOxwTQgqnJ
Malware Config
Signatures
Files
-
03058fd9ad0fc850a6bd9fe076875cc6b067e67391173a83e2eef1985e42fa54.exe windows x86
18175d0b037d05d018c8de57e9962bcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExW
kernel32
GetCommandLineA
GetTickCount
GetVersion
ExitProcess
HeapAlloc
GetProcessHeap
VirtualAlloc
FindResourceA
Sleep
VirtualFree
HeapCreate
IsValidCodePage
GetModuleHandleW
GetACP
lstrcpynA
FindFirstFileA
ReadFile
TlsFree
RaiseException
InterlockedCompareExchange
HeapSize
WideCharToMultiByte
GetCommandLineW
SizeofResource
lstrlenW
GlobalUnlock
LCMapStringA
lstrlenA
LCMapStringW
InitializeCriticalSection
InterlockedIncrement
CreateFileA
TlsSetValue
GetFileType
CreateEventA
GetTimeZoneInformation
GlobalLock
DuplicateHandle
FindFirstFileW
CompareStringA
FindNextFileW
CompareStringW
GetProcAddress
SetEvent
SetErrorMode
GetWindowsDirectoryA
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
QueryPerformanceCounter
FreeLibrary
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
CloseHandle
WriteConsoleW
LeaveCriticalSection
GetLocaleInfoA
SetEndOfFile
TerminateProcess
GetSystemDirectoryA
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
CreateMutexA
GetCurrentThreadId
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
GetVersionExA
IsDebuggerPresent
GetModuleFileNameW
TlsGetValue
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
CreateEventW
LocalFree
GetOEMCP
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
LoadLibraryW
GetCPInfo
SetStdHandle
FreeEnvironmentStringsW
LoadLibraryExW
LocalAlloc
GetCurrentProcess
DeleteCriticalSection
GetFileAttributesW
HeapDestroy
FindNextFileA
LockResource
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetStdHandle
GetCurrentProcessId
GetLastError
GetModuleHandleA
GetLocalTime
user32
IsWindowVisible
GetKeyState
GetSysColor
GetFocus
MoveWindow
ScreenToClient
EndDialog
GetDesktopWindow
LoadCursorA
ClientToScreen
GetDlgItem
CreateWindowExA
SetWindowTextA
SetCapture
GetWindowRect
GetSystemMetrics
BeginPaint
SetFocus
SetTimer
GetWindowLongA
RegisterClassA
EnableMenuItem
ReleaseDC
PeekMessageA
EnableWindow
ShowWindow
GetMessageA
DestroyWindow
GetDC
EndPaint
IsWindow
SetWindowPos
PostQuitMessage
SetForegroundWindow
GetClientRect
CallWindowProcA
SetCursor
wsprintfA
gdi32
DeleteObject
DeleteDC
SetTextColor
Sections
.text Size: 662KB - Virtual size: 988KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ