Static task
static1
Behavioral task
behavioral1
Sample
def31ecac955867e02fc94fc68e0651f5c526a98cbcd3bb13fc728246a7ed56f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
def31ecac955867e02fc94fc68e0651f5c526a98cbcd3bb13fc728246a7ed56f.exe
Resource
win10v2004-20220812-en
General
-
Target
def31ecac955867e02fc94fc68e0651f5c526a98cbcd3bb13fc728246a7ed56f
-
Size
812KB
-
MD5
83f4d85b231f1583f40ffc03950b5b90
-
SHA1
a1fec40beff54295aa2506a3ddc672b298fb62b6
-
SHA256
def31ecac955867e02fc94fc68e0651f5c526a98cbcd3bb13fc728246a7ed56f
-
SHA512
6835045fbe8751c8964c43042214cead090d083addf6eff2b0039d07c641f6ce00d38fc0ba6092bf688602cb8d359a3c7896858fc17657f5fadcee66bd616b7c
-
SSDEEP
24576:579A9A9RKrAF9NTQSysLuyaUgDa9S9S9S9:NKMBQSyeuyVO
Malware Config
Signatures
Files
-
def31ecac955867e02fc94fc68e0651f5c526a98cbcd3bb13fc728246a7ed56f.exe windows x86
ea346cbf6e7f80a8afb5114a6c69f03d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetSysColor
AnimateWindow
IsWindowVisible
GetWindow
GetWindowTextLengthA
GetParent
GetWindowRect
GetWindowInfo
MoveWindow
IsWindowUnicode
AllowSetForegroundWindow
CloseWindow
RegisterClassA
CreateWindowExA
DefWindowProcA
PostQuitMessage
kernel32
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
VirtualAlloc
HeapAlloc
Sleep
GetFileAttributesA
FindFirstFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
HeapFree
GetProcAddress
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
Sections
.text Size: 792KB - Virtual size: 791KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE