Static task
static1
Behavioral task
behavioral1
Sample
d0108da62ea335dba5fafadf220f0e8290eb7fe9819e2626b6fc8ae2d9b04724.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d0108da62ea335dba5fafadf220f0e8290eb7fe9819e2626b6fc8ae2d9b04724.exe
Resource
win10v2004-20221111-en
General
-
Target
d0108da62ea335dba5fafadf220f0e8290eb7fe9819e2626b6fc8ae2d9b04724
-
Size
623KB
-
MD5
ef3f7e46430d1034eec6ed9fd00cdea5
-
SHA1
5bdd21c5c8f5e73d15ac838d43d7e40a8ab56f34
-
SHA256
d0108da62ea335dba5fafadf220f0e8290eb7fe9819e2626b6fc8ae2d9b04724
-
SHA512
c7fee0c56c4cba75b5c49b62518e31ff2bfe875bda17120f2d72b6a1c4281241ad0e627fa70db5f07d5a57fb0ee7af6ec460932968f297769754f094de728142
-
SSDEEP
12288:YlbVz3qfYxOq2JM7E4/3Qi8Jk4xj/DKbl8f8a5Y5piohB:YpVz3uYxOLMAigQ4xzz8aaZB
Malware Config
Signatures
Files
-
d0108da62ea335dba5fafadf220f0e8290eb7fe9819e2626b6fc8ae2d9b04724.exe windows x86
1df58a6a67d304c9de94c6e8d131c5cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
FindResourceW
UnmapViewOfFile
GetModuleHandleW
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
CompareStringA
RaiseException
InterlockedCompareExchange
HeapSize
WideCharToMultiByte
GetCommandLineW
SetFileTime
LockResource
GetEnvironmentStrings
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
GlobalFree
HeapCreate
LeaveCriticalSection
CreateFileA
TlsSetValue
GetFileType
CreateFileW
CreateProcessA
ExpandEnvironmentStringsA
DuplicateHandle
FindNextFileA
CreateFileMappingA
ResetEvent
GetDiskFreeSpaceA
FindFirstFileA
GetProcessHeap
GetProcAddress
DeleteFileW
SetErrorMode
GetWindowsDirectoryA
DeleteFileA
LCMapStringW
GetFileSize
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetVersionExA
TlsAlloc
QueryPerformanceCounter
SetEvent
LoadLibraryW
SetHandleCount
Sleep
HeapFree
WriteConsoleW
InterlockedIncrement
GetLocaleInfoA
GetConsoleMode
VirtualQuery
WriteConsoleA
TerminateProcess
GetSystemDirectoryA
SetUnhandledExceptionFilter
CreateThread
CreateMutexA
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
SetConsoleCtrlHandler
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
TlsGetValue
GetSystemTime
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
GetExitCodeProcess
LocalFree
GetOEMCP
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
GetCPInfo
GetTempPathA
SetStdHandle
FreeEnvironmentStringsW
lstrcatA
LocalAlloc
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetLocalTime
GetFileAttributesW
HeapDestroy
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
GetConsoleOutputCP
GetStdHandle
VirtualAlloc
ExitProcess
GetCommandLineA
GetVersion
GetCurrentThreadId
GetTickCount
GetCurrentThread
GetLastError
GetCurrentProcessId
EnterCriticalSection
GetModuleHandleA
gdi32
DeleteDC
SetTextColor
SelectObject
DeleteObject
user32
ScreenToClient
CreateWindowExA
GetWindowLongA
CheckMenuItem
ReleaseCapture
GetWindowRect
GetSystemMetrics
DefWindowProcA
FillRect
SetTimer
GetSubMenu
RegisterClassA
IsIconic
LoadStringA
GetWindow
TranslateMessage
SetWindowPos
ShowWindow
LoadCursorA
GetParent
DestroyWindow
GetClientRect
MoveWindow
GetDC
PeekMessageA
EndPaint
DispatchMessageA
PostQuitMessage
DestroyMenu
SetForegroundWindow
SendMessageA
DrawTextA
EnableMenuItem
CallWindowProcA
EnableWindow
SetCursor
GetDesktopWindow
ReleaseDC
GetFocus
SetDlgItemTextA
GetSysColor
MessageBoxA
GetKeyState
SystemParametersInfoA
UpdateWindow
InvalidateRect
advapi32
RegSetValueExW
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
oleaut32
VariantInit
SysAllocStringLen
SysStringLen
VariantClear
SysAllocString
msvcrt
_exit
_controlfp
exit
Sections
.text Size: 590KB - Virtual size: 912KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ