Static task
static1
Behavioral task
behavioral1
Sample
fd015b790d5e6eb1eb0a05697e4e64047f66b250820f3810b487d2a42c15e121.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fd015b790d5e6eb1eb0a05697e4e64047f66b250820f3810b487d2a42c15e121.exe
Resource
win10v2004-20221111-en
General
-
Target
fd015b790d5e6eb1eb0a05697e4e64047f66b250820f3810b487d2a42c15e121
-
Size
788KB
-
MD5
b2da662bb62037c2eaa7144c49f3d5b8
-
SHA1
4175dac217f2104d92fad070789e98e9fa3cc82a
-
SHA256
fd015b790d5e6eb1eb0a05697e4e64047f66b250820f3810b487d2a42c15e121
-
SHA512
df1a79c2afec7ba79aeb5bef72fbbd797667ed37325666b8f17004c2d5f03e86e7d3ca4e89f8d3faaa2bf1d2283c01ba7b0f8782a4d7d528cfa533a6133287f1
-
SSDEEP
12288:OqqWMb9QMSKFCQUvreVZm00muD8s0MWIE3a5HmI1Fk0/aGo/4Sm9dasErS+c:OqIbCHKTUvmZfuDqvIE38dR/OA6d
Malware Config
Signatures
Files
-
fd015b790d5e6eb1eb0a05697e4e64047f66b250820f3810b487d2a42c15e121.exe windows x86
e1af5d5e85b19b7c396e2e60fb34b805
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndMenu
DrawFocusRect
LoadIconW
DestroyIcon
RegisterClassExA
GetScrollBarInfo
EnumDisplaySettingsA
RemovePropA
GetMenuContextHelpId
IsClipboardFormatAvailable
PostQuitMessage
OpenIcon
IsCharAlphaNumericW
GetClassInfoA
DdeQueryConvInfo
WaitMessage
GetKeyboardLayoutNameA
MonitorFromPoint
GetMessageA
SetMenuDefaultItem
FindWindowExW
SendIMEMessageExA
GetDesktopWindow
RegisterClassA
SetKeyboardState
FreeDDElParam
LoadImageW
InternalGetWindowText
GetDC
PeekMessageW
CloseClipboard
NotifyWinEvent
DrawFrame
DlgDirListA
GetMessageW
LoadAcceleratorsW
LoadStringA
CharNextA
AttachThreadInput
ChangeDisplaySettingsW
SetCapture
GetComboBoxInfo
TrackPopupMenu
GetKeyboardLayoutNameW
EnumPropsExA
TrackPopupMenuEx
GrayStringW
EqualRect
EnumPropsW
SetCaretPos
FindWindowA
GetAsyncKeyState
GetPriorityClipboardFormat
InvertRect
wsprintfW
GetLastActivePopup
GetGuiResources
SetThreadDesktop
DialogBoxIndirectParamW
kernel32
SetLastError
SetUnhandledExceptionFilter
OpenEventW
HeapDestroy
GlobalFlags
CloseHandle
CompareStringW
WriteFile
VirtualFree
OpenMutexA
GetCommandLineA
GetDateFormatA
LCMapStringA
DeleteCriticalSection
GetStringTypeW
UnhandledExceptionFilter
GetLocaleInfoA
GetTickCount
GetProcAddress
HeapCreate
CopyFileA
GetProcessHeap
HeapSize
GetCurrentThread
GetConsoleOutputCP
LCMapStringW
FreeEnvironmentStringsW
HeapReAlloc
GetSystemTimeAsFileTime
SetFilePointer
VirtualQuery
GetConsoleMode
SetStdHandle
GetCurrentProcess
GetCurrentThreadId
CreateFileA
QueryPerformanceCounter
InterlockedIncrement
GetFileAttributesExW
RtlUnwind
HeapFree
FreeLibrary
IsDebuggerPresent
GetModuleFileNameA
IsValidCodePage
Sleep
WriteConsoleW
GetTimeZoneInformation
InitializeCriticalSection
TlsAlloc
FreeEnvironmentStringsA
GetStartupInfoA
EnterCriticalSection
TlsSetValue
TlsGetValue
GetTimeFormatA
WriteConsoleA
GetEnvironmentStringsW
CompareStringA
VirtualAlloc
SetEnvironmentVariableA
ReadFile
CreateMutexA
ExitProcess
LoadLibraryA
InterlockedDecrement
EnumResourceLanguagesA
GetACP
GetModuleHandleA
FlushFileBuffers
GetEnvironmentStrings
GetOEMCP
MultiByteToWideChar
GetCPInfo
SetConsoleCtrlHandler
GetLastError
HeapAlloc
GetConsoleCP
GetCurrentProcessId
GetLocaleInfoW
TerminateProcess
OpenWaitableTimerA
TlsFree
WideCharToMultiByte
InterlockedExchange
GetFileType
GetStringTypeA
lstrcpy
EnumSystemLocalesA
GetStdHandle
LeaveCriticalSection
GetFileSize
GetShortPathNameA
GetUserDefaultLCID
GetModuleHandleW
GetVersionExA
IsValidLocale
GetProfileStringW
SetHandleCount
comctl32
ImageList_LoadImageA
ImageList_LoadImage
ImageList_Add
DestroyPropertySheetPage
ImageList_SetFlags
ImageList_Replace
ImageList_Create
ImageList_GetImageRect
ImageList_SetDragCursorImage
ImageList_Write
ImageList_Copy
ImageList_SetIconSize
ImageList_ReplaceIcon
CreateMappedBitmap
InitCommonControlsEx
Sections
.text Size: 176KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 404KB - Virtual size: 402KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ