Static task
static1
Behavioral task
behavioral1
Sample
3611647bcc13cec5843d5c2528fa8ed520374436fb7fbee92ba7c983981c7123.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3611647bcc13cec5843d5c2528fa8ed520374436fb7fbee92ba7c983981c7123.exe
Resource
win10v2004-20221111-en
General
-
Target
3611647bcc13cec5843d5c2528fa8ed520374436fb7fbee92ba7c983981c7123
-
Size
32KB
-
MD5
ba34ec2f58f73a0d6d17d280c35d5229
-
SHA1
66ce7fe9b5ecaf308b209fc18cbbd4106a22da6f
-
SHA256
3611647bcc13cec5843d5c2528fa8ed520374436fb7fbee92ba7c983981c7123
-
SHA512
b5cfda7741f9fb18c56b522639fc55fc4bec87908ee5ee8ba1dbe07c222c571c06ab50340eff32a3f33c5156521808ac1563ce9f68c37fc73ace2a09408c7f49
-
SSDEEP
384:W4X0KwfrXUCavG7wFFemlUTtyBMPN6urhJopS:WllfrXUCaTFmpzF6AhJo
Malware Config
Signatures
Files
-
3611647bcc13cec5843d5c2528fa8ed520374436fb7fbee92ba7c983981c7123.exe windows x86
a63ff8a33853c0f7f04294593a6015a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dinput8
DirectInput8Create
kernel32
GetModuleHandleA
LCMapStringA
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
CreateMutexA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetLastError
OpenMutexA
CloseHandle
GetCPInfo
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringW
user32
GetCursorPos
PostMessageA
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
DefWindowProcA
SetTimer
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
KillTimer
advapi32
RegCloseKey
RegOpenKeyA
RegQueryValueExA
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ