Static task
static1
Behavioral task
behavioral1
Sample
2e60497d6e64b992c3d9f491e85808c08c8c3f5868d7fdead481ed507f7c53e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2e60497d6e64b992c3d9f491e85808c08c8c3f5868d7fdead481ed507f7c53e5.exe
Resource
win10v2004-20220812-en
General
-
Target
2e60497d6e64b992c3d9f491e85808c08c8c3f5868d7fdead481ed507f7c53e5
-
Size
330KB
-
MD5
13d4ec617aecaf5277d6e1a4ca1ee69f
-
SHA1
a089f333e5ae052fb279186228d57fd6d05c8aae
-
SHA256
2e60497d6e64b992c3d9f491e85808c08c8c3f5868d7fdead481ed507f7c53e5
-
SHA512
00e4caefc039e22d67fb2dfe63f7dfaf49644fee78eebd8c1fc2ce771dc287ddbea57af2f4a3d925353f5cb6f3ad10e0d83bdd9501ded591373a2c29a87a6924
-
SSDEEP
6144:VU1tn5KUpiXZgKgGEoi9P7DGXfszPxuRiIdn+:qtnQU2GKjEL9z6cPxqiC
Malware Config
Signatures
Files
-
2e60497d6e64b992c3d9f491e85808c08c8c3f5868d7fdead481ed507f7c53e5.exe windows x86
fb70be3028f5d4f5b2a806285da677c6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemInfo
ReadFile
VirtualAlloc
user32
MessageBoxW
ModifyMenuW
PeekMessageA
PostMessageA
PostQuitMessage
RegisterClassA
RegisterClassExA
RegisterWindowMessageA
ReleaseCapture
ScreenToClient
MessageBeep
SetCursor
SetCursorPos
SetDlgItemInt
SetDlgItemTextW
SetForegroundWindow
SetRectEmpty
SetWindowLongA
SetWindowPos
SetWindowTextW
TranslateMessage
UnregisterClassA
UpdateWindow
ShowWindow
LoadStringA
LoadMenuW
LoadIconW
LoadIconA
LoadCursorA
LoadBitmapW
LoadBitmapA
IsIconic
IsDlgButtonChecked
IsDialogMessageW
InvalidateRgn
GetWindowTextW
GetWindowLongA
GetScrollInfo
GetMessageA
GetMenu
GetLastActivePopup
GetDlgItemInt
GetDlgCtrlID
GetCursorPos
GetClassNameW
GetClassInfoExA
GetAsyncKeyState
FindWindowA
EndPaint
DrawEdge
DispatchMessageA
DestroyWindow
DestroyAcceleratorTable
DefWindowProcA
CreateWindowExW
CreateWindowExA
CreatePopupMenu
CreateDialogParamW
CreateAcceleratorTableW
CloseWindow
CheckRadioButton
CheckDlgButton
CharUpperA
CharNextW
BeginDeferWindowPos
SetCapture
gdi32
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
StretchDIBits
SetTextColor
SetSystemPaletteUse
SetPaletteEntries
SetLayout
SetBkMode
SelectPalette
SelectObject
ResizePalette
RealizePalette
GetSystemPaletteEntries
GetStockObject
GetPaletteEntries
GetObjectA
GetLayout
GetDeviceCaps
DeleteObject
DeleteDC
CreateSolidBrush
CreatePalette
BitBlt
advapi32
AllocateAndInitializeSid
EqualSid
FreeSid
RegSetValueExA
RegQueryValueExA
RegQueryValueA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyExA
RegEnumKeyA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
LookupAccountSidA
GetTokenInformation
AdjustTokenPrivileges
msvcrt
_XcptFilter
__getmainargs
__lconv_init
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_cexit
_controlfp
_except_handler3
_exit
_ftol
_initterm
_mbsinc
_mbslen
_mbsrchr
_stricmp
_strnicmp
exit
setlocale
strchr
strncpy
strtoul
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 317KB - Virtual size: 317KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ