Static task
static1
Behavioral task
behavioral1
Sample
879682bef4a80fac6157c7f822fc6b15ca34432e7770612ca41efa8a04220431.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
879682bef4a80fac6157c7f822fc6b15ca34432e7770612ca41efa8a04220431.exe
Resource
win10v2004-20221111-en
General
-
Target
879682bef4a80fac6157c7f822fc6b15ca34432e7770612ca41efa8a04220431
-
Size
384KB
-
MD5
5c7f3f2ade5736b795cfae723be29f40
-
SHA1
ae151a91e15f5493fd24e59cf4e05cc7b09b88be
-
SHA256
879682bef4a80fac6157c7f822fc6b15ca34432e7770612ca41efa8a04220431
-
SHA512
3fc9490ba73eaf1d7b1a550895af89f3776695da8e071eefc726e5d8725c0d1a0b2415726040e051416c8987e4e7579b0828e3fb35817b41287f0000a6b9bff3
-
SSDEEP
6144:aTi7kUyYDfFNKb8nGVreqtxXkk3ARK2gSwfbfZTdf:aHUz7FNPk5uRKnfbfZTd
Malware Config
Signatures
Files
-
879682bef4a80fac6157c7f822fc6b15ca34432e7770612ca41efa8a04220431.exe windows x86
952c50d4ccf6a210bb26813aac82140c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultUILanguage
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
LocalAlloc
LocalFree
LocalLock
LocalReAlloc
LocalSize
LocalUnlock
MapViewOfFile
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
GetUserDefaultLCID
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
WideCharToMultiByte
WriteFile
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
GetTimeFormatW
GetTickCount
GetSystemTimeAsFileTime
GetStartupInfoA
GetLocaleInfoW
GetLocalTime
GetLastError
GetFileInformationByHandle
GetFileAttributesW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineW
GetACP
FormatMessageW
FoldStringW
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
CreateFileMappingW
CompareStringW
ReadFile
CloseHandle
GetModuleHandleA
GetProcAddress
SetEndOfFile
user32
GetMenu
GetMenuState
GetMessageW
GetParent
GetSubMenu
GetSystemMenu
GetSystemMetrics
GetWindowLongW
GetWindowPlacement
GetWindowTextW
InvalidateRect
IsClipboardFormatAvailable
IsDialogMessageW
IsIconic
LoadAcceleratorsW
LoadCursorW
LoadImageW
LoadStringW
MessageBeep
MessageBoxW
MoveWindow
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
RegisterClassExW
RegisterWindowMessageW
ReleaseDC
ScreenToClient
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCursor
SetDlgItemTextW
SetFocus
SetScrollPos
SetWinEventHook
SetWindowLongW
SetWindowPlacement
SetWindowTextW
ShowWindow
TranslateAcceleratorW
TranslateMessage
UnhookWinEvent
UpdateWindow
WinHelpW
wsprintfW
GetKeyboardLayout
GetForegroundWindow
GetFocus
GetDlgItemTextW
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
EndDialog
EnableWindow
EnableMenuItem
DrawTextExW
DispatchMessageW
DialogBoxParamW
DestroyWindow
DefWindowProcW
CreateWindowExW
CreateDialogParamW
CloseClipboard
ChildWindowFromPoint
CheckMenuItem
CharUpperW
CharNextW
CharLowerW
LoadIconW
LoadIconA
GetDlgItem
gdi32
AbortDoc
CreateDCW
CreateFontIndirectW
DeleteDC
DeleteObject
EndDoc
EndPage
EnumFontsW
GetDeviceCaps
GetObjectW
GetTextExtentPoint32W
CreateDCA
GetTextMetricsW
LPtoDP
SelectObject
SetAbortProc
SetBkMode
SetMapMode
SetViewportExtEx
SetWindowExtEx
StartDocW
StartPage
TextOutW
GetTextFaceW
GetStockObject
advapi32
RegOpenKeyExA
msvcrt
__getmainargs
_acmdln
_cexit
_exit
_initterm
exit
memcpy
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dataR2 Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ