Static task
static1
Behavioral task
behavioral1
Sample
120cac36062616a2d39624300646c73b449ae905d73d771f34ff24aaffbf0531.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
120cac36062616a2d39624300646c73b449ae905d73d771f34ff24aaffbf0531.exe
Resource
win10v2004-20221111-en
General
-
Target
120cac36062616a2d39624300646c73b449ae905d73d771f34ff24aaffbf0531
-
Size
64KB
-
MD5
25bcea0899ed0537398e673b1fb5c84d
-
SHA1
5af8ca18e1064ca0f455ec66a936116fda42b751
-
SHA256
120cac36062616a2d39624300646c73b449ae905d73d771f34ff24aaffbf0531
-
SHA512
dd6895393993e7d86a3915f39a3316611aba04d1056acc03e3613d9392cec939c4c1abfe10ee66fffaffa7373758199db3c040ecc9c7b88dafd727a0b8618f72
-
SSDEEP
768:oRWphK2xonLvMGLZw+WVKuiMuRqXOyVt/BMyUYNX70g7rGF:9phJxSLvOi4oYNX70g7iF
Malware Config
Signatures
Files
-
120cac36062616a2d39624300646c73b449ae905d73d771f34ff24aaffbf0531.exe windows x86
c011bff08d8ca5378149872de4544896
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
DeleteMetaFile
GetPixel
GetGlyphOutlineA
AddFontResourceW
EnumFontsA
EnumFontFamiliesExW
EnumFontFamiliesW
Chord
AngleArc
FixBrushOrgEx
GetEnhMetaFileA
SetBoundsRect
CreateDCA
EnumMetaFile
AddFontResourceExA
advapi32
GetTokenInformation
FindFirstFreeAce
FreeSid
GetUserNameW
LookupPrivilegeValueW
SetSecurityDescriptorDacl
GetUserNameA
GetLengthSid
kernel32
GetCurrencyFormatW
GetStdHandle
GetNumberFormatW
ExitThread
GetModuleHandleW
GetCurrentProcessId
ResumeThread
WaitForSingleObject
CreateThread
GetCurrentProcess
GetNativeSystemInfo
HeapWalk
GetCurrencyFormatW
GetWriteWatch
HeapAlloc
HeapFree
VirtualAllocEx
LoadLibraryA
GetLastError
InterlockedExchange
FreeLibrary
GetProcAddress
LocalAlloc
RaiseException
user32
PostMessageW
EndDialog
TranslateMessage
DispatchMessageW
GetMessageW
SendMessageW
CreateDialogParamW
SetDlgItemTextW
SetWindowTextW
LoadImageW
IsDialogMessageW
GetSystemMenu
DestroyWindow
ShowScrollBar
ShowWindow
KillTimer
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ