Static task
static1
Behavioral task
behavioral1
Sample
2d49967f87b8e1cd757db88db3313a11fb0c3504420b09e8213f4ede0825007b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2d49967f87b8e1cd757db88db3313a11fb0c3504420b09e8213f4ede0825007b.exe
Resource
win10v2004-20221111-en
General
-
Target
2d49967f87b8e1cd757db88db3313a11fb0c3504420b09e8213f4ede0825007b
-
Size
275KB
-
MD5
5e59699ba2e113b96ff3ab3b390a3371
-
SHA1
1d223ee7ea9fc1a9970547f9abfd4529a8c98ed7
-
SHA256
2d49967f87b8e1cd757db88db3313a11fb0c3504420b09e8213f4ede0825007b
-
SHA512
102f91fee71449b1dd2277c89df5cf251169cae70822ea55faafedd7220c03a0779ff5bd5388e37900caf6f907297b976abc1658e1a1744b95109c4047af59e7
-
SSDEEP
6144:WeYbbN00rQs0rW89HApHcHzeAR0AixTmAcThAkZThMTM1:Qi0rX0rR9gpH7Aix1c60yE
Malware Config
Signatures
Files
-
2d49967f87b8e1cd757db88db3313a11fb0c3504420b09e8213f4ede0825007b.exe windows x86
89ad4c1dfa9b17e059d297ba6b251442
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamA
MoveWindow
GetWindowRect
SendMessageA
wsprintfA
LoadStringA
FindWindowA
GetDesktopWindow
EndDialog
DispatchMessageA
TranslateMessage
IsDialogMessageA
CreateDialogParamA
RegisterClassA
SetForegroundWindow
PostMessageA
GetDlgItem
InvalidateRect
SetWindowTextA
SetDlgItemTextA
CallWindowProcA
GetScrollPos
GetParent
ReleaseDC
GetDC
GetSystemMetrics
DestroyWindow
GetSysColor
DrawFocusRect
PostQuitMessage
GetWindowLongA
SetWindowLongA
LoadIconA
WinHelpA
LoadCursorA
GetMessageA
DefDlgProcA
MessageBoxA
kernel32
OpenFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetLastError
GetProcAddress
LCMapStringW
LoadLibraryA
GetStdHandle
GetFileType
LCMapStringA
GetOEMCP
GetACP
SetHandleCount
WideCharToMultiByte
GetEnvironmentStringsW
GetCPInfo
GetEnvironmentStrings
MultiByteToWideChar
SetFileAttributesA
CloseHandle
WriteFile
lstrlenA
SetFilePointer
CreateFileA
GetLocalTime
lstrcatA
HeapFree
GetProcessHeap
lstrcpyA
HeapAlloc
HeapDestroy
HeapCreate
LocalFree
FormatMessageA
FreeEnvironmentStringsA
lstrcmpiA
GetModuleFileNameA
UnhandledExceptionFilter
RtlUnwind
ExitProcess
GetVersion
GetCommandLineA
FreeEnvironmentStringsW
GetModuleHandleA
GetStartupInfoA
gdi32
SelectObject
ExtTextOutA
GetTextExtentPoint32A
SetBkColor
SetTextColor
SetBkMode
shell32
ord59
advapi32
RegQueryValueExA
RegUnLoadKeyA
RegLoadKeyA
RegEnumValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegOpenKeyA
RegCloseKey
setupapi
SetupDiDrawMiniIcon
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ