Static task
static1
Behavioral task
behavioral1
Sample
03951fdb90eade51254a8b45150d7f3b3059aaa965d26d99a75225426e63d260.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
03951fdb90eade51254a8b45150d7f3b3059aaa965d26d99a75225426e63d260.exe
Resource
win10v2004-20220901-en
General
-
Target
03951fdb90eade51254a8b45150d7f3b3059aaa965d26d99a75225426e63d260
-
Size
532KB
-
MD5
652062157410df82f259e625fd82ee61
-
SHA1
82d7b1e27f4ab52e558bb817c452f754f82ffba8
-
SHA256
03951fdb90eade51254a8b45150d7f3b3059aaa965d26d99a75225426e63d260
-
SHA512
63076fae2733c5cf252e32a7c3fe61d92bd54d6f5c62df44f5e979d247666fdba8878b2cf505fe38de1947bfb41d11abd7fddebc28824e5f940b0010aa7248d6
-
SSDEEP
12288:bthY4d1PQHVXA4akA66Wg433a5sb9lWlONrPiz6vFHANnmsK/XstU3z2IgTZbcWQ:btVdxyVXzO6ksbS0r6Gt
Malware Config
Signatures
Files
-
03951fdb90eade51254a8b45150d7f3b3059aaa965d26d99a75225426e63d260.exe windows x86
b25b1fdf1ae6341fe3983b1f621175ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
GetCurrentProcess
FoldStringW
IsValidLocale
IsBadWritePtr
LCMapStringA
CompareStringW
QueryPerformanceCounter
CloseHandle
GetStringTypeA
LCMapStringW
GetCommandLineA
InterlockedExchange
GetModuleHandleA
TerminateProcess
LeaveCriticalSection
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetACP
FindNextChangeNotification
FreeEnvironmentStringsA
DeleteCriticalSection
InitializeCriticalSection
HeapSize
GetEnvironmentStrings
VirtualFree
TlsAlloc
SetLastError
GetCurrentProcessId
CompareStringA
GetTimeZoneInformation
SetHandleCount
AddAtomW
GetTickCount
GetStringTypeW
TlsSetValue
FindFirstFileA
GetAtomNameA
GetSystemInfo
HeapFree
OpenEventW
OpenMutexA
GetCPInfo
HeapDestroy
GetProcAddress
TlsFree
GetStartupInfoA
SetFilePointer
WriteProfileStringW
RtlUnwind
ReadFile
GetUserDefaultLCID
EnumSystemLocalesA
IsValidCodePage
GetThreadLocale
GetOEMCP
GetVersionExA
GetDateFormatA
GetTimeFormatA
FlushFileBuffers
AllocConsole
GetLocaleInfoA
LoadLibraryA
SetEnvironmentVariableA
GetDriveTypeW
EnterCriticalSection
WriteFile
VirtualProtect
GetStdHandle
GetLocaleInfoW
ExitProcess
ReadConsoleOutputAttribute
GetCurrentThreadId
GetEnvironmentStringsW
HeapAlloc
HeapReAlloc
TlsGetValue
SetStdHandle
CreateMutexA
VirtualQuery
WideCharToMultiByte
GetSystemTimeAsFileTime
VirtualAlloc
GetFileType
GetModuleFileNameA
HeapCreate
GetLastError
MultiByteToWideChar
comctl32
ImageList_ReplaceIcon
CreatePropertySheetPageA
ImageList_SetOverlayImage
ImageList_Create
ImageList_SetIconSize
ImageList_GetBkColor
CreateStatusWindowA
ImageList_DragLeave
ImageList_DragMove
ImageList_DragEnter
ImageList_AddIcon
DestroyPropertySheetPage
InitCommonControlsEx
DrawStatusTextA
ImageList_Add
ImageList_DrawIndirect
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_SetFilter
ImageList_Duplicate
CreateStatusWindowW
ImageList_Destroy
ImageList_BeginDrag
ImageList_DrawEx
user32
GetMenuContextHelpId
DefWindowProcA
GetWindowPlacement
GetWindowLongW
CharToOemBuffW
DrawStateW
SetKeyboardState
RegisterClassExA
SetWindowsHookA
DrawEdge
FindWindowExW
EnumWindowStationsW
MapDialogRect
CopyIcon
RegisterClassA
TabbedTextOutA
LoadAcceleratorsW
CountClipboardFormats
CharToOemA
MessageBoxA
ChangeClipboardChain
GetMenuState
GetUserObjectSecurity
OpenDesktopW
LoadImageW
InvalidateRgn
Sections
.text Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ