Static task
static1
Behavioral task
behavioral1
Sample
b76656b394f821746c31f6b4dd00494d0a10b535975091b93bd88fb42073f662.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b76656b394f821746c31f6b4dd00494d0a10b535975091b93bd88fb42073f662.exe
Resource
win10v2004-20221111-en
General
-
Target
b76656b394f821746c31f6b4dd00494d0a10b535975091b93bd88fb42073f662
-
Size
895KB
-
MD5
c389dcc57e3e9ffd79a9819560aeba4e
-
SHA1
1ac9b0f6092ed4b4b08dc9ac09691718d3cb182a
-
SHA256
b76656b394f821746c31f6b4dd00494d0a10b535975091b93bd88fb42073f662
-
SHA512
a0256d8538069db5fcbd5f8ec0b60f1c2b2c55e4f1633396fd125fe0c1f9b9012ca01612b110e3eebb240f1f24bc03deddfa442174f8ab2fcb3bb90b2aa8b848
-
SSDEEP
12288:MA2EKpfko+E1Rz62HgQBKLw2wZqv8cY1xFEn5bV:VQ6o+Uk2AiOYvKnlV
Malware Config
Signatures
Files
-
b76656b394f821746c31f6b4dd00494d0a10b535975091b93bd88fb42073f662.exe windows x86
44fc56abb3e941d36f6efd9d357ffc40
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAsFileTime
GetTickCount
GetCurrentProcessId
TerminateProcess
UnhandledExceptionFilter
GetModuleHandleW
Sleep
VirtualAllocEx
GetCurrentThreadId
GetCurrentProcess
user32
SetDlgItemTextA
SetForegroundWindow
SendMessageA
SetWindowPos
SetWindowTextA
ShowWindow
wsprintfA
LoadIconW
GetSystemMetrics
DestroyIcon
GetSysColor
EnableMenuItem
GetMenu
LoadIconA
SendDlgItemMessageA
ReleaseDC
PeekMessageA
MsgWaitForMultipleObjects
MessageBoxA
MessageBeep
LoadStringA
GetWindowRect
GetWindowLongA
GetDlgItemTextA
GetDlgItem
GetDesktopWindow
GetDC
ExitWindowsEx
EndDialog
EnableWindow
DispatchMessageA
DialogBoxIndirectParamA
CharUpperA
CharPrevA
CharNextA
CallWindowProcA
SetWindowLongA
gdi32
GetDeviceCaps
GetLayout
SelectObject
DeleteDC
AddFontResourceA
CreatePatternBrush
advapi32
AdjustTokenPrivileges
AllocateAndInitializeSid
EqualSid
FreeSid
GetTokenInformation
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyA
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 726KB - Virtual size: 726KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rwu0 Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ