Static task
static1
Behavioral task
behavioral1
Sample
0ddef23272054312ae4737e8c503328d4da03ef96e5bcdd829db07e0f6693312.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0ddef23272054312ae4737e8c503328d4da03ef96e5bcdd829db07e0f6693312.exe
Resource
win10v2004-20220901-en
General
-
Target
0ddef23272054312ae4737e8c503328d4da03ef96e5bcdd829db07e0f6693312
-
Size
425KB
-
MD5
3cc63af27fdc1d4a92aee388c6297e40
-
SHA1
c55e8ca4729b63de49fd66ac01caa1685720b608
-
SHA256
0ddef23272054312ae4737e8c503328d4da03ef96e5bcdd829db07e0f6693312
-
SHA512
906339bf065f3d983ffc6f261c1fcdb993f71090ef7c47a38498d98e85466bccd8b6d883651ab38e70b4fdee82d20c0bdd397622d8fc84a01b3b93222cceb5e0
-
SSDEEP
3072:C9w7pttLAyKYwgKS23ou6A1HnjP+eppK8OhAcur3SfxGXkwNzD9+nr+FXyby6T0l:33BAywg44u6AN1pw8Ohov0Gzk+dybyg
Malware Config
Signatures
Files
-
0ddef23272054312ae4737e8c503328d4da03ef96e5bcdd829db07e0f6693312.exe windows x86
cdaea5fafcf12e1d4d64e2a28938ba7d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
LocalAlloc
LocalFree
LocalLock
LocalReAlloc
LocalSize
LocalUnlock
MapViewOfFile
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
GetUserDefaultUILanguage
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
WideCharToMultiByte
WriteFile
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
GetUserDefaultLCID
GetTimeFormatW
GetTickCount
GetSystemTimeAsFileTime
GetStartupInfoA
GetLocaleInfoW
GetLocalTime
GetLastError
GetFileInformationByHandle
GetFileAttributesW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineW
GetACP
FormatMessageW
FoldStringW
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
CreateFileMappingW
ReadFile
CompareStringW
CloseHandle
GetModuleHandleA
GetProcAddress
SetEndOfFile
user32
GetMenuState
GetMessageW
GetParent
GetSubMenu
GetSystemMenu
GetSystemMetrics
GetWindowLongW
GetWindowPlacement
GetWindowTextW
InvalidateRect
IsClipboardFormatAvailable
IsDialogMessageW
IsIconic
LoadAcceleratorsW
LoadCursorW
LoadImageW
LoadStringW
MessageBeep
MessageBoxW
MoveWindow
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
RegisterClassExW
RegisterWindowMessageW
ReleaseDC
ScreenToClient
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCursor
SetDlgItemTextW
SetFocus
SetScrollPos
SetWinEventHook
SetWindowLongW
SetWindowPlacement
SetWindowTextW
ShowWindow
TranslateAcceleratorW
TranslateMessage
UnhookWinEvent
UpdateWindow
WinHelpW
wsprintfW
GetMenu
GetKeyboardLayout
GetForegroundWindow
GetFocus
GetDlgItemTextW
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
EndDialog
EnableWindow
EnableMenuItem
DrawTextExW
DispatchMessageW
DialogBoxParamW
DestroyWindow
DefWindowProcW
CreateWindowExW
CreateDialogParamW
CloseClipboard
ChildWindowFromPoint
CheckMenuItem
CharUpperW
CharNextW
CharLowerW
LoadIconW
LoadIconA
GetDlgItem
gdi32
CreateDCW
CreateFontIndirectW
DeleteDC
DeleteObject
EndDoc
EndPage
EnumFontsW
GetDeviceCaps
GetObjectW
GetTextExtentPoint32W
GetTextFaceW
AbortDoc
LPtoDP
SelectObject
SetAbortProc
SetBkMode
SetMapMode
SetViewportExtEx
SetWindowExtEx
StartDocW
StartPage
TextOutW
CreateDCA
GetTextMetricsW
GetStockObject
advapi32
RegQueryValueExW
RegOpenKeyExA
msvcrt
__getmainargs
_acmdln
_cexit
_exit
_initterm
exit
memcpy
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text2 Size: 356KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dataR2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ