Static task
static1
Behavioral task
behavioral1
Sample
262df9260b5bd63d6862efdead6a56bb89476ab9730233525d705e02d5a064aa.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
262df9260b5bd63d6862efdead6a56bb89476ab9730233525d705e02d5a064aa.exe
Resource
win10v2004-20220901-en
General
-
Target
262df9260b5bd63d6862efdead6a56bb89476ab9730233525d705e02d5a064aa
-
Size
4.6MB
-
MD5
82785805b50a6fdae1a07c7d15987180
-
SHA1
4847916e5782f741535d98177f83fc767ca74652
-
SHA256
262df9260b5bd63d6862efdead6a56bb89476ab9730233525d705e02d5a064aa
-
SHA512
06744ac273fe99a7bea0ef3709afef074eaf376c1758f37f6059478a1e3e004da1fd1e6e6388e32607499b448599114325fd0049b8085ceb9c11822fd0b7a2bc
-
SSDEEP
98304:kcNYTQWN2AY10jOcT/4Akx+YmZW9f+WcZV:DY4XAkxOPV
Malware Config
Signatures
Files
-
262df9260b5bd63d6862efdead6a56bb89476ab9730233525d705e02d5a064aa.exe windows x86
6e7a8631427a95146418b9180d800024
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetTempPathA
CloseHandle
GetFileAttributesA
SystemTimeToFileTime
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
ExitProcess
GetProcessHeap
HeapAlloc
HeapFree
CreateMutexA
GetModuleHandleExW
LoadLibraryA
GetLastError
InterlockedCompareExchange
SetLastError
DisableThreadLibraryCalls
GetModuleHandleA
GetVersionExA
DeleteCriticalSection
LocalFileTimeToFileTime
WaitForSingleObject
FileTimeToSystemTime
VirtualAlloc
VirtualFree
GetProcAddress
ExitThread
RemoveDirectoryA
GetTickCount
ReadFile
GetCurrentThread
HeapReAlloc
Sleep
ResumeThread
WriteConsoleW
CreateFileW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
LoadLibraryExW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetEndOfFile
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
GetStringTypeW
GetModuleFileNameA
advapi32
RegOpenKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyW
RegQueryInfoKeyA
user32
MsgWaitForMultipleObjects
GetWindowTextW
MessageBoxW
DispatchMessageW
GetClientRect
DefWindowProcW
TranslateMessage
SetForegroundWindow
RegisterClassExW
RedrawWindow
SendMessageA
SetWindowPos
RegisterWindowMessageW
UpdateWindow
PostQuitMessage
CreatePopupMenu
LoadIconA
RegisterWindowMessageA
RegisterClassExA
SendMessageW
PeekMessageW
GetParent
BringWindowToTop
LoadIconW
MessageBoxA
TrackPopupMenu
GetSystemMetrics
EnumWindows
SetFocus
GetDesktopWindow
GetWindowRect
PostMessageW
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 125KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ