Static task
static1
Behavioral task
behavioral1
Sample
b727703da894815cf93c8b42101b0d65b09eeb2580840a9128fdbd4e384b0867.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b727703da894815cf93c8b42101b0d65b09eeb2580840a9128fdbd4e384b0867.exe
Resource
win10v2004-20220901-en
General
-
Target
b727703da894815cf93c8b42101b0d65b09eeb2580840a9128fdbd4e384b0867
-
Size
127KB
-
MD5
1a89935b29a1c49840c9e50be8dfbbd6
-
SHA1
ef05b969e95f628016ef74ca139e8e246678c94f
-
SHA256
b727703da894815cf93c8b42101b0d65b09eeb2580840a9128fdbd4e384b0867
-
SHA512
b794a7b6e5a99ab34619733c96925c9af0bbcf9c473ddab238befcae2b1b29ba890367da279173ba95a2181419fdbbf7cf3ee891b0931c158bc4424dcb2732ed
-
SSDEEP
1536:OesK89+HXxA2vir7zmbQDBcUubpmP278h7/pBcofecmDL4d2sRT0SZ9cQJ+:Oes6hA2vi/icVcEPG8X7feDEdxRvaQk
Malware Config
Signatures
Files
-
b727703da894815cf93c8b42101b0d65b09eeb2580840a9128fdbd4e384b0867.exe windows x86
c6e49950b1caf730d34599ac691ecf3f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceExW
SetConsoleTextAttribute
GetThreadSelectorEntry
CloseHandle
WaitForDebugEvent
GetProcessWorkingSetSize
IsBadStringPtrA
HeapCompact
VirtualAlloc
GetCurrentDirectoryA
GetExitCodeProcess
VirtualLock
GetCommState
ReadConsoleOutputAttribute
EnumSystemLanguageGroupsA
IsBadWritePtr
VirtualFreeEx
gdi32
CreateCompatibleDC
user32
GetRawInputDeviceInfoA
GetClipboardFormatNameW
PostMessageA
LoadMenuIndirectW
IsMenu
SendIMEMessageExA
IsClipboardFormatAvailable
UnhookWindowsHookEx
IsWindowEnabled
MessageBoxTimeoutW
CharPrevExA
SetScrollInfo
CheckMenuRadioItem
advapi32
CredWriteDomainCredentialsA
opengl32
wglGetProcAddress
glRectdv
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 236B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ