Static task
static1
Behavioral task
behavioral1
Sample
2322ee875a749f832a0cb281014f9d89755fa9eb95db7c269f48b6854cbba338.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2322ee875a749f832a0cb281014f9d89755fa9eb95db7c269f48b6854cbba338.exe
Resource
win10v2004-20220812-en
General
-
Target
2322ee875a749f832a0cb281014f9d89755fa9eb95db7c269f48b6854cbba338
-
Size
344KB
-
MD5
9376297efb9798565394258ef47bb9b7
-
SHA1
8efa4af11a4ca364e2840f02074567e0aa9eee13
-
SHA256
2322ee875a749f832a0cb281014f9d89755fa9eb95db7c269f48b6854cbba338
-
SHA512
50d648d37e1baee47e366cf26fb4c7356582ec4c7840ea6659f3d133a8dc239102155b2ea254e2e35635a8b0cb392a0256db1bf12ad0f2ba21bbe9c28a427c3b
-
SSDEEP
6144:xOnQLHDrONnDhn0Md4oSVMRrxhAAsitIyDjQxskpH8Q5uJcroeWpQoMUyFfCPiIA:xaQLjrONn9uv8thtsitIqpkqQDrpWp2b
Malware Config
Signatures
Files
-
2322ee875a749f832a0cb281014f9d89755fa9eb95db7c269f48b6854cbba338.exe windows x86
547f2863e3dc4b65e2af3d605db61ddd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
WriteConsoleW
SetStdHandle
HeapReAlloc
HeapSize
RtlUnwind
ReadFile
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetModuleFileNameW
WriteFile
HeapCreate
IsProcessorFeaturePresent
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
WideCharToMultiByte
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
DecodePointer
GetModuleHandleW
HeapAlloc
HeapFree
MultiByteToWideChar
CreateThread
CloseHandle
GetModuleHandleA
GetThreadPriority
CreateFileMappingA
LoadLibraryA
GlobalFree
EnterCriticalSection
GetProcAddress
GetLastError
GlobalUnlock
ReleaseSemaphore
SetThreadPriority
lstrcatA
CreateSemaphoreA
LeaveCriticalSection
CreateEventA
ExitProcess
Sleep
LoadLibraryW
GlobalAlloc
FormatMessageA
GetCurrentThread
WaitForSingleObject
GetCurrentProcess
MapViewOfFile
lstrlenA
lstrcmpA
GetCommandLineW
GetStdHandle
CreateFileW
user32
GetWindowDC
GetWindowRect
SendDlgItemMessageA
CopyRect
GetWindow
PostQuitMessage
IsIconic
LoadCursorA
FindWindowA
SetClipboardData
GetClassNameA
CloseClipboard
DestroyWindow
ClientToScreen
EndPaint
EnableWindow
DrawIconEx
LoadStringA
CopyImage
GetFocus
GetParent
LoadIconA
IsWindowEnabled
wsprintfA
GetClientRect
SendMessageA
SetRectEmpty
BeginPaint
WinHelpA
GetDC
MessageBoxA
InvalidateRect
CreateWindowExA
GetClassNameW
ReleaseDC
EnableMenuItem
EmptyClipboard
IsWindowUnicode
GetDlgItem
EndDialog
DefWindowProcA
GetDesktopWindow
SetWindowPos
ShowWindow
GetClassInfoA
PostMessageA
DispatchMessageA
OpenClipboard
AdjustWindowRectEx
RegisterClassW
GetSystemMetrics
IsWindowVisible
SetWindowTextA
MapWindowPoints
gdi32
CreateCompatibleBitmap
Rectangle
RealizePalette
CreateRectRgn
CreateCompatibleDC
GetStockObject
CreateSolidBrush
MaskBlt
PatBlt
SelectObject
DeleteObject
GetDIBits
CreateDIBSection
CreatePen
DeleteDC
comdlg32
FindTextA
advapi32
RegCloseKey
RegQueryValueExA
shell32
CommandLineToArgvW
ole32
CoInitialize
CoUninitialize
CoCreateInstance
CoFreeUnusedLibraries
shlwapi
PathFindFileNameA
PathFileExistsW
comctl32
InitCommonControlsEx
setupapi
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsA
SetupDiGetClassDevsA
uxtheme
DrawThemeBackground
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 214KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ