Static task
static1
Behavioral task
behavioral1
Sample
79f7c3e7375a223ee2de0899c8c1a8926490e14f30ddc07518e180f97d227131.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
79f7c3e7375a223ee2de0899c8c1a8926490e14f30ddc07518e180f97d227131.exe
Resource
win10v2004-20220901-en
General
-
Target
79f7c3e7375a223ee2de0899c8c1a8926490e14f30ddc07518e180f97d227131
-
Size
166KB
-
MD5
1f2448f6b7ba03d715cfb0e1b03fbe06
-
SHA1
9caa0eff867283399378cd2e736dd9044720a035
-
SHA256
79f7c3e7375a223ee2de0899c8c1a8926490e14f30ddc07518e180f97d227131
-
SHA512
3331bb217daa709e6a81c828ab96cb347d1ed0ab1cf44d4a8ae1271ec69f84975a4b6e3958f1bb948a4b9192e93c4a80e0ae5742913598b3190f2b92b3359871
-
SSDEEP
3072:h90Lj52MjvYJJQkXO4luFPJvXUJK2fZiduGsTxsTKU0fynL4TRow1FF6z954+a61:GNrjvQDuRJvWfZiduGSfNXTRowEJr
Malware Config
Signatures
Files
-
79f7c3e7375a223ee2de0899c8c1a8926490e14f30ddc07518e180f97d227131.exe windows x86
991ba5b2584ee757afde7e4b3b896b19
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
PeekMessageW
GetWindow
MessageBoxW
GetAncestor
SystemParametersInfoW
TranslateMessage
GetClientRect
DestroyWindow
GetDlgItemTextW
GetDC
MapWindowPoints
SetCapture
RegisterClassExW
SetWindowPos
GetParent
GetWindowRect
GetWindowTextLengthW
GetWindowInfo
SetDlgItemTextW
CreateWindowExW
BeginPaint
LoadCursorW
GetClassInfoExW
SetWindowTextW
EndPaint
DispatchMessageW
EndDialog
kernel32
GetConsoleCP
LCMapStringA
GetConsoleMode
LocalFree
HeapCreate
IsProcessorFeaturePresent
LCMapStringW
LockResource
FlushFileBuffers
lstrcpynW
GetCPInfo
lstrcmpA
lstrlenA
FlushInstructionCache
CheckRemoteDebuggerPresent
GetOEMCP
RaiseException
GetVersion
GetThreadLocale
InterlockedCompareExchange
WriteConsoleA
LoadLibraryA
WritePrivateProfileSectionW
CreateSemaphoreW
TlsSetValue
SizeofResource
InterlockedExchange
HeapDestroy
VirtualAlloc
SetFilePointer
VirtualFree
WriteConsoleW
LocalAlloc
WaitForSingleObject
GetStringTypeW
EnumResourceTypesW
TlsGetValue
SetLastError
GetCurrentProcessId
IsDebuggerPresent
FindResourceW
Sleep
GetStringTypeA
LoadResource
WideCharToMultiByte
SetUnhandledExceptionFilter
LeaveCriticalSection
GetCurrentThreadId
GetLocaleInfoA
GetStartupInfoA
TlsAlloc
CopyFileW
GetACP
InitializeCriticalSection
CreateFileA
MulDiv
SetStdHandle
GetConsoleOutputCP
HeapSize
GetSystemTimeAsFileTime
GetDriveTypeW
CreateFileMappingW
QueryPerformanceCounter
TlsFree
GetCurrentProcess
GetTickCount
GetFileType
winspool.drv
DocumentPropertiesW
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ