Static task
static1
Behavioral task
behavioral1
Sample
10150499343bd689e3a1206b65725f285e5849918d43a68e6f4d2c748d8c7529.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
10150499343bd689e3a1206b65725f285e5849918d43a68e6f4d2c748d8c7529.exe
Resource
win10v2004-20220901-en
General
-
Target
10150499343bd689e3a1206b65725f285e5849918d43a68e6f4d2c748d8c7529
-
Size
868KB
-
MD5
90cf03962cb9b97970a89bc38182509d
-
SHA1
3b9e6d73fa85b2fe38b0833b4fc3f58f71f32b74
-
SHA256
10150499343bd689e3a1206b65725f285e5849918d43a68e6f4d2c748d8c7529
-
SHA512
7139e7fb45cebf2e1de526ed59bf5496b1a22b75b8ef83012668486647fdfc452ee1ee07a04dc8ca279de4eecb14bfedc2373e7a9b4f51eeef2b79a54d4ee552
-
SSDEEP
24576:xGr/Cm+X18zVkUetVI5u4+ZQeN/7DSBfWhO:QE1yZu4+Zph7GBfWo
Malware Config
Signatures
Files
-
10150499343bd689e3a1206b65725f285e5849918d43a68e6f4d2c748d8c7529.exe windows x86
2351e714d9783912c3c5d84368818046
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
OpenProcess
GetWindowsDirectoryA
SetFileAttributesA
GetDriveTypeA
FindClose
lstrcatA
lstrlenA
lstrcpyA
FindNextFileA
CloseHandle
GetFileSize
CreateFileA
GetLogicalDrives
FreeLibrary
LoadLibraryA
GetProcAddress
GetVersionExA
Process32Next
Sleep
CreateToolhelp32Snapshot
GetSystemDirectoryA
CreateThread
GetLastError
CreateMutexA
GetTickCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WinExec
CopyFileA
GetTempPathA
GetTempFileNameA
FindFirstFileA
GetModuleHandleA
Process32First
GetModuleFileNameA
FlushFileBuffers
SetEndOfFile
SetStdHandle
GetEnvironmentStringsW
HeapAlloc
RtlUnwind
CreateDirectoryA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
DeleteFileA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetFileAttributesA
user32
SendMessageA
MessageBoxA
FindWindowA
BlockInput
keybd_event
GetForegroundWindow
GetWindowThreadProcessId
GetWindowTextA
GetClassNameA
ShowWindow
SetWindowTextA
advapi32
RegQueryValueExA
GetUserNameA
RegCreateKeyA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyA
shell32
ShellExecuteA
winmm
mciSendStringA
Sections
.petite Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE