Static task
static1
Behavioral task
behavioral1
Sample
0fb3e2be835665ece0f18cba45251c7a39185169501f07fc967e3800354b47a0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0fb3e2be835665ece0f18cba45251c7a39185169501f07fc967e3800354b47a0.exe
Resource
win10v2004-20221111-en
General
-
Target
0fb3e2be835665ece0f18cba45251c7a39185169501f07fc967e3800354b47a0
-
Size
3.6MB
-
MD5
7fc6893b23e9b13700c1a3efd641c724
-
SHA1
e241b81d2fa1811f5c3a01c8e54165f14fa760d6
-
SHA256
0fb3e2be835665ece0f18cba45251c7a39185169501f07fc967e3800354b47a0
-
SHA512
a38aa30679577173fe12304e4c03c004cc957d256a2543e8a780690b1014949a7c1a7c5ca122a52224b38db126ae1dc1a343ac1578741f1ba3ae9f6372e44235
-
SSDEEP
49152:EEzb9ZugqIoYieC2R/qx0uQszb9ZugqIoYieC2R/qx0uQszb9ZugqIoYieC2R/qB:EEzb9bfCwunzb9bfCwunzb9bfCwu9D
Malware Config
Signatures
Files
-
0fb3e2be835665ece0f18cba45251c7a39185169501f07fc967e3800354b47a0.exe windows x86
8d96e40ae83703a819be869c22f26b85
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
user32
MessageBoxA
SetWindowLongW
GetWindowLongW
CreateWindowExW
WaitMessage
UnregisterClassW
TranslateMessage
SystemParametersInfoW
ShowWindow
SetWindowPos
SetForegroundWindow
SetFocus
SendMessageW
ReleaseDC
RegisterClassW
PostQuitMessage
PostMessageW
PeekMessageW
MoveWindow
MessageBoxW
LoadIconW
LoadCursorW
IsWindowEnabled
InvalidateRect
GetSystemMetrics
GetSysColor
GetKeyState
GetDC
GetClientRect
FillRect
EnableWindow
DrawTextW
DispatchMessageW
DestroyWindow
DefWindowProcW
CharNextW
CallWindowProcW
kernel32
Sleep
VirtualFree
VirtualAlloc
VirtualQuery
GetSystemInfo
GetVersion
CompareStringW
IsDBCSLeadByteEx
SetThreadLocale
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSection
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
LocalFree
LocalAlloc
GetModuleHandleW
FreeLibrary
SleepEx
Sleep
SizeofResource
LockResource
LoadResource
LoadLibraryA
GetVersionExW
GetProcAddress
GetLastError
FreeLibrary
FindResourceW
CompareStringW
gdi32
TextOutW
SetTextColor
SetBkMode
SetBkColor
SelectObject
Rectangle
MoveToEx
LineTo
GetTextExtentPoint32W
ExtTextOutW
DeleteObject
CreateSolidBrush
CreatePen
CreateFontIndirectW
shell32
Shell_NotifyIconA
Sections
.text Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 11KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ