Static task
static1
Behavioral task
behavioral1
Sample
b87371a6f386b95814b4dfee2a7495c053497f4cb4a44ff206a27eff99b49c2a.exe
Resource
win7-20220812-en
General
-
Target
b87371a6f386b95814b4dfee2a7495c053497f4cb4a44ff206a27eff99b49c2a
-
Size
312KB
-
MD5
9287000902a5e03cefd7a89c09657d00
-
SHA1
363c893c37f8e7660177f5c3846d7bd3ad175533
-
SHA256
b87371a6f386b95814b4dfee2a7495c053497f4cb4a44ff206a27eff99b49c2a
-
SHA512
a5aea448a24e51f6f17b54073d35be0b4a523832b821dba35f0d62910266d722fdaa43142c3229beb023ea1ef0a9b5b4ecf951b4ad645d928f9d1945a9483fe0
-
SSDEEP
6144:y1XqN5a73Px3uTBqGcDCn+C5CAi86VlVju3QfLsyPu1gYBdAOne9:2GuNMMGcAWvl+f1gI2
Malware Config
Signatures
Files
-
b87371a6f386b95814b4dfee2a7495c053497f4cb4a44ff206a27eff99b49c2a.exe windows x86
731ac9c60818e00f408c476feda29178
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemInfo
GetConsoleOutputCP
CompareStringW
MulDiv
lstrcpynW
LocalAlloc
GetExitCodeProcess
LCMapStringW
GetDateFormatW
GlobalSize
LoadLibraryA
GetProcAddress
GetCurrentProcess
FindClose
LocalLock
VirtualAlloc
GetDriveTypeA
user32
IsDialogMessageA
GetKeyState
InsertMenuItemW
GetMenuItemCount
CallWindowProcW
CreateWindowExW
CreateCursor
DestroyWindow
LoadCursorW
MoveWindow
BeginDeferWindowPos
SetCursor
DrawIcon
SetCaretPos
WindowFromPoint
CreateMenu
FillRect
ShowCaret
DeferWindowPos
gdi32
SetTextColor
RestoreDC
SetTextAlign
MoveToEx
SetWindowOrgEx
SetBkColor
EndPage
AddFontResourceW
GetTextMetricsW
comdlg32
ChooseColorW
GetOpenFileNameW
PrintDlgW
GetSaveFileNameW
advapi32
RegEnumKeyExW
RegSetValueExW
IsTextUnicode
RegOpenKeyExW
RegCloseKey
ole32
OleDuplicateData
OleGetClipboard
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cmyagbf Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
harqsje Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fijuoup Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vghrore Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xpywdnj Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE