?SpotJiaoLeudPiedrim@@YG_KPCUPhutDaysCyanweptSurayo@@ACU_SYSTEMTIME@@_WAC_JACEPC_J@Z
Static task
static1
Behavioral task
behavioral1
Sample
f824143bbe688570af9ef33d31241d1a2a0c7df520e7540bd5ce6dafb8670871.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f824143bbe688570af9ef33d31241d1a2a0c7df520e7540bd5ce6dafb8670871.exe
Resource
win10v2004-20220901-en
General
-
Target
f824143bbe688570af9ef33d31241d1a2a0c7df520e7540bd5ce6dafb8670871
-
Size
178KB
-
MD5
0a9f016d4e4510ce6d1741670b0a6e2a
-
SHA1
72bb76413b9e9f21fc46a5210f78f74410a36d14
-
SHA256
f824143bbe688570af9ef33d31241d1a2a0c7df520e7540bd5ce6dafb8670871
-
SHA512
7c0e826f13dc8b1f83a5da7548a12d434a854c4c954aa3fd6e733251b0f2eb1aa7c052847c31d0480528684ef3f5e78f224206bc80e8703678e4acb230917cd9
-
SSDEEP
3072:Drg1OwV0UtPkC26oiVAs7COaxqJWO4Z36Rj1w/HQq8EdIGpNT:DuOwV0U6C26oiVAs7C5QWglC/wqfdIGD
Malware Config
Signatures
Files
-
f824143bbe688570af9ef33d31241d1a2a0c7df520e7540bd5ce6dafb8670871.exe windows x86
93b8145b227c95a4a0e2cae57965a376
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableW
FindVolumeClose
GetConsoleMode
CompareStringA
CancelWaitableTimer
GetPrivateProfileStringA
TerminateProcess
GetSystemDefaultLangID
GetCommandLineW
GetDriveTypeW
SetErrorMode
GetCurrentProcess
GetEnvironmentStringsW
GetLogicalDrives
GetSystemDefaultLCID
GetCurrentThread
GetProcessHeap
GetCommandLineA
GetDriveTypeA
GetVolumeInformationA
CreateEventA
HeapDestroy
MulDiv
IsDBCSLeadByte
GetEnvironmentVariableA
GetACP
GetLastError
IsDBCSLeadByteEx
GetThreadLocale
IsValidCodePage
CreateSemaphoreW
CreateFileMappingW
SetCurrentDirectoryW
GetProfileStringA
SetEnvironmentVariableA
GetCurrentThreadId
GetDiskFreeSpaceExA
GetDiskFreeSpaceExW
GetCurrentProcessId
GetVolumeInformationW
user32
GetScrollPos
GetDlgItemTextA
SetWindowsHookExW
GetKeyNameTextW
CreateDialogParamW
ReleaseDC
InvalidateRgn
GetClipboardOwner
EnumClipboardFormats
IsMenu
EnableWindow
DdeQueryStringA
GetShellWindow
VkKeyScanA
GetMessagePos
CheckMenuItem
RegisterHotKey
GetDialogBaseUnits
SetClipboardViewer
SetWindowTextW
DialogBoxParamA
UnregisterHotKey
DdePostAdvise
OpenClipboard
PostThreadMessageW
RemoveMenu
IsWindow
DrawMenuBar
SwitchDesktop
IsDlgButtonChecked
SetMenu
GetMenuStringA
GetSysColor
DestroyCaret
GetDlgItem
IsWindowUnicode
GetMenuState
EnableMenuItem
GetClipboardData
GetWindowLongA
DdeCreateDataHandle
GetWindowLongW
GetScrollInfo
MapVirtualKeyA
RegisterClipboardFormatA
TrackPopupMenuEx
OpenWindowStationA
LockWindowUpdate
SetPropW
GetDoubleClickTime
IsCharUpperW
RegisterWindowMessageA
IsWindowEnabled
OemToCharBuffW
MessageBeep
GetParent
IsClipboardFormatAvailable
GetFocus
DeleteMenu
SetMenuItemBitmaps
GetSubMenu
DialogBoxIndirectParamW
TabbedTextOutW
GetLastActivePopup
IsZoomed
IsChild
GetThreadDesktop
CreateDialogParamA
ImpersonateDdeClientWindow
SetActiveWindow
GetDlgItemInt
CloseClipboard
GetUserObjectInformationA
SetCursor
Exports
Exports
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ