Static task
static1
Behavioral task
behavioral1
Sample
0d0f5d7bb922b8affe4911968f2d9bdded052b8d31de7ecdae552368fb04303c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0d0f5d7bb922b8affe4911968f2d9bdded052b8d31de7ecdae552368fb04303c.exe
Resource
win10v2004-20220812-en
General
-
Target
0d0f5d7bb922b8affe4911968f2d9bdded052b8d31de7ecdae552368fb04303c
-
Size
205KB
-
MD5
045151dac86b2a267b1fbd8458200d90
-
SHA1
0ba8199c03982b532c08eb62da5db662c510a721
-
SHA256
0d0f5d7bb922b8affe4911968f2d9bdded052b8d31de7ecdae552368fb04303c
-
SHA512
2281d5109b11f9be05cda1e9cab7945a8f51b2b01d9044b9f37e2354b7b79e7a059a18fcd4012f0e47257c9f4d9727e0018a361e1f57dd09754011336ca7b6a9
-
SSDEEP
6144:9zz5P8sLuhVL/j+spwaZ9xQpQeE5iincd:4n7+sGoQ23iicd
Malware Config
Signatures
Files
-
0d0f5d7bb922b8affe4911968f2d9bdded052b8d31de7ecdae552368fb04303c.exe windows x86
7d4b3899d0b27c086b431dbd6eeac02b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
rpcrt4
RpcBindingSetAuthInfoA
RpcBindingFromStringBindingA
NdrClientCall
RpcStringBindingComposeA
RpcStringFreeA
user32
DestroyIcon
DestroyCursor
IsClipboardFormatAvailable
WinHelpW
EmptyClipboard
SetScrollRange
GetSysColorBrush
ChildWindowFromPoint
RealGetWindowClass
ClipCursor
CallNextHookEx
SetWindowsHookExW
ToAscii
SetWindowPos
DefWindowProcW
DrawEdge
UnhookWindowsHookEx
RegisterClassW
SetClipboardData
GetSysColor
kernel32
GetSystemTime
UnlockFile
GetFileType
CreateFiber
LocalAlloc
FileTimeToSystemTime
GetProfileStringW
LockFile
TerminateProcess
FindResourceExA
FileTimeToLocalFileTime
FlushFileBuffers
EnumResourceNamesA
SetEndOfFile
FlushFileBuffers
SearchPathW
CompareStringW
VerLanguageNameW
GetFileTime
GetVersionExW
IsDBCSLeadByte
GetVolumeInformationW
GetUserDefaultLangID
GetFileAttributesA
GetSystemDirectoryW
comdlg32
GetFileTitleA
comctl32
ImageList_Create
ImageList_Add
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Destroy
Sections
.text Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ