Static task
static1
Behavioral task
behavioral1
Sample
144bb237fd46512ff399ed176112a4381561f6e097b945f2e3c3a3cb4ed758fa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
144bb237fd46512ff399ed176112a4381561f6e097b945f2e3c3a3cb4ed758fa.exe
Resource
win10v2004-20220901-en
General
-
Target
144bb237fd46512ff399ed176112a4381561f6e097b945f2e3c3a3cb4ed758fa
-
Size
616KB
-
MD5
84c85cf1e0f6a021cbb7313cb9b5a6c0
-
SHA1
4fddedb64750e284d3728fdafcdd907e7b8ee778
-
SHA256
144bb237fd46512ff399ed176112a4381561f6e097b945f2e3c3a3cb4ed758fa
-
SHA512
59ee7a499c43889ddbd4b9b9ed16f15269ba312e46aaba85c30dc2b12a44c70394ba0eeb984bbc7f7959ad22f67ce7c17e1b1f48c0beea00e8dd93dc93fd2d41
-
SSDEEP
12288:/FJhT1LXB/JnkWSM7716anqQ3VunLBsoA87DtiuPNcpXUQQh+gbNxJz:/FzpV9kRMYanD3doA8f54XUrcS
Malware Config
Signatures
Files
-
144bb237fd46512ff399ed176112a4381561f6e097b945f2e3c3a3cb4ed758fa.exe windows x86
f88834facbccf935b88f971cbad4c720
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PostQuitMessage
DefWindowProcW
SendMessageW
LoadCursorW
CreateWindowExW
RegisterClassExW
DestroyWindow
DestroyCursor
DestroyCaret
DestroyAcceleratorTable
DialogBoxIndirectParamW
DestroyIcon
DeferWindowPos
CreatePopupMenu
DrawFocusRect
CreateMenu
DrawFrameControl
kernel32
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
RtlUnwind
Sleep
HeapFree
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcess
HeapReAlloc
IsDebuggerPresent
UnhandledExceptionFilter
GetStartupInfoW
lstrcpyW
CreateDirectoryW
lstrcatW
LoadLibraryA
GetProcessHeap
HeapAlloc
GetModuleHandleW
TerminateProcess
GetFileType
GetCommandLineA
HeapSetInformation
SetUnhandledExceptionFilter
GetProcAddress
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
comctl32
InitCommonControlsEx
Sections
.text Size: 490KB - Virtual size: 489KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ