Static task
static1
Behavioral task
behavioral1
Sample
af8b97899ddc1c82bd521ef37d2920368f53c7f3b9460a3687728a384c7944c2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
af8b97899ddc1c82bd521ef37d2920368f53c7f3b9460a3687728a384c7944c2.exe
Resource
win10v2004-20220812-en
General
-
Target
af8b97899ddc1c82bd521ef37d2920368f53c7f3b9460a3687728a384c7944c2
-
Size
92KB
-
MD5
81b0028c71fe90916a78607a392419a8
-
SHA1
7d8d74139d3614fd0653aa68c4f96de758fbbfd9
-
SHA256
af8b97899ddc1c82bd521ef37d2920368f53c7f3b9460a3687728a384c7944c2
-
SHA512
5d9e8aef88e64154f4ee1016c49a01e415bb24b73438c37f6f805f2855d5be1940998f6a4151c831d16ae18703ab63b5ff423cdb54d7ebad9c3aeade36e96015
-
SSDEEP
1536:Hhdhw45+uRP73aXNAkVJPYg6NPlhFhZ79gU/dzLy40MABFIsF6WGXNdb+xJ:hPP7VkVRWPlhjl9gUhLyBFiWGd0x
Malware Config
Signatures
Files
-
af8b97899ddc1c82bd521ef37d2920368f53c7f3b9460a3687728a384c7944c2.exe windows x86
8ad155d14f66ff2f904b387f5c46c034
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetWaitableTimer
CreateWaitableTimerW
WaitForMultipleObjects
QueryDosDeviceW
LockResource
GetModuleFileNameW
FreeResource
GlobalDeleteAtom
DeleteFileW
WaitForSingleObject
MultiByteToWideChar
FreeLibrary
GetSystemTime
GetLogicalDrives
CreateFileW
GetFileAttributesExW
GetTickCount
CreateThread
WritePrivateProfileStringW
CreateProcessW
LoadLibraryA
GlobalFree
GetModuleHandleW
SetThreadPriority
SetFilePointer
ReadFile
GetProcAddress
SetEvent
user32
GetParent
SetForegroundWindow
IsDlgButtonChecked
VkKeyScanW
PostThreadMessageW
ReleaseDC
SendMessageW
SetDlgItemTextW
AppendMenuW
RegisterHotKey
SetLayeredWindowAttributes
SendDlgItemMessageW
GetWindowTextW
LoadBitmapW
CreateWindowExW
SystemParametersInfoW
DialogBoxParamW
GetSystemMetrics
gdi32
SetTextColor
SetBkMode
BitBlt
SetMapMode
GetClipBox
SetDIBits
Rectangle
CreatePen
CreateDCW
advapi32
RegCreateKeyExW
InitializeSecurityDescriptor
RegDeleteValueW
StartServiceW
Sections
.gpwm Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.obxyd Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zzvzuw Size: 4KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE