Static task
static1
Behavioral task
behavioral1
Sample
303f376b24fb27ed942828dc47d794a485657ebdf095ab2592d702912faae79d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
303f376b24fb27ed942828dc47d794a485657ebdf095ab2592d702912faae79d.exe
Resource
win10v2004-20220812-en
General
-
Target
303f376b24fb27ed942828dc47d794a485657ebdf095ab2592d702912faae79d
-
Size
323KB
-
MD5
525368c9fb66fdd5ec745f2ef06c7588
-
SHA1
9a38c2265cac5a5b4defaf28f0e025280a94a590
-
SHA256
303f376b24fb27ed942828dc47d794a485657ebdf095ab2592d702912faae79d
-
SHA512
a22daa1e4ee8199056456ce6cbc9ca45a3a28af250344f8f36a28db7860a314254f83316b45db9f3653b9a146abb21d8be28d92c1ba227a27ac6e67e572bf94c
-
SSDEEP
6144:Cbh5dXPzKPXIZMxRRWVqHq982QImYCJBFd+hg8ktkr+8un1bmNwiOju:CPFPzK/nIVSIfQnPJBFGgSDu1by9W
Malware Config
Signatures
Files
-
303f376b24fb27ed942828dc47d794a485657ebdf095ab2592d702912faae79d.exe windows x86
47ea4849b4e239d0170038c8d3c245e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Replace
ImageList_GetImageRect
DrawInsert
ImageList_Draw
ImageList_GetFlags
InitCommonControlsEx
ImageList_DrawEx
ImageList_Copy
ImageList_Create
ImageList_LoadImageA
_TrackMouseEvent
DrawStatusText
ImageList_GetIcon
ImageList_GetImageCount
ImageList_DragMove
ImageList_EndDrag
ImageList_Remove
CreateToolbar
kernel32
GetConsoleMode
WritePrivateProfileSectionW
ReadFile
TlsFree
EnumResourceNamesA
GetOEMCP
FreeLibrary
GetCurrentProcess
TerminateProcess
HeapSize
GetLastError
EnumSystemLocalesA
ExitProcess
LCMapStringA
VirtualQuery
FreeEnvironmentStringsA
GetCurrentDirectoryW
GetDateFormatA
Sleep
GetModuleFileNameW
GetCPInfo
LoadLibraryA
DeleteCriticalSection
SetConsoleMode
GetTimeFormatA
GetCurrentProcessId
GetCurrentThreadId
OpenMutexA
GetProcessHeap
lstrcat
WriteConsoleW
CompareStringA
TlsGetValue
UnhandledExceptionFilter
SetFilePointer
WriteConsoleA
GetModuleFileNameA
GetCurrentThread
GetConsoleCP
SetUnhandledExceptionFilter
RtlUnwind
GetCommandLineA
EnterCriticalSection
GetStringTypeA
CompareStringW
UnlockFileEx
LocalShrink
CloseHandle
GetLocaleInfoW
HeapReAlloc
InitializeCriticalSection
HeapCreate
GetFileType
SetLastError
GetEnvironmentStringsW
CreateMutexA
EnumTimeFormatsW
GetVersionExA
GetTickCount
ReadConsoleInputW
GetStdHandle
WriteFile
QueryPerformanceCounter
GetProcAddress
IsDebuggerPresent
SetEnvironmentVariableA
VirtualFree
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetStringTypeW
VirtualAlloc
GetPrivateProfileSectionA
TlsAlloc
MultiByteToWideChar
GetSystemTimeAsFileTime
WideCharToMultiByte
GetStartupInfoA
LeaveCriticalSection
FreeEnvironmentStringsW
HeapDestroy
GetModuleHandleA
GetCommandLineW
CreateFileA
InterlockedDecrement
LCMapStringW
GetACP
GetExitCodeProcess
GetUserDefaultLCID
GetThreadTimes
SetConsoleCtrlHandler
HeapFree
TlsSetValue
InterlockedIncrement
GetEnvironmentStrings
FlushFileBuffers
GetStartupInfoW
IsValidLocale
GetConsoleOutputCP
FreeLibraryAndExitThread
HeapAlloc
GetLocaleInfoA
IsValidCodePage
SetStdHandle
GetTimeZoneInformation
InterlockedExchange
user32
RegisterClassExA
SetMenuInfo
ShowWindow
CloseClipboard
GetParent
RegisterClassA
GetMonitorInfoA
GetWindowDC
GetProcessWindowStation
MenuItemFromPoint
CreateWindowExW
CreateAcceleratorTableA
RegisterClipboardFormatW
MessageBoxA
ValidateRect
SetDoubleClickTime
Sections
.text Size: 209KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ