Static task
static1
Behavioral task
behavioral1
Sample
d2b0d79b159e90b97153c3a1f725615a87d9c3ce284698f3d60c4f049c2a3bbe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d2b0d79b159e90b97153c3a1f725615a87d9c3ce284698f3d60c4f049c2a3bbe.exe
Resource
win10v2004-20220812-en
General
-
Target
d2b0d79b159e90b97153c3a1f725615a87d9c3ce284698f3d60c4f049c2a3bbe
-
Size
751KB
-
MD5
0a0565a5c5962c2642b66f72fc49a4db
-
SHA1
9acf561e416e89f0b4a18788aed801b00cbbe459
-
SHA256
d2b0d79b159e90b97153c3a1f725615a87d9c3ce284698f3d60c4f049c2a3bbe
-
SHA512
33a792900b354edbc715c179ff88fa2db0042d81389ebddfe7ca96b20619733967467b0304e34b479ce3a362424b039dc2465a380332a3b9c66142da65f1cad5
-
SSDEEP
12288:b8IbAz6Onx/OENlePxF/aXRK9J1hGVwV02WMhJaXuup4jwKS58esdtI8TuU6VCwd:hbAzRrfeb/5TGVwa2WMm++46ybIqYI0l
Malware Config
Signatures
Files
-
d2b0d79b159e90b97153c3a1f725615a87d9c3ce284698f3d60c4f049c2a3bbe.exe windows x86
7289f96427e6eccf29ace90a47df7ea5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetForegroundWindow
DispatchMessageA
GetDC
ReleaseDC
DestroyWindow
GetParent
ShowWindow
EnableWindow
TranslateMessage
LoadStringA
EnableMenuItem
RegisterClassA
GetSubMenu
SetTimer
SetFocus
BeginPaint
KillTimer
GetSystemMetrics
GetWindowRect
ReleaseCapture
SetWindowLongA
SetWindowTextA
GetWindowLongA
ScreenToClient
LoadCursorA
LoadIconA
GetDesktopWindow
EndDialog
MoveWindow
MessageBoxA
DialogBoxParamA
SendMessageA
GetClientRect
SetCursor
kernel32
CreateFileA
GetStdHandle
GetFileAttributesA
WaitForSingleObject
LockResource
FindFirstFileW
HeapDestroy
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetLocaleInfoA
LocalAlloc
SetFilePointer
WideCharToMultiByte
InterlockedExchange
WriteFile
GetSystemTimeAsFileTime
GetStringTypeW
SetEvent
LocalFree
FormatMessageW
InitializeCriticalSection
LoadResource
FindClose
TlsGetValue
FormatMessageA
SetLastError
GetEnvironmentVariableA
FlushFileBuffers
GetModuleFileNameA
LoadLibraryExA
UnhandledExceptionFilter
LoadLibraryExW
MultiByteToWideChar
CreateEventW
GetCurrentThread
GetTickCount
GetCommandLineA
GetCurrentThreadId
GetLastError
GetVersion
GetCurrentProcessId
GetModuleHandleA
ExitProcess
VirtualAlloc
GetOEMCP
Sleep
CreateProcessW
HeapCreate
SetStdHandle
GetModuleHandleW
GetACP
CloseHandle
ReadFile
RaiseException
InterlockedCompareExchange
HeapSize
SizeofResource
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
LCMapStringA
lstrlenA
LCMapStringW
LeaveCriticalSection
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GlobalLock
FindNextFileA
FindNextFileW
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
QueryPerformanceCounter
FreeLibrary
LoadLibraryW
EnterCriticalSection
HeapFree
InterlockedIncrement
SetEndOfFile
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
Sections
.text Size: 711KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ