Static task
static1
Behavioral task
behavioral1
Sample
0ee1d88c250bb938e5c1bfbfe57b45b21e6519d8a5b40befe935d56f5ce01871.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0ee1d88c250bb938e5c1bfbfe57b45b21e6519d8a5b40befe935d56f5ce01871.exe
Resource
win10v2004-20220901-en
General
-
Target
0ee1d88c250bb938e5c1bfbfe57b45b21e6519d8a5b40befe935d56f5ce01871
-
Size
854KB
-
MD5
92d234484aace41b54556713524a57b6
-
SHA1
d00a82b4d7d0e4abd830fb72a9aefc3bb0c938bb
-
SHA256
0ee1d88c250bb938e5c1bfbfe57b45b21e6519d8a5b40befe935d56f5ce01871
-
SHA512
43833ff5c42dbbf346e5bd9707f3784166d8e932c4a95338a6a56035794f569f175280cf849a21ae821202421b98ea7e168e3dcf4313bb1dbbe3d2b0bb85dea7
-
SSDEEP
24576:MXTNB1i+HKKbA10F2Z+oL5ET040j3OtwL7Nlogvc+:qRBnvG0F2L5c+39l
Malware Config
Signatures
Files
-
0ee1d88c250bb938e5c1bfbfe57b45b21e6519d8a5b40befe935d56f5ce01871.exe windows x86
7f9ad3795865d67c1a3db106f35a07ef
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__getmainargs
_XcptFilter
wcsncmp
_fileno
__p__commode
??3@YAXPAX@Z
??_U@YAPAXI@Z
__set_app_type
exit
_wtol
_controlfp
kernel32
lstrlenA
GetVersionExW
GetVersion
GlobalMemoryStatus
MoveFileExW
DeleteCriticalSection
FindResourceW
FileTimeToSystemTime
FreeLibrary
LocalReAlloc
IsDebuggerPresent
GetProcAddress
SetLastError
TlsGetValue
lstrcmpA
FormatMessageA
InitializeCriticalSectionAndSpinCount
SetEvent
FindFirstFileA
WaitForMultipleObjects
GetCurrentThreadId
GlobalSize
LockResource
IsBadWritePtr
GetFileTime
GetLocalTime
GetSystemDirectoryW
GetStartupInfoW
LoadLibraryA
GetCurrentDirectoryW
SetEndOfFile
UnhandledExceptionFilter
CreateMutexA
VirtualAlloc
GetSystemInfo
GlobalHandle
ExitProcess
user32
IsIconic
RegisterClassA
GetSysColorBrush
CallNextHookEx
UnregisterClassA
RegisterClipboardFormatW
GetWindow
DispatchMessageA
GetWindowTextLengthW
GetWindowThreadProcessId
IsChild
LoadBitmapW
CreateWindowExW
SetWindowsHookExA
EnableMenuItem
LoadIconW
PeekMessageA
LoadIconA
LoadStringA
MessageBeep
ValidateRect
GetSystemMenu
GetMessageA
Sections
.text Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data/0x Size: 396KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 207KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ