Static task
static1
Behavioral task
behavioral1
Sample
1993e00eea488d4906aa75f4225706256342abc29a5e1776b7d4c39f0b4ccb15.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1993e00eea488d4906aa75f4225706256342abc29a5e1776b7d4c39f0b4ccb15.exe
Resource
win10v2004-20220812-en
General
-
Target
1993e00eea488d4906aa75f4225706256342abc29a5e1776b7d4c39f0b4ccb15
-
Size
82KB
-
MD5
83013f66bba007781149ac0fb275e42f
-
SHA1
4d2834b02ed49a1f50d26c0789cdd4317aa0d6da
-
SHA256
1993e00eea488d4906aa75f4225706256342abc29a5e1776b7d4c39f0b4ccb15
-
SHA512
595f0facccc3998ac75bb62610bbbbee160fcbb7f998a6d19c1c236899b8226edc7cd67b936b03dad8f0e6142cdd08f4ae79fe6b6772f871caedc8076041bab6
-
SSDEEP
1536:cJklaefGMcFBeALosDCAR2Oa4UG2Bnxd+14+D4kHso7OAnmyIKuJ9pNN:cJxFfLos3N8NBnxQ14iOA9cV
Malware Config
Signatures
Files
-
1993e00eea488d4906aa75f4225706256342abc29a5e1776b7d4c39f0b4ccb15.exe windows x86
7dda96e811ab7fd5bbede3f62b7ea5f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
lstrlenA
Sleep
SetEvent
VirtualAlloc
FreeResource
VirtualFree
LoadLibraryA
SystemTimeToFileTime
GetSystemTime
SizeofResource
LockResource
LoadResource
FindResourceExA
GetLastError
VirtualProtect
GetModuleHandleA
LocalAlloc
GlobalFree
WriteFile
CreateFileA
GlobalAlloc
GetStringTypeA
LCMapStringW
GetModuleFileNameA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
RtlUnwind
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
GetVersion
GetCommandLineA
GetStringTypeW
GetStartupInfoA
VirtualQuery
CreateEventA
CloseHandle
LoadLibraryW
GetProcAddress
FreeLibrary
LCMapStringA
ExitProcess
user32
UpdateWindow
LoadIconA
LoadCursorA
ShowWindow
PostQuitMessage
EndPaint
DrawTextA
GetClientRect
CreateWindowExA
RegisterClassExA
BeginPaint
DefWindowProcA
DestroyWindow
DialogBoxParamA
LoadStringA
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
IsWindow
IsWindowVisible
IsRectEmpty
SetRect
UnregisterClassA
PeekMessageA
TranslateMessage
DispatchMessageA
PostMessageA
GetDC
FillRect
ReleaseDC
RegisterClassA
BringWindowToTop
AttachThreadInput
EndDialog
GetMessageA
gdi32
SelectObject
CreateCompatibleDC
GetObjectA
GetDIBits
Rectangle
SetROP2
CreateCompatibleBitmap
ole32
CoUninitialize
CoCreateInstance
CoInitialize
oleaut32
VariantClear
VariantInit
pdh
PdhCollectQueryData
PdhGetCounterInfoA
PdhGetDataSourceTimeRangeW
PdhConnectMachineA
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 250KB - Virtual size: 634KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdt Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE