Static task
static1
Behavioral task
behavioral1
Sample
922f77f3245628708e7ffa0b032d771cf296c2fa704dd34d6456f5af8f2cf817.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
922f77f3245628708e7ffa0b032d771cf296c2fa704dd34d6456f5af8f2cf817.exe
Resource
win10v2004-20220812-en
General
-
Target
922f77f3245628708e7ffa0b032d771cf296c2fa704dd34d6456f5af8f2cf817
-
Size
110KB
-
MD5
0426aba45fc2a13a7768a1e554f5cf55
-
SHA1
798afb6aa7469e1991c36593ad12d774ce83935c
-
SHA256
922f77f3245628708e7ffa0b032d771cf296c2fa704dd34d6456f5af8f2cf817
-
SHA512
d882f3c26b5733dc635e2d9bfb6b49bf72f257829bc094f8397e65e449241c2313f7b24eb950cf771cf887f4f388b080ba873383690b442d8f03a161e64e1751
-
SSDEEP
3072:fYLEEL3gpuTw6mummwX76KDXBqTdagU0YmruKQVqZ4/K:fYHL3vmuC76KDXRgXrzQU4
Malware Config
Signatures
Files
-
922f77f3245628708e7ffa0b032d771cf296c2fa704dd34d6456f5af8f2cf817.exe windows x86
ddf0602e090ed11ed68b4231b8cabac1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UpdateResourceA
VirtualFree
VirtualAlloc
GetProcessWorkingSetSize
GetCommandLineW
TlsAlloc
LoadLibraryA
GetFileSizeEx
GetModuleHandleA
FormatMessageA
CopyFileW
CreateMailslotA
FindAtomA
VirtualProtect
GetSystemDefaultLangID
msvcrt
_outp
_mbsinc
islower
_wperror
memset
gmtime
getc
memcpy
__unDName
comdlg32
PrintDlgExW
ChooseFontA
ReplaceTextA
ChooseColorW
PageSetupDlgW
GetFileTitleW
GetSaveFileNameA
WantArrows
dwLBSubclass
GetSaveFileNameW
GetFileTitleA
LoadAlterBitmap
ReplaceTextA
PrintDlgW
GetOpenFileNameA
PageSetupDlgA
winmm
joyGetDevCapsW
mxd32Message
SendDriverMessage
CloseDriver
midiOutPrepareHeader
timeKillEvent
joyGetPosEx
mciGetDeviceIDFromElementIDW
mixerSetControlDetails
midiInMessage
midiInUnprepareHeader
WOWAppExit
midiInPrepareHeader
opengl32
glGetBooleanv
glTexGenf
glGetPointerv
wglGetCurrentDC
glCallLists
glColor3usv
glGetLightiv
wglUseFontOutlinesW
glRasterPos3i
wglUseFontOutlinesA
glColor3s
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE