Static task
static1
Behavioral task
behavioral1
Sample
b0577ed39fe9f9047c390a259e0c18c55396fd88a82531fc2bbe8f6b0fb078a2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b0577ed39fe9f9047c390a259e0c18c55396fd88a82531fc2bbe8f6b0fb078a2.exe
Resource
win10v2004-20220812-en
General
-
Target
b0577ed39fe9f9047c390a259e0c18c55396fd88a82531fc2bbe8f6b0fb078a2
-
Size
323KB
-
MD5
9b9bf35eedda09aa86f25333114dd1d4
-
SHA1
f64f3f72db97b3c9119284f7ca4d641c41805aa0
-
SHA256
b0577ed39fe9f9047c390a259e0c18c55396fd88a82531fc2bbe8f6b0fb078a2
-
SHA512
038c21a487128b61e419f9210adabe3ddca60c8c3d2474a8c0508076f452a2aa2a0a6aff1965c8633fe8befeafe0d140fc20f05d799854e4596367fe3c2667bb
-
SSDEEP
6144:D5tAt50415jKxZEu4ulgR/nkKmaDRZ/P/e:DnAt5PjKDLinDne
Malware Config
Signatures
Files
-
b0577ed39fe9f9047c390a259e0c18c55396fd88a82531fc2bbe8f6b0fb078a2.exe windows x86
c2abb8702e17be31167779b18c8885a4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
AdjustWindowRect
CreateWindowExA
BeginDeferWindowPos
SetForegroundWindow
FindWindowW
CharNextW
GetKeyboardType
ArrangeIconicWindows
LoadStringA
SetTimer
CharPrevW
MessageBoxA
AnyPopup
GetMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
SendMessageW
shell32
ShellExecuteW
ole32
CoInitialize
CoCreateInstance
CoUninitialize
CLSIDFromProgID
gdi32
GetStockObject
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
kernel32
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
FlushFileBuffers
GetConsoleMode
CreateFileA
HeapAlloc
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
GetConsoleCP
GetPrivateProfileSectionW
LCMapStringA
RtlUnwind
HeapFree
VirtualAlloc
GetSystemInfo
EnumResourceNamesW
SetConsoleTitleW
OpenJobObjectW
SetCommConfig
SwitchToFiber
GetProcessIoCounters
HeapReAlloc
HeapSize
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
OpenEventW
LoadLibraryA
RaiseException
DeviceIoControl
GetCurrentDirectoryW
QueryDosDeviceW
GetLogicalDriveStringsW
GetVolumeInformationW
ReadFile
GetExitCodeProcess
GetDiskFreeSpaceExW
GetDriveTypeW
Sleep
WaitForSingleObject
GetCommandLineW
GetDateFormatW
GetTimeFormatW
GlobalAlloc
GlobalFree
SetLastError
CreateMutexW
OpenMutexW
ReleaseMutex
CopyFileW
IsValidLocale
GetModuleFileNameW
SetCurrentDirectoryW
GetPrivateProfileIntW
GetWindowsDirectoryW
CreateProcessW
LoadLibraryW
FreeLibrary
GetCurrentProcess
GetVersionExA
GetPrivateProfileStringW
GetModuleHandleA
GetProcAddress
MultiByteToWideChar
FormatMessageA
DeleteFileW
CreateFileW
SetFilePointer
WideCharToMultiByte
lstrlenA
WriteFile
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetLastError
GetTimeZoneInformation
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
Sections
.text Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 174KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ