Static task
static1
Behavioral task
behavioral1
Sample
144f72497167102073c58eb84f7ef319a1e9bbed09a6c0a5917e87275bb91583.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
144f72497167102073c58eb84f7ef319a1e9bbed09a6c0a5917e87275bb91583.exe
Resource
win10v2004-20220901-en
General
-
Target
144f72497167102073c58eb84f7ef319a1e9bbed09a6c0a5917e87275bb91583
-
Size
275KB
-
MD5
04ced9a02eb4840811df18811d860270
-
SHA1
17131f4eb8e86719dfd1aeaf708a20f0c86c5fac
-
SHA256
144f72497167102073c58eb84f7ef319a1e9bbed09a6c0a5917e87275bb91583
-
SHA512
6c15a1cfb944cd728befb9b82bd88dfabc357688abbcea1cdc2734f71751603706d94251bb57d35a6ae9b245385b44b892d763bd43b5a021292c59a1b96d1a0c
-
SSDEEP
6144:Aj+i7uMOP7uuxoM2EcKVFygnqQbYh+ZZmgdaJHe:xi7uMq7u9RElVFRbYhOUgdade
Malware Config
Signatures
Files
-
144f72497167102073c58eb84f7ef319a1e9bbed09a6c0a5917e87275bb91583.exe windows x86
ca1183c8a09ab6735318ebb3d5c03782
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
SetStdHandle
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
HeapReAlloc
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateFileW
GetFileSize
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcessHeap
HeapCreate
HeapAlloc
GetVersionExA
lstrcpyA
EnumDateFormatsA
InterlockedDecrement
GetLastError
GetModuleFileNameA
GetLocaleInfoW
LoadLibraryW
GetModuleFileNameW
CloseHandle
SetFilePointer
ReadFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WriteFile
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
IsDebuggerPresent
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
InterlockedIncrement
Sleep
DeleteCriticalSection
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
HeapFree
RaiseException
RtlUnwind
GetProcAddress
GetModuleHandleW
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
SetEndOfFile
user32
GetDlgItem
MapWindowPoints
SendMessageA
ReleaseCapture
CreateMDIWindowW
ReleaseDC
SetRect
LoadCursorA
GetSysColor
GetWindowLongA
SetWindowLongA
ChildWindowFromPoint
LoadIconA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
SetCapture
gdi32
GetClipBox
GetBoundsRect
CreatePen
SelectObject
CreateFontA
GetCurrentObject
GetObjectA
RemoveFontResourceA
comdlg32
GetFileTitleW
ChooseFontA
advapi32
CryptAcquireContextA
shell32
SHGetFileInfoA
SHGetFolderLocation
ord155
ole32
CoUninitialize
CoCreateInstance
CoSetProxyBlanket
CoInitializeEx
oleaut32
SysAllocString
VariantClear
SafeArrayAccessData
SafeArrayDestroy
VariantInit
SafeArrayCreateVector
mpr
WNetGetUniversalNameA
avifil32
AVIBuildFilterA
opengl32
wglMakeCurrent
wglDeleteContext
Sections
.text Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.porosh Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ