Static task
static1
Behavioral task
behavioral1
Sample
84cccf04cbe017eabf8c4a9dec871df3782a9a9bc2fdcb66fd5956b96ee8e246.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
84cccf04cbe017eabf8c4a9dec871df3782a9a9bc2fdcb66fd5956b96ee8e246.exe
Resource
win10v2004-20220812-en
General
-
Target
84cccf04cbe017eabf8c4a9dec871df3782a9a9bc2fdcb66fd5956b96ee8e246
-
Size
46KB
-
MD5
93bd57e22eb8841e8021fad9fbfef130
-
SHA1
73df3cab59ade17ea45a724df061483ef0338be5
-
SHA256
84cccf04cbe017eabf8c4a9dec871df3782a9a9bc2fdcb66fd5956b96ee8e246
-
SHA512
ae9e9043b08d23f0990223b2fe70a5c032376ec7daa532e2b78b2657d5fcc8810fee8495020b7bfad681bc24cd423d7ee612ef765e72ab7ddaa8df0c4c06b4f3
-
SSDEEP
768:b7SD6iAI38wJIDU1WWUl9/MvaN85YtbZ4AOAXQyPn//nLgiF7O8KFGmLHHLF:b1i5R1Wdl9Cx5YbZQAgyP/vLODFG2H
Malware Config
Signatures
Files
-
84cccf04cbe017eabf8c4a9dec871df3782a9a9bc2fdcb66fd5956b96ee8e246.exe windows x86
f4527bcb3e09fee281771622598de10d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDlgItem
OpenWindowStationA
GetDlgItemTextW
SetProcessWindowStation
CharLowerBuffA
GetKeyState
GetForegroundWindow
EndDialog
GetWindowLongW
GetWindowThreadProcessId
GetKeyboardState
GetClassNameW
GetMessageW
CloseDesktop
GetCursorPos
FindWindowExW
CloseWindowStation
MsgWaitForMultipleObjects
OpenDesktopA
DrawIcon
DispatchMessageW
GetWindowTextW
SendMessageW
SetThreadDesktop
PeekMessageA
GetMessageA
GetDlgItemTextA
LoadCursorW
GetClipboardData
ToUnicode
GetIconInfo
PeekMessageW
ExitWindowsEx
kernel32
GetFileSizeEx
GetComputerNameW
CreateMutexW
GetSystemTime
GlobalLock
lstrcatW
GetCurrentThreadId
UnmapViewOfFile
lstrcmpiW
GetTempFileNameW
GetLogicalDrives
lstrcpyA
ExpandEnvironmentStringsW
SetLastError
IsBadReadPtr
WriteFile
GlobalUnlock
GetModuleFileNameW
SetFileAttributesW
CreateDirectoryW
GetUserDefaultUILanguage
GetModuleHandleA
GetCurrentProcessId
SetEvent
GetProcessTimes
WriteProcessMemory
GetLocalTime
FindNextFileW
WaitForSingleObject
MapViewOfFile
GetFileTime
SetEndOfFile
FindClose
HeapAlloc
lstrlenW
lstrcpyW
GetTickCount
SetFileTime
GetThreadPriority
LeaveCriticalSection
Sleep
SystemTimeToFileTime
FindFirstFileW
GetTempPathW
MultiByteToWideChar
lstrcpynW
HeapReAlloc
WideCharToMultiByte
FindResourceW
DisconnectNamedPipe
lstrcatA
GetFileSize
lstrlenA
ReleaseMutex
ReadFile
GetProcessHeap
GetCommandLineA
OpenProcess
Sections
.szwhoz Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lsfwh Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.glmhwh Size: 7KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ