CreateInterface
Static task
static1
Behavioral task
behavioral1
Sample
2607099d4ab3cc10bdac9987c3b970da916f44493434ace30c8efe76707f6524.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2607099d4ab3cc10bdac9987c3b970da916f44493434ace30c8efe76707f6524.exe
Resource
win10v2004-20220812-en
General
-
Target
2607099d4ab3cc10bdac9987c3b970da916f44493434ace30c8efe76707f6524
-
Size
296KB
-
MD5
0d756921ceca9ad7097b41ce18498a70
-
SHA1
fa4bc486282e654ae19f58702eb76fad1882fc60
-
SHA256
2607099d4ab3cc10bdac9987c3b970da916f44493434ace30c8efe76707f6524
-
SHA512
aa958042efaa921733c84d876443ad264f9d51ca8db5ea56def9fdc05334fc317c001da4071bb10d6d385b7cf50948b074ecfc85a67d9f8c0ec3ede15bfa6980
-
SSDEEP
6144:UHnz6aycf/dGLr/8gsf4ouJwFtzo0naGq:sHycf/1BDPaGq
Malware Config
Signatures
Files
-
2607099d4ab3cc10bdac9987c3b970da916f44493434ace30c8efe76707f6524.exe windows x86
3ea12681036dde5ecf04cbcdc9a78b61
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetProcAddress
SetCurrentDirectoryA
GetModuleFileNameA
GetLastError
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
SetEnvironmentVariableA
GetTimeZoneInformation
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
InterlockedIncrement
InterlockedDecrement
CreateToolhelp32Snapshot
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
TlsGetValue
SetLastError
Module32First
Module32Next
TlsAlloc
FreeLibrary
LoadLibraryA
GetEnvironmentVariableA
Sleep
SetUnhandledExceptionFilter
WaitForSingleObject
CloseHandle
CreateThread
FlushFileBuffers
GetCommandLineA
InterlockedExchange
GetFileType
GetFileSize
GetSystemInfo
SetFilePointer
SetEndOfFile
CreateFileA
ReadFile
WriteFile
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
GetVersionExA
GetCPInfo
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
DeleteCriticalSection
InitializeCriticalSection
SetStdHandle
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
GetCurrentThreadId
TlsSetValue
PeekNamedPipe
user32
MessageBoxA
GetCursorPos
GetClientRect
ClientToScreen
SetCursorPos
DestroyWindow
SetWindowLongA
PostQuitMessage
GetKeyState
SetCapture
ReleaseCapture
PeekMessageA
PostMessageA
TranslateMessage
DispatchMessageA
GetWindowLongA
SendMessageA
ShowCursor
LoadIconA
LoadCursorA
RegisterClassA
SetRect
AdjustWindowRect
GetDesktopWindow
GetWindowRect
CreateWindowExA
ShowWindow
UpdateWindow
DefWindowProcA
FlashWindow
gdi32
GetStockObject
winmm
timeGetTime
imm32
ImmReleaseContext
ImmSetOpenStatus
ImmGetOpenStatus
ImmGetContext
common
?GetLogInterface@@YAPAVILog@@XZ
?GetPackFileSystemInterface@@YAPAVIPackFileSys@@XZ
?CreateTimer@@YAPAVIGTimer@@XZ
?CreateXmlDocumentEx@@YAPAVIXmlDocumentEx@@XZ
Exports
Exports
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
STLPORT_ Size: 4KB - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ