Static task
static1
Behavioral task
behavioral1
Sample
02d5e76abbb29cd21c8c8e70047b0b090d519ecbdc2a32faa75c9e679314965e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
02d5e76abbb29cd21c8c8e70047b0b090d519ecbdc2a32faa75c9e679314965e.exe
Resource
win10v2004-20220901-en
General
-
Target
02d5e76abbb29cd21c8c8e70047b0b090d519ecbdc2a32faa75c9e679314965e
-
Size
165KB
-
MD5
93ea2e989f3037d7dff71df42a5d177a
-
SHA1
20043febfa8b524183d760247b2525237e9532a2
-
SHA256
02d5e76abbb29cd21c8c8e70047b0b090d519ecbdc2a32faa75c9e679314965e
-
SHA512
2b4bfe1e9e0dbb1acfcf8669f03db20de16aee1bf7ea17cee63d443800330335d04d543853239dff554a71a8a5aae31428a2001d01fbf9e9df1ff71508166816
-
SSDEEP
3072:G/LZl96KKttfKucvtiVN6kUn44z3byHBconUQPK4wOKux1+LdsHk74PdsKK:G/NljKt891Y8k4zLOBDUQPK0V8LVAsK
Malware Config
Signatures
Files
-
02d5e76abbb29cd21c8c8e70047b0b090d519ecbdc2a32faa75c9e679314965e.exe windows x86
78e6a4b96daa5f80fa2254d4503ea3ea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
InterlockedIncrement
GetAtomNameA
GetVersionExW
lstrlenW
GlobalFree
DeleteFileW
GlobalSize
WaitForSingleObject
FileTimeToSystemTime
FindNextChangeNotification
FreeLibrary
FindFirstChangeNotificationW
GetModuleHandleW
GlobalLock
GetPrivateProfileStringW
FindClose
LoadLibraryExW
InitializeCriticalSection
MulDiv
ResumeThread
LoadLibraryW
GetCurrentThreadId
lstrcmpW
EnumResourceTypesA
SetFileAttributesW
LoadLibraryA
GetVersionExA
GetLastError
GetFileAttributesW
GetLocaleInfoW
FindCloseChangeNotification
FindResourceW
GetTickCount
CloseHandle
IsValidCodePage
LockResource
GetCurrentDirectoryW
lstrcpyW
FindFirstFileW
Sleep
GetModuleFileNameW
WideCharToMultiByte
GlobalUnlock
WritePrivateProfileStringW
LoadResource
GetVersion
DeleteCriticalSection
FileTimeToLocalFileTime
GlobalAlloc
GetProcAddress
lstrcpynW
GetPrivateProfileIntW
SetThreadPriority
shell32
SHGetImageList
SHFileOperationW
CommandLineToArgvW
SHGetPathFromIDListA
ShellExecuteExW
ShellExecuteW
SHGetFileInfoA
ShellExecuteExA
SHBrowseForFolderA
SHGetFolderPathW
Shell_NotifyIconA
Sections
.text Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 401KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ