Static task
static1
Behavioral task
behavioral1
Sample
8258ca8e7ddfaada642bf866bd668771e592df69937f3acf97be22328d123642.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8258ca8e7ddfaada642bf866bd668771e592df69937f3acf97be22328d123642.exe
Resource
win10v2004-20220812-en
General
-
Target
8258ca8e7ddfaada642bf866bd668771e592df69937f3acf97be22328d123642
-
Size
176KB
-
MD5
03ceb6f37a137049eb755051d99326e0
-
SHA1
018cda6f634e0cb51f1c68facfdbd64611d2bfc2
-
SHA256
8258ca8e7ddfaada642bf866bd668771e592df69937f3acf97be22328d123642
-
SHA512
d648f70b43b9daed7dcbae3c45a29039de6dbf98ef94515a8395ed1048ab76a0d959001a42b68ca4d16363735105fc486284c9231f47ac636f5c35b819b1cab7
-
SSDEEP
1536:QNLSvyrfbSwWEP115RUIV6ffI8xotrah13/8HJNOyTiH4wkfdv4N28KD+YzGJQ:QAvyrfbfWEPzU7fNSa2i2iH43fyZKfV
Malware Config
Signatures
Files
-
8258ca8e7ddfaada642bf866bd668771e592df69937f3acf97be22328d123642.exe windows x86
91c4f806e22e1c9f34e021ab5b87c4df
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
WideCharToMultiByte
_lclose
lstrcatW
lstrcmpW
UnhandledExceptionFilter
lstrcpyW
lstrcpynW
lstrlenW
VirtualAlloc
TerminateProcess
Sleep
SetUnhandledExceptionFilter
SetEvent
SetErrorMode
SearchPathW
ReadFile
QueryPerformanceCounter
MultiByteToWideChar
MulDiv
LocalReAlloc
LocalFree
LocalAlloc
LoadLibraryW
LoadLibraryA
IsBadCodePtr
GlobalUnlock
GlobalSize
GlobalLock
GlobalGetAtomNameW
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetTickCount
GetSystemTimeAsFileTime
GetStartupInfoA
GetProfileStringW
GetProfileIntW
GetProcAddress
GetPrivateProfileStringW
GetModuleHandleA
GetLocaleInfoW
GetLastError
GetFileAttributesW
GetDriveTypeW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetACP
FreeLibrary
FormatMessageW
ExitThread
ExitProcess
CreateThread
CreateProcessW
CreateFileW
CreateEventW
lstrcmpiW
CloseHandle
user32
SystemParametersInfoW
TranslateAcceleratorW
TranslateMessage
UnhookWindowsHook
UnregisterDeviceNotification
UpdateWindow
wsprintfA
GetSysColor
OpenIcon
CharNextW
CharUpperW
IsWindow
GetWindowContextHelpId
SendMessageA
LoadBitmapA
ShowWindow
SetWindowPos
SetRectEmpty
SetRect
SetParent
SetMenu
SetForegroundWindow
SetCursor
SetActiveWindow
RemoveMenu
RegisterDeviceNotificationW
RegisterClipboardFormatW
PeekMessageW
MsgWaitForMultipleObjects
MoveWindow
ModifyMenuW
MessageBoxW
LoadMenuW
LoadImageW
LoadIconW
LoadAcceleratorsW
IsZoomed
IsWindowEnabled
IsRectEmpty
IsIconic
IsCharAlphaW
IsCharAlphaNumericW
InvalidateRect
InsertMenuW
InflateRect
GetWindowPlacement
GetSystemMetrics
GetSubMenu
GetMenuItemCount
GetMenu
GetDialogBaseUnits
GetDesktopWindow
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowW
EqualRect
EnableMenuItem
DrawTextW
DrawMenuBar
DrawIcon
DispatchMessageW
DestroyWindow
DestroyMenu
DeleteMenu
CreateWindowExW
CreateMenu
CopyAcceleratorTableW
CheckMenuItem
CharLowerBuffW
BringWindowToTop
AdjustWindowRect
IsWindowVisible
gdi32
ExcludeClipRect
GetBkMode
GetDIBits
GetDeviceCaps
GetObjectW
GetPaletteEntries
GetROP2
GetStockObject
GetSystemPaletteEntries
GetSystemPaletteUse
GetTextExtentPoint32W
CreateSolidBrush
LineTo
MoveToEx
PatBlt
Polygon
RealizePalette
Rectangle
DeleteObject
SaveDC
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetROP2
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StretchBlt
TextOutW
GetFontLanguageInfo
UnrealizeObject
StrokePath
AbortPath
DeleteMetaFile
RestoreDC
CreateBitmap
CreatePen
CreatePatternBrush
CreateMetaFileW
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
advapi32
RegOpenKeyExA
RegQueryValueExW
shell32
SHGetFileInfoW
ExtractIconW
DragQueryFileW
DragFinish
DragAcceptFiles
ShellAboutW
msvcrt
memcpy
memset
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ