Static task
static1
Behavioral task
behavioral1
Sample
f2d2f9b4f89a6126f47750af4fb70339d1422165e80a3083ec9fc00306228468.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f2d2f9b4f89a6126f47750af4fb70339d1422165e80a3083ec9fc00306228468.exe
Resource
win10v2004-20220812-en
General
-
Target
f2d2f9b4f89a6126f47750af4fb70339d1422165e80a3083ec9fc00306228468
-
Size
718KB
-
MD5
92cafbec3c5cd007f60a0ece6f6d6fb0
-
SHA1
eb6ad6fcc1e4cb6b471d4b04ad0e1687d0073269
-
SHA256
f2d2f9b4f89a6126f47750af4fb70339d1422165e80a3083ec9fc00306228468
-
SHA512
67dcd10c132151eaf76ed45a9c06ef1e350fdc36bcb7034cd8d60a7d2a2d0edbf4ba454895043d259b263fb357888de03c4c46ef2d06bfa1bee0bec236812290
-
SSDEEP
12288:EWYWkp85UiOKxDr9oE8ogdXkP/9w3Ve2MEoqAMQRoSY3r4kKBLjswsTuBq9xzYA6:ZYWkaUiO2D5oKgtkPa3Vj5o1SkkYPswZ
Malware Config
Signatures
Files
-
f2d2f9b4f89a6126f47750af4fb70339d1422165e80a3083ec9fc00306228468.exe windows x86
17e038b6a3fce7e669a9df726f6089b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
VirtualAlloc
FindResourceA
VirtualFree
UnmapViewOfFile
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
Sleep
HeapSize
GetCurrentDirectoryA
GetCommandLineW
GetEnvironmentStrings
FileTimeToLocalFileTime
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
FindNextFileW
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
HeapCreate
LCMapStringW
InterlockedIncrement
GetFileType
CreateEventA
CreateFileW
CreateEventW
SetEvent
GlobalLock
FindNextFileA
CompareStringA
FindFirstFileA
GetSystemInfo
GetProcAddress
GetCPInfo
DeleteFileA
CreateDirectoryA
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
IsBadWritePtr
QueryPerformanceCounter
FreeLibrary
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapAlloc
GetLocaleInfoA
SetEndOfFile
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
MulDiv
SetUnhandledExceptionFilter
SetFileAttributesA
CreateThread
CreateMutexA
LeaveCriticalSection
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
IsDebuggerPresent
GetModuleFileNameW
HeapFree
InitializeCriticalSection
GetSystemTime
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
GetEnvironmentVariableA
FormatMessageW
LocalFree
GetOEMCP
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
WideCharToMultiByte
SetStdHandle
FreeEnvironmentStringsW
SetErrorMode
CreateFileA
LocalAlloc
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetLocalTime
GetFileAttributesW
HeapDestroy
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetStdHandle
ExitProcess
GetModuleHandleA
GetCurrentThread
GetCommandLineA
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
GetLastError
WriteConsoleW
GetVersion
user32
SetDlgItemTextA
EndDialog
SetForegroundWindow
GetDesktopWindow
LoadIconA
LoadCursorA
ScreenToClient
GetDlgItem
GetWindowLongA
SetWindowLongA
PostMessageA
GetWindowRect
GetSystemMetrics
KillTimer
BeginPaint
GetMessageA
SetFocus
PtInRect
DispatchMessageA
FillRect
SetTimer
GetSubMenu
IsIconic
GetWindow
IsWindowEnabled
TranslateMessage
PeekMessageA
SetCapture
ShowWindow
GetParent
DestroyWindow
SendMessageA
GetDC
EndPaint
ReleaseDC
PostQuitMessage
DestroyMenu
GetSysColor
SystemParametersInfoA
IsWindowVisible
wsprintfA
GetClientRect
CallWindowProcA
GetFocus
EnableWindow
SetCursor
MessageBoxA
advapi32
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExW
RegCloseKey
gdi32
CreateCompatibleDC
GetStockObject
SetBkMode
SetBkColor
Sections
.text Size: 680KB - Virtual size: 1006KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ