?MeadBreeHoyazouksawsJivyaa@@YGXEPCKPCUWeanJismDeepPissLoss@@ACG@Z
Static task
static1
Behavioral task
behavioral1
Sample
c01d1465c992b5e8eb12ba5accc3ce90c07edb7436be186df3307643e34eacb7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c01d1465c992b5e8eb12ba5accc3ce90c07edb7436be186df3307643e34eacb7.exe
Resource
win10v2004-20220901-en
General
-
Target
c01d1465c992b5e8eb12ba5accc3ce90c07edb7436be186df3307643e34eacb7
-
Size
214KB
-
MD5
04bbac1a4174591f298f760c6d3d7426
-
SHA1
72df24f41d79cb7e3c7de59206612108fe6e95f4
-
SHA256
c01d1465c992b5e8eb12ba5accc3ce90c07edb7436be186df3307643e34eacb7
-
SHA512
7b40fd4bf2784f38f81fe9b6cf1715221831b87b4a0123508a84b2ef094463a9c898410e42273844bbed16e1390dcbca51c9d1c0d67585077ec4e516c576e562
-
SSDEEP
3072:+4D8Hs3IpQevYg0Z0keQp4gCzZHp7VjYg2EOvDoxjxV8zT2TndXNC5FvkR5U:TDp3KY9hPp4JzxZ2EOO8End9CX8RS
Malware Config
Signatures
Files
-
c01d1465c992b5e8eb12ba5accc3ce90c07edb7436be186df3307643e34eacb7.exe windows x86
f821423241a97f29bfb91d6bb6da78d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsRelativeA
PathAppendW
kernel32
ConvertDefaultLocale
lstrcmpiW
ResumeThread
GetSystemDefaultLangID
SetThreadContext
LeaveCriticalSection
WritePrivateProfileStringW
CreateFileMappingW
GetDiskFreeSpaceA
DeleteCriticalSection
GetDiskFreeSpaceExA
GetThreadContext
SetStdHandle
PulseEvent
SetLocalTime
MapViewOfFile
SizeofResource
GetSystemWindowsDirectoryA
SetConsoleMode
FileTimeToSystemTime
lstrcmpiA
LoadLibraryA
RemoveDirectoryW
GetFileTime
GetUserDefaultUILanguage
DeleteFileW
GetVolumeInformationW
LocalFileTimeToFileTime
HeapSize
SetLastError
IsDBCSLeadByteEx
GetModuleFileNameW
CreateProcessA
VerifyVersionInfoA
MulDiv
GetPrivateProfileIntA
GetCommandLineA
GetCompressedFileSizeW
GetWindowsDirectoryA
CancelWaitableTimer
FreeLibrary
VirtualQuery
HeapReAlloc
MoveFileExA
FindVolumeClose
CreateEventW
user32
VkKeyScanW
DefWindowProcA
DialogBoxIndirectParamA
RegisterClipboardFormatW
RegisterClassW
DefMDIChildProcW
FlashWindowEx
GetForegroundWindow
GetCapture
CreateAcceleratorTableW
CreateDialogParamA
EndPaint
ReleaseCapture
MapVirtualKeyExW
IntersectRect
DialogBoxIndirectParamW
IsCharAlphaA
GetKeyboardLayoutList
MapWindowPoints
IsCharLowerW
LoadStringW
DdeAddData
SetWindowLongA
DrawStateA
SetSysColors
SendMessageA
CharPrevW
DefFrameProcA
IsZoomed
MsgWaitForMultipleObjects
SendNotifyMessageA
UnregisterClassW
CreateDesktopW
GetNextDlgTabItem
ScreenToClient
GetMessageW
CreateDesktopA
CharUpperA
TrackPopupMenuEx
SetClassLongW
DrawStateW
SendDlgItemMessageW
FlashWindow
ChangeDisplaySettingsA
MessageBoxExW
GetProcessDefaultLayout
CallWindowProcW
DefWindowProcW
TranslateMDISysAccel
GetClientRect
gdi32
GetTextColor
RectVisible
PolyBezier
SetStretchBltMode
DeleteObject
SetBrushOrgEx
DeleteMetaFile
StretchBlt
PlayMetaFile
GetNearestPaletteIndex
CreatePalette
CopyMetaFileA
SetMetaFileBitsEx
PatBlt
EnumFontFamiliesW
SetBitmapBits
AddFontResourceW
ole32
OleFlushClipboard
CoInitializeEx
CoUninitialize
Exports
Exports
Sections
.itext Size: 21KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 145B
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.div Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mul Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dec Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.inc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ