Static task
static1
Behavioral task
behavioral1
Sample
175dcddfd91cd48001f1fc490a68665188f26ae2ae21b71e61ee80342f5931ad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
175dcddfd91cd48001f1fc490a68665188f26ae2ae21b71e61ee80342f5931ad.exe
Resource
win10v2004-20220901-en
General
-
Target
175dcddfd91cd48001f1fc490a68665188f26ae2ae21b71e61ee80342f5931ad
-
Size
333KB
-
MD5
a282fb0d2b4239bd0447fc8688bb7630
-
SHA1
7e51bdaf2db55eae9599cde780e131c98b4c17c2
-
SHA256
175dcddfd91cd48001f1fc490a68665188f26ae2ae21b71e61ee80342f5931ad
-
SHA512
dc94943665acb17d4c523d610573984c1fc5e4036b00da935aca70fceaada007f75bc6bb57dcd55683a80923fb395d0aba88a862b9787413358c1dfbf2710e0f
-
SSDEEP
6144:knsQRhmeAuin18/We4qQTKL2cUhANci3aiq9RwmtuB/Tz4yzh+3:ks2hme218OetRLxdfHma/fs
Malware Config
Signatures
Files
-
175dcddfd91cd48001f1fc490a68665188f26ae2ae21b71e61ee80342f5931ad.exe windows x86
8c30976e82a6fb86876904369395921c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
GetFileTime
CloseHandle
ReadFile
HeapReAlloc
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
LoadLibraryW
HeapSize
CreateFileW
RtlUnwind
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleCP
GetLastError
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
FileTimeToSystemTime
HeapCreate
GetFileAttributesA
LeaveCriticalSection
Sleep
InitializeCriticalSection
SetFileTime
GetProcessHeap
WaitForSingleObject
HeapAlloc
GetFileSize
TlsAlloc
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
WriteFile
GetModuleHandleW
GetProcAddress
WideCharToMultiByte
GetConsoleMode
FlushFileBuffers
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
QueryPerformanceCounter
EncodePointer
DecodePointer
GetCommandLineW
SetFilePointer
ExitProcess
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
HeapFree
TerminateProcess
GetCurrentProcess
user32
IsWindow
OpenClipboard
MessageBoxW
RegisterClassW
GetDlgItemTextW
DestroyMenu
DestroyWindow
GetClassNameA
DestroyAcceleratorTable
InsertMenuItemA
ChildWindowFromPointEx
GetPropA
GetSubMenu
LoadStringA
GetParent
GetWindowDC
LoadMenuA
LoadIconA
GetWindowInfo
GetMenuStringW
DrawIcon
GetClientRect
BeginPaint
EnumWindows
GetDC
MessageBoxA
InvalidateRect
LoadMenuW
AppendMenuW
CreateWindowExA
EnableMenuItem
GetDlgItem
ShowWindow
gdi32
DeleteDC
ExtFloodFill
CreateSolidBrush
SetBkMode
DeleteObject
SelectObject
comdlg32
FindTextW
advapi32
SetEntriesInAclA
shell32
SHGetFileInfoW
CommandLineToArgvW
ExtractIconA
ole32
CoInitializeEx
CoCreateGuid
CoUninitialize
CoCreateInstance
oleaut32
SafeArrayDestroy
SafeArrayCreateVector
VariantClear
VariantInit
version
GetFileVersionInfoW
iphlpapi
GetInterfaceInfo
comctl32
InitCommonControlsEx
GetMUILanguage
rpcrt4
RpcStringFreeW
UuidToStringW
UuidCreateSequential
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 226KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ