Static task
static1
Behavioral task
behavioral1
Sample
115df9ceb90e6811d86c4c8c4c1765dbe405be5a833d08e5b47446dd179db4ee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
115df9ceb90e6811d86c4c8c4c1765dbe405be5a833d08e5b47446dd179db4ee.exe
Resource
win10v2004-20220812-en
General
-
Target
115df9ceb90e6811d86c4c8c4c1765dbe405be5a833d08e5b47446dd179db4ee
-
Size
164KB
-
MD5
83559b91b08442e36b42f8be35e8b020
-
SHA1
f9363079bf42bd1a35c0b111126d861de77d11c6
-
SHA256
115df9ceb90e6811d86c4c8c4c1765dbe405be5a833d08e5b47446dd179db4ee
-
SHA512
addb98d5e9494937d1ce1becee1f0c31b653a7d8c181601a4981f18c07ed6095853731db4c9fe66288d321c2d6cf731bf1021948b0286af227bf04be4feb5c36
-
SSDEEP
3072:0EsUqjkvgA2rROXqDvZ4e/hCL3CQ9vnkuOfpYoizXKv6tF/JQEgUlmy7h/:OpjqgAXsR4e5CL3C+vdOfppIXKSNrp0s
Malware Config
Signatures
Files
-
115df9ceb90e6811d86c4c8c4c1765dbe405be5a833d08e5b47446dd179db4ee.exe windows x86
b95d1ba53aab79060e394977dc35f477
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowLongW
LoadIconW
DrawFocusRect
GetQueueStatus
EndPaint
SendMessageTimeoutA
DrawStateA
EnumPropsExW
RegisterWindowMessageA
SetWindowsHookA
ChangeClipboardChain
shell32
DragQueryPoint
DragAcceptFiles
ShellExecuteExA
Shell_NotifyIconW
ShellExecuteA
DoEnvironmentSubstW
FindExecutableA
wininet
FtpSetCurrentDirectoryW
InternetCreateUrlW
InternetReadFileExW
RetrieveUrlCacheEntryFileA
HttpQueryInfoA
InternetCreateUrlA
gdi32
CreateDIBSection
CancelDC
CloseFigure
CombineTransform
CombineRgn
kernel32
CreateFileW
WriteConsoleW
CloseHandle
GetStringTypeW
LCMapStringW
IsProcessorFeaturePresent
SetStdHandle
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ReadFile
ReadConsoleInputA
SetConsoleMode
SetFilePointer
UnhandledExceptionFilter
GlobalSize
LoadModule
CreateJobObjectW
WriteFileEx
GetComputerNameExA
EndUpdateResourceA
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
EncodePointer
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
RtlUnwind
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
Sleep
HeapFree
MultiByteToWideChar
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE