Static task
static1
Behavioral task
behavioral1
Sample
2046ac9f64c595c8c9d73dbf3464b8593c50732263d5f0125d55f0e41a8d5a6b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2046ac9f64c595c8c9d73dbf3464b8593c50732263d5f0125d55f0e41a8d5a6b.exe
Resource
win10v2004-20220812-en
General
-
Target
2046ac9f64c595c8c9d73dbf3464b8593c50732263d5f0125d55f0e41a8d5a6b
-
Size
133KB
-
MD5
0a82df27aa2cc42e53630fcfbe6c701a
-
SHA1
4606873a495872d398f04be8b5aeb79fd37ee06b
-
SHA256
2046ac9f64c595c8c9d73dbf3464b8593c50732263d5f0125d55f0e41a8d5a6b
-
SHA512
7f3fb68c5b6bae274305f87f99b9465e82ff4c37bff4bbf832f3ef86b381afac6add0b7b00b0d5d6affc7db992e4f62f56f56da0847bccb86363a033a4ae7022
-
SSDEEP
3072:kztW6Ch8xNXkRrPtGfUg70SwtParxqP86rBsfy:kzt1tXkRpA7eFsa
Malware Config
Signatures
Files
-
2046ac9f64c595c8c9d73dbf3464b8593c50732263d5f0125d55f0e41a8d5a6b.exe windows x86
94cc6d3f37678cae9e046ea7033ef505
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MapDialogRect
GetNextDlgGroupItem
SetMenu
GetParent
DestroyWindow
DispatchMessageW
GetClientRect
SetWindowPos
CheckMenuItem
PostQuitMessage
SetWindowContextHelpId
GetMenuState
GetFocus
GetActiveWindow
SetActiveWindow
GetMenuCheckMarkDimensions
IsWindow
SetTimer
SetMenuItemBitmaps
ModifyMenuW
EndDialog
DrawIcon
EnableMenuItem
GetKeyState
GetNextDlgTabItem
PeekMessageW
GetDlgItem
GetCursorPos
GetSystemMetrics
CreateWindowExW
GetSysColorBrush
ValidateRect
IsWindowEnabled
CreateDialogIndirectParamW
GetWindowLongW
UpdateWindow
InvalidateRgn
PostMessageW
IsWindowVisible
LoadBitmapW
IsIconic
MessageBeep
EnableWindow
GetWindow
GetDesktopWindow
TranslateMessage
oleacc
LresultFromObject
CreateStdAccessibleObject
comctl32
InitCommonControlsEx
oledlg
OleUIBusyW
kernel32
GetLastError
LoadLibraryW
ReleaseSemaphore
SizeofResource
CreateMutexW
CloseHandle
lstrlenW
GetModuleHandleW
FreeEnvironmentStringsW
GlobalAlloc
EnumResourceLanguagesA
LoadResource
MultiByteToWideChar
GetProcAddress
ExitProcess
FreeLibrary
InterlockedExchange
SetCurrentDirectoryW
LockResource
FindResourceW
GetModuleFileNameW
WaitForSingleObject
CreateProcessW
CompareStringA
Sections
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ