Static task
static1
Behavioral task
behavioral1
Sample
32378cb39ae68164f0ec1ebf312c162afdb2bd0ea04eb181980c6f92e8b61974.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
32378cb39ae68164f0ec1ebf312c162afdb2bd0ea04eb181980c6f92e8b61974.exe
Resource
win10v2004-20220812-en
General
-
Target
32378cb39ae68164f0ec1ebf312c162afdb2bd0ea04eb181980c6f92e8b61974
-
Size
708KB
-
MD5
0c57e94faab924ba60809398cb60a490
-
SHA1
c79c6e9acf925022fc033e049569b3a17c771bd8
-
SHA256
32378cb39ae68164f0ec1ebf312c162afdb2bd0ea04eb181980c6f92e8b61974
-
SHA512
9497703511963f9c1fc632f5cee6cfa18d9e10c89b1252b5766e357f06cb70c2be8e004ed75f9492bb48fe8f968db559fd1674807a98ef66d9533ef68fb0a032
-
SSDEEP
12288:uI0Ua17Mn7WU44P+b/jAe09dVYKpmEgGJdQJf3f8HuqXIJ2HXMq1UxcedtJIG:uIH7rV6cekz7pwGPErbuXUyedT
Malware Config
Signatures
Files
-
32378cb39ae68164f0ec1ebf312c162afdb2bd0ea04eb181980c6f92e8b61974.exe windows x86
f32dff1cca7633277a3119e714afee19
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
GlobalUnlock
SetCurrentDirectoryW
CancelWaitableTimer
SetFileApisToOEM
GetThreadContext
ConnectNamedPipe
WaitNamedPipeW
IsDBCSLeadByte
CreateDirectoryA
WaitForMultipleObjects
GetOverlappedResult
CreateNamedPipeA
GetPrivateProfileSectionNamesW
InitAtomTable
GetDateFormatW
DnsHostnameToComputerNameW
LocalSize
OutputDebugStringA
SetMessageWaitingIndicator
FreeEnvironmentStringsW
GetThreadSelectorEntry
GetNumberFormatW
GetThreadLocale
FindNextChangeNotification
RequestDeviceWakeup
WriteProfileSectionA
lstrcmpA
InterlockedCompareExchange
DebugActiveProcess
LoadModule
DeleteTimerQueue
GetCommModemStatus
GetDevicePowerState
FindNextVolumeW
GetPrivateProfileStringW
GetDiskFreeSpaceExA
GetThreadPriorityBoost
DuplicateHandle
PeekNamedPipe
CreateWaitableTimerW
GetProfileStringA
UnmapViewOfFile
CreateJobObjectA
OpenFileMappingA
GetSystemTime
user32
WinHelpA
SetClassLongW
CreateIcon
CharToOemW
DdeAccessData
LoadIconW
IsClipboardFormatAvailable
GetPropW
DestroyMenu
SendDlgItemMessageA
DdeConnectList
MonitorFromPoint
UnpackDDElParam
GetListBoxInfo
DialogBoxIndirectParamA
SetWindowContextHelpId
PtInRect
GetWindowInfo
DdeSetQualityOfService
IMPQueryIMEA
SetLayeredWindowAttributes
SetKeyboardState
GetWindowTextA
CharLowerBuffW
GetDialogBaseUnits
EnumThreadWindows
SetWindowsHookExA
DefWindowProcW
PostMessageA
ScrollWindow
DdeUnaccessData
DdeAddData
ShowCursor
DdeGetData
OemToCharA
RegisterWindowMessageA
GetMenuItemID
MessageBoxExW
DdeDisconnect
MessageBoxA
LoadCursorA
UnregisterHotKey
GetMessageW
CallWindowProcA
IntersectRect
CascadeWindows
ArrangeIconicWindows
DdeQueryStringA
SetRect
GetMenu
IsWindowEnabled
GetDesktopWindow
SetCaretPos
DrawFrameControl
SetShellWindow
GetMessageTime
SubtractRect
SetDebugErrorLevel
InsertMenuW
IsWindow
DeferWindowPos
VkKeyScanExW
FreeDDElParam
DdeQueryStringW
RegisterShellHookWindow
TrackMouseEvent
CreateMenu
CopyImage
CreateIconIndirect
EmptyClipboard
MonitorFromWindow
RealChildWindowFromPoint
CreateAcceleratorTableA
DdePostAdvise
GetClassNameA
GetKBCodePage
EnumDesktopsW
LoadCursorFromFileA
UnloadKeyboardLayout
ReuseDDElParam
Sections
.text Size: 245KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 232KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 221KB - Virtual size: 221KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ