Static task
static1
Behavioral task
behavioral1
Sample
d1e125be02fbb08bd9165bfcd976c7d7be5a0ef7686701c41b3bbda6f5b03526.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d1e125be02fbb08bd9165bfcd976c7d7be5a0ef7686701c41b3bbda6f5b03526.exe
Resource
win10v2004-20220812-en
General
-
Target
d1e125be02fbb08bd9165bfcd976c7d7be5a0ef7686701c41b3bbda6f5b03526
-
Size
107KB
-
MD5
0e09493a9c9a0b60ef25748fb7bba970
-
SHA1
b9f31abb3e8b2d5f86be3222bb590c69fc18cfd0
-
SHA256
d1e125be02fbb08bd9165bfcd976c7d7be5a0ef7686701c41b3bbda6f5b03526
-
SHA512
635ddd356a2df914cb19c01322dd0919431f65708358f9ac053ff015b9f388955b23bedd1bd03d4e9d1139475b7dda7a9e4b50f116d3bb2eeca8f9b229458e4d
-
SSDEEP
3072:NitWJRMjpiVteyiJS0G5OLJJyLutrGjj:NitGRMHyd0Kgkj
Malware Config
Signatures
Files
-
d1e125be02fbb08bd9165bfcd976c7d7be5a0ef7686701c41b3bbda6f5b03526.exe windows x86
45b98236f7a5fd7e1036690ca282be6e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DecodePointer
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapAlloc
TerminateProcess
HeapCreate
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapFree
GetCurrentProcess
WideCharToMultiByte
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CompareStringW
MultiByteToWideChar
SetEnvironmentVariableA
LoadLibraryW
RtlUnwind
IsProcessorFeaturePresent
LCMapStringW
GetStringTypeW
HeapReAlloc
HeapSize
ExitProcess
CreateToolhelp32Snapshot
GetModuleHandleA
FindNextFileA
LoadLibraryA
GetProcAddress
SetLastError
GetLastError
FindFirstFileA
Sleep
QueryDosDeviceA
user32
ShowOwnedPopups
CopyAcceleratorTableW
EnumDisplayMonitors
InvertRect
TranslateAcceleratorW
DestroyAcceleratorTable
GetNextDlgGroupItem
MapVirtualKeyW
GetMessageTime
CheckMenuItem
ValidateRect
GetScrollPos
WinHelpW
EndDeferWindowPos
UnpackDDElParam
DestroyMenu
RegisterClipboardFormatW
RegisterClassW
BeginDeferWindowPos
PostThreadMessageW
GetKeyNameTextW
ShowScrollBar
EnableScrollBar
SetMenu
SetLayeredWindowAttributes
SendDlgItemMessageW
CharUpperW
ScrollWindow
GetClassNameW
SetScrollPos
CreateWindowExA
PeekMessageW
SetClassLongW
BringWindowToTop
IntersectRect
IsDialogMessageW
SetWindowContextHelpId
GetForegroundWindow
ShowCursor
LoadAcceleratorsW
GetQueueStatus
GetScrollRange
SetWindowRgn
RealChildWindowFromPoint
HideCaret
MapDialogRect
RegisterClassExA
SendDlgItemMessageA
CharNextW
TrackPopupMenu
GetWindowDC
IsIconic
IsChild
NotifyWinEvent
UnregisterClassW
IsZoomed
GetLastActivePopup
SetMenuItemBitmaps
ReuseDDElParam
SetForegroundWindow
CopyImage
InvalidateRgn
GetMenuDefaultItem
GetMenuStringW
GetMenuCheckMarkDimensions
BeginPaint
GetClassLongW
GetClassInfoExW
SetScrollRange
GetClassInfoW
InsertMenuItemW
gdi32
GetCharWidthW
DeleteDC
Polygon
StretchBlt
SetDIBColorTable
ExcludeClipRect
GetRgnBox
CreatePalette
CreateBitmap
GetPaletteEntries
SelectClipRgn
SetRectRgn
CreateRectRgnIndirect
CombineRgn
SetMapMode
Rectangle
GetMapMode
SaveDC
RealizePalette
SetPolyFillMode
GetObjectType
OffsetWindowOrgEx
StretchDIBits
ScaleViewportExtEx
GetBkColor
GetWindowExtEx
CreateRoundRectRgn
GetNearestPaletteIndex
CreateRectRgn
GetSystemPaletteEntries
CreatePatternBrush
Polyline
GetClipBox
SetViewportExtEx
SetROP2
GetViewportExtEx
SetTextAlign
ExtSelectClipRgn
IntersectClipRect
CreateDIBitmap
OffsetViewportOrgEx
ScaleWindowExtEx
RestoreDC
CreateSolidBrush
SetLayout
EnumFontFamiliesW
SetWindowOrgEx
MoveToEx
CreatePolygonRgn
CreateEllipticRgn
SetWindowExtEx
LineTo
SetViewportOrgEx
SelectPalette
GetTextCharsetInfo
GetLayout
advapi32
InitializeAcl
crypt32
CryptBinaryToStringA
CryptProtectData
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ