Static task
static1
Behavioral task
behavioral1
Sample
2232b7bc5e9482177f1467408a78218a3ff753f339f8c9e8181579b581884609.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2232b7bc5e9482177f1467408a78218a3ff753f339f8c9e8181579b581884609.exe
Resource
win10v2004-20220901-en
General
-
Target
2232b7bc5e9482177f1467408a78218a3ff753f339f8c9e8181579b581884609
-
Size
152KB
-
MD5
09fd32f813ae193f77cb448a0964a449
-
SHA1
cc372c5f85cc42b5a9d2483b51d648ffb95aa436
-
SHA256
2232b7bc5e9482177f1467408a78218a3ff753f339f8c9e8181579b581884609
-
SHA512
5c903537de9d391c7e129f7a0ac1f036a78db891d12e91ff0290836a50d6ee0828a9d04bc67c555dcee91026787de2b55881aeefeca11880179276d269992c81
-
SSDEEP
3072:ZptxAP3e2B3q9XKTUQQppvVvfvRhbrNF6DSB/KFXnqh:Z3Aklbf7NJFLt
Malware Config
Signatures
Files
-
2232b7bc5e9482177f1467408a78218a3ff753f339f8c9e8181579b581884609.exe windows x86
77c3ac87e3ae6e658e13d754fc1eea01
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileSectionW
GetFileTime
GetFileAttributesW
GetHandleInformation
ChangeTimerQueueTimer
GetModuleHandleA
TlsSetValue
SystemTimeToFileTime
CreateFileMappingA
GetCommandLineW
MapViewOfFile
GetStartupInfoA
GetProfileSectionW
OpenFileMappingA
lstrcpyW
DeleteFileA
GetCurrentProcessId
DebugBreak
FileTimeToSystemTime
msvcrt
_except_handler3
_acmdln
_exit
__getmainargs
exit
__p__fmode
_adjust_fdiv
__setusermatherr
__set_app_type
__p__commode
_controlfp
_XcptFilter
_initterm
user32
CreateWindowStationA
ExitWindowsEx
DdeQueryConvInfo
GetDCEx
SetWinEventHook
GetInputDesktop
RegisterHotKey
RemovePropA
SetClipboardData
GetUserObjectInformationW
EnumPropsExA
SendMessageW
GetKeyNameTextA
ChangeDisplaySettingsA
IsIconic
IsCharAlphaNumericW
DdeAddData
CreateDialogIndirectParamW
wvsprintfW
IMPQueryIMEA
GetMonitorInfoA
Sections
.text Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ