Static task
static1
Behavioral task
behavioral1
Sample
819e0b240782069415332c99f5c8c0300a1f08415da6f8b265dee313bfcca5a1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
819e0b240782069415332c99f5c8c0300a1f08415da6f8b265dee313bfcca5a1.exe
Resource
win10v2004-20220812-en
General
-
Target
819e0b240782069415332c99f5c8c0300a1f08415da6f8b265dee313bfcca5a1
-
Size
272KB
-
MD5
2f0422c3b11f652cffb0b4520ab0de56
-
SHA1
2fe106b3de380e828491e16eae2be5db3d0176b9
-
SHA256
819e0b240782069415332c99f5c8c0300a1f08415da6f8b265dee313bfcca5a1
-
SHA512
0c32d7c32d6f6aaec35fbc2847503b8ce8b50b0f576d3a53d5bdb78194437dc8c16d2f08014229fd5f1d0157183e78dd34f6b5309471e1d245a6cf3e90d1ec3e
-
SSDEEP
6144:PZ9eebIVyLtxT92Y4dO7ndTzwPIjERl33l:PZ3bnLtwKnd/yIjERl33l
Malware Config
Signatures
Files
-
819e0b240782069415332c99f5c8c0300a1f08415da6f8b265dee313bfcca5a1.exe windows x86
17048924bb9f0267b79d10eb470a75ef
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExW
PostMessageW
RegisterClassW
SetWindowPos
DestroyWindow
GetWindowTextW
LoadStringW
DispatchMessageW
EndPaint
SetWindowLongW
UnregisterClassW
PostQuitMessage
ShowWindow
GetMessageW
LoadCursorW
SetRectEmpty
AdjustWindowRect
SendMessageW
GetClientRect
GetWindowLongW
TranslateMessage
GetSystemMetrics
IsZoomed
IsIconic
SetWindowTextW
WindowFromDC
SetForegroundWindow
InSendMessage
GetWindowRect
IsWindowVisible
BeginPaint
DefWindowProcW
IsWindow
ScreenToClient
kernel32
WaitForSingleObject
GetCurrentProcess
lstrlenA
OutputDebugStringA
GetCurrentProcessId
LocalFree
SetUnhandledExceptionFilter
WaitForMultipleObjects
LoadLibraryW
GetTickCount
GetUserDefaultLCID
lstrcpyW
lstrcpynW
CreateThread
MultiByteToWideChar
ResetEvent
lstrlenW
SetEvent
LocalAlloc
GlobalAlloc
CloseHandle
QueryPerformanceCounter
GetSystemTimeAsFileTime
CreateEventW
MulDiv
gdi32
StretchDIBits
GetStockObject
SetStretchBltMode
SelectPalette
GetObjectType
RealizePalette
DeleteObject
CreatePalette
ole32
CoInitialize
CoTaskMemFree
CoUninitialize
CoCreateInstance
quartz
DBToAmpFactor
AmpFactorToDB
winmm
GetDriverModuleHandle
mciSetDriverData
mciGetDriverData
DefDriverProc
mciDriverYield
mciFreeCommandResource
mciLoadCommandResource
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 228KB - Virtual size: 227KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ