Static task
static1
Behavioral task
behavioral1
Sample
f1ba5ece7b86f46f86b205d3844820186047131d2297cee1bf3318d93e441f0c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f1ba5ece7b86f46f86b205d3844820186047131d2297cee1bf3318d93e441f0c.exe
Resource
win10v2004-20221111-en
General
-
Target
f1ba5ece7b86f46f86b205d3844820186047131d2297cee1bf3318d93e441f0c
-
Size
86KB
-
MD5
a4620623330bcba6845a8700e9af247e
-
SHA1
67fe4e26343e97ab93898afdb239d77c8ec3e8e3
-
SHA256
f1ba5ece7b86f46f86b205d3844820186047131d2297cee1bf3318d93e441f0c
-
SHA512
0c08411ea99a1076222f555abc2e36d1da9ebde1ebf23873fa38d7bacb1cd292939c45b647992b464223ebe39fb404cb54e0b40d0c68c62c5c097915d7dd5c65
-
SSDEEP
1536:5ucaS9mhEf8+ptUSjqFMaztleruMV1yPMR3pLLJZweL+C+2V5NPXhO:RjTlCttleruqyPMZBLJOrjYJXh
Malware Config
Signatures
Files
-
f1ba5ece7b86f46f86b205d3844820186047131d2297cee1bf3318d93e441f0c.exe windows x86
2550febbfd71519451237fb98da007eb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
InitAtomTable
lstrcpynW
HeapValidate
GetFileAttributesW
MulDiv
TerminateProcess
IsDBCSLeadByte
CreateFileW
lstrlenW
GetLastError
GetProcAddress
GetLocalTime
LoadLibraryA
UnhandledExceptionFilter
LockResource
CreateEventW
SizeofResource
FoldStringW
GetModuleHandleA
LoadLibraryExA
HeapSetInformation
CreateMutexA
IsDebuggerPresent
GetStringTypeW
PurgeComm
ReleaseMutex
DeleteFileW
GetCurrentProcessId
GetSystemTime
SetUnhandledExceptionFilter
GetCurrentProcess
Sleep
LoadLibraryW
WideCharToMultiByte
GetTickCount
GlobalLock
HeapFree
GetCurrentActCtx
SystemTimeToFileTime
LoadResource
IsProcessorFeaturePresent
VirtualQuery
GetCPInfo
UnmapViewOfFile
MapViewOfFile
FindResourceA
CreateMutexW
GetDateFormatW
PostQueuedCompletionStatus
GetCommandLineW
user32
LoadIconW
RegisterClassExW
ChildWindowFromPoint
DrawFocusRect
GetCapture
GetDC
wsprintfW
PtInRect
EnumWindows
GetClassLongW
SetFocus
UnhookWinEvent
FindWindowW
WindowFromPoint
MessageBeep
CallNextHookEx
LoadCursorW
GetKeyState
IsZoomed
PostMessageW
SetCapture
FillRect
RegisterWindowMessageW
GetMessageW
ScreenToClient
DestroyWindow
ClientToScreen
OffsetRect
InvalidateRect
SetScrollPos
GetDlgItem
CharUpperW
SetWindowsHookExA
SetWindowPos
SendMessageTimeoutW
CreateDialogParamW
OpenClipboard
UnhookWindowsHookEx
MessageBoxW
GetSystemMetrics
IsWindowVisible
SetDlgItemTextW
MapWindowPoints
EnableWindow
DefWindowProcW
CheckMenuItem
GetWindowThreadProcessId
SetWindowsHookExW
gdi32
GetTextMetricsW
SetBkMode
GetObjectW
StartDocW
SetROP2
CreatePen
comdlg32
GetSaveFileNameW
ReplaceTextW
ChooseFontW
advapi32
RegSetValueExW
RegCloseKey
GetSecurityDescriptorSacl
RegOpenKeyExW
RegQueryInfoKeyW
RegOpenKeyW
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ