Static task
static1
Behavioral task
behavioral1
Sample
d3f1ec93f3d913912c560b98b6a423f09940e2f5b3ad8011ed9d937f0368a788.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d3f1ec93f3d913912c560b98b6a423f09940e2f5b3ad8011ed9d937f0368a788.exe
Resource
win10v2004-20220812-en
General
-
Target
d3f1ec93f3d913912c560b98b6a423f09940e2f5b3ad8011ed9d937f0368a788
-
Size
276KB
-
MD5
457578453cbcab415536fe4276a2cb96
-
SHA1
6c6727abc81b4d85e9ba664563d8bd8a6fce7374
-
SHA256
d3f1ec93f3d913912c560b98b6a423f09940e2f5b3ad8011ed9d937f0368a788
-
SHA512
8425a4b965a3f93e2432dfe4a19a232da15f216fce72bc947018ddc5fe26382e295e84f9bce03a9036ed3084d85dfc21402c9cbbbf6c8d9740869b87fcbab133
-
SSDEEP
6144:GRUyLlLQlxDzrH86NIyEKe70RLFyEFcsDfw9:GBZMlxDzVIyEKO02E+sDfG
Malware Config
Signatures
Files
-
d3f1ec93f3d913912c560b98b6a423f09940e2f5b3ad8011ed9d937f0368a788.exe windows x86
6fcd8cc281bccd546e646f45804ddcba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyWindow
IsIconic
EndPaint
LoadStringW
AdjustWindowRect
InSendMessage
LoadCursorW
DefWindowProcW
ShowWindow
PostMessageW
PostQuitMessage
UnregisterClassW
GetWindowTextW
SetWindowTextW
SetWindowLongW
CreateWindowExW
IsWindowVisible
SendMessageW
BeginPaint
ScreenToClient
DispatchMessageW
TranslateMessage
IsWindow
SetWindowPos
GetWindowLongW
GetMessageW
GetSystemMetrics
GetClientRect
IsZoomed
RegisterClassW
SetForegroundWindow
SetRectEmpty
WindowFromDC
GetWindowRect
kernel32
SetEvent
GetSystemTimeAsFileTime
lstrcpyW
IsValidLocale
ResetEvent
CreateThread
CreateEventW
LoadLibraryW
LocalAlloc
CloseHandle
lstrlenW
LocalFree
MulDiv
MultiByteToWideChar
GetCurrentProcessId
GetCurrentProcess
lstrlenA
GlobalFindAtomW
GetTickCount
lstrcpynW
SetUnhandledExceptionFilter
WaitForSingleObject
QueryPerformanceCounter
gdi32
SetStretchBltMode
GetObjectType
DeleteObject
RealizePalette
SelectPalette
GetStockObject
StretchDIBits
CreatePalette
winmm
GetDriverModuleHandle
mciGetDriverData
mciLoadCommandResource
DefDriverProc
mciFreeCommandResource
mciDriverYield
mciSetDriverData
ole32
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
quartz
AmpFactorToDB
DBToAmpFactor
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ