Static task
static1
Behavioral task
behavioral1
Sample
07fbf44849fd6bd4e7bc88d58180052977b1bb11046aed6f436a87e7b9053026.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
07fbf44849fd6bd4e7bc88d58180052977b1bb11046aed6f436a87e7b9053026.exe
Resource
win10v2004-20221111-en
General
-
Target
07fbf44849fd6bd4e7bc88d58180052977b1bb11046aed6f436a87e7b9053026
-
Size
4.1MB
-
MD5
a7c19938916608f8f6480576c8890eab
-
SHA1
f5a42e20e12ddd1e834dcc5a1f34e65b03ed6708
-
SHA256
07fbf44849fd6bd4e7bc88d58180052977b1bb11046aed6f436a87e7b9053026
-
SHA512
544d6e8e13008dee025145f7445079f7772a741d78ea98257e28c585d12cfb21d9b620f5d9d105fc4df05725a07e56eebed792a1b549a3ac7a40c8e79b098c1c
-
SSDEEP
98304:4M8FYeDHW/3IJdlAZpttl4FW8autACx9un3vJX19e1TGevZPDnKhBbHgCrshdY0j:4M8FYU2/3kdQrAh
Malware Config
Signatures
Files
-
07fbf44849fd6bd4e7bc88d58180052977b1bb11046aed6f436a87e7b9053026.exe windows x86
abaef71f713bfda4ccd829a424d81be9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
WaitForSingleObjectEx
AddVectoredExceptionHandler
SetLastError
DisableThreadLibraryCalls
GetTickCount
HeapFree
CreateMutexA
GetModuleHandleExW
Sleep
WideCharToMultiByte
InterlockedCompareExchange
GetVersionExA
GetModuleHandleA
VirtualAlloc
VirtualFree
CreateFileA
ExitThread
CreateFileW
LeaveCriticalSection
DeleteCriticalSection
GetCurrentProcess
GetProcessId
GetFileAttributesA
CloseHandle
GetTempPathA
GetProcAddress
LoadLibraryA
RemoveDirectoryA
DuplicateHandle
ExitProcess
InitializeCriticalSection
HeapAlloc
GetCurrentProcessId
FileTimeToLocalFileTime
GetProcessHeap
GetLastError
LocalFileTimeToFileTime
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
HeapReAlloc
LoadLibraryExW
SetEndOfFile
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
GetStringTypeW
GetModuleFileNameA
QueryPerformanceCounter
advapi32
RegOpenKeyW
RegOpenKeyExW
RegEnumKeyExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyA
RegEnumValueA
RegCreateKeyExW
RegQueryInfoKeyW
RegCreateKeyA
RegEnumValueW
RegQueryInfoKeyA
user32
GetWindowTextA
MessageBoxA
SetFocus
DispatchMessageW
LoadIconW
GetMessageA
AppendMenuW
GetWindowRect
MsgWaitForMultipleObjects
CloseDesktop
GetLastInputInfo
SendMessageW
RegisterClassExW
SetWindowPos
RegisterWindowMessageA
RedrawWindow
SetForegroundWindow
SendMessageA
DispatchMessageA
RegisterClassExA
TrackPopupMenu
RegisterWindowMessageW
TranslateMessage
DefWindowProcA
UpdateWindow
GetParent
FindWindowW
AppendMenuA
PostQuitMessage
LoadIconA
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ