Static task
static1
Behavioral task
behavioral1
Sample
fd23cd0f329f2f4e992a0011599bb245fd4ed1321342681f241fe61168502f34.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fd23cd0f329f2f4e992a0011599bb245fd4ed1321342681f241fe61168502f34.exe
Resource
win10v2004-20221111-en
General
-
Target
fd23cd0f329f2f4e992a0011599bb245fd4ed1321342681f241fe61168502f34
-
Size
128KB
-
MD5
5f131ab245b02e842e1877df642214b1
-
SHA1
863355bfb0ddecf77f0406fee6f12cc7314db9d9
-
SHA256
fd23cd0f329f2f4e992a0011599bb245fd4ed1321342681f241fe61168502f34
-
SHA512
3f7ba20e0ec0834a25b0fefdf456588e77ced3531f6f52581843d490842d751f074785df478c67cf1375314775c2a9f85aa5dcb2ef9859030178804146885516
-
SSDEEP
1536:zG9opvGypaM5LPF9cCzlOmzkX2P64R73PmcooGB9N2oSyp/Gu/uM:aYJprLPFOCzldzY2P6y/mMCSyAu
Malware Config
Signatures
Files
-
fd23cd0f329f2f4e992a0011599bb245fd4ed1321342681f241fe61168502f34.exe windows x86
073d7a2b20f09f79be9eeb22b97ba50b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
InterlockedIncrement
InterlockedDecrement
WriteFile
LoadResource
UnhandledExceptionFilter
FreeLibrary
GetVersionExA
DisableThreadLibraryCalls
_lclose
DeleteCriticalSection
EnterCriticalSection
MultiByteToWideChar
TerminateProcess
_lopen
WideCharToMultiByte
GetProcAddress
VirtualProtect
FindResourceW
LocalAlloc
FindResourceA
GetTickCount
OutputDebugStringA
GetSystemInfo
GetModuleHandleA
GetCurrentThreadId
CreateEventA
LeaveCriticalSection
GetLastError
CreateThread
GetFileSize
ResumeThread
CloseHandle
GetCurrentProcess
_lread
lstrlenW
GetLocaleInfoW
IsValidLanguageGroup
GetFullPathNameA
GetShortPathNameA
CreateFileW
LoadLibraryA
QueryPerformanceCounter
InitializeCriticalSection
LockResource
GetSystemDefaultLCID
GetCurrentProcessId
HeapDestroy
lstrcmpiA
Sleep
SetEvent
SizeofResource
UnmapViewOfFile
GetSystemTimeAsFileTime
lstrcpyA
VirtualAlloc
GetSystemDirectoryA
SetUnhandledExceptionFilter
lstrcatA
LocalFree
LocalReAlloc
GetModuleFileNameA
MapViewOfFile
CreateFileA
VirtualQuery
lstrlenA
CreateFileMappingA
user32
LoadImageA
GetDC
ReleaseDC
GetWindowRect
CharNextA
wsprintfA
LoadStringA
gdi32
ExtTextOutW
GetSystemPaletteEntries
GetTextAlign
GetPaletteEntries
CreateCompatibleDC
SetTextColor
RoundRect
Polyline
SetBkMode
StretchBlt
DeleteDC
Rectangle
CreateICA
GetDeviceCaps
Ellipse
SetTextAlign
CreatePen
CreateBrushIndirect
SetBkColor
CreateHalftonePalette
DeleteObject
CreateHatchBrush
GetObjectA
CreateSolidBrush
SelectObject
ole32
CoCreateInstance
CoCreateGuid
CoGetInterfaceAndReleaseStream
OleInitialize
OleUninitialize
StringFromCLSID
CoTaskMemFree
msvcrt
_wcsicmp
free
wcslen
wcscpy
malloc
msacm32
acmStreamSize
acmStreamOpen
acmStreamUnprepareHeader
acmStreamClose
acmStreamConvert
acmStreamPrepareHeader
Sections
.text Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ