Static task
static1
Behavioral task
behavioral1
Sample
95b499580240240c9ebe484487a3f992e05b4d1bfe3b2351b95df8e816270d36.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
95b499580240240c9ebe484487a3f992e05b4d1bfe3b2351b95df8e816270d36.exe
Resource
win10v2004-20221111-en
General
-
Target
95b499580240240c9ebe484487a3f992e05b4d1bfe3b2351b95df8e816270d36
-
Size
125KB
-
MD5
60bc93bb0f13a5a516a4b42f67fe5e53
-
SHA1
34795c6a1669e4f29d3436db16b4c3489ab01ba4
-
SHA256
95b499580240240c9ebe484487a3f992e05b4d1bfe3b2351b95df8e816270d36
-
SHA512
a66e0a0aec25fb0472659d44d0bdc28b522eb5f19e099c52f2375f792c1379b92540c03191513fd881631b318866b31bdbb7da7c813194b6279b197b08b31ca4
-
SSDEEP
1536:gNfQG2/dMCGSvC+1r/HH+fGxaInZ1aknrty249LWPeaiq+1Q/Jtfws8vN:4fQG163ZLxjxps1WGaV+m/JRwFvN
Malware Config
Signatures
Files
-
95b499580240240c9ebe484487a3f992e05b4d1bfe3b2351b95df8e816270d36.exe windows x86
21f9549dca7fd89ac147511952bb79b4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
kernel32
HeapReAlloc
LoadLibraryW
FlushFileBuffers
SetStdHandle
WriteConsoleW
SetFilePointer
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsProcessorFeaturePresent
HeapSize
Sleep
GetSystemTimeAsFileTime
LCMapStringW
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
InterlockedDecrement
GetStdHandle
ExitProcess
GetConsoleMode
GetConsoleCP
WriteFile
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
SetLastError
GetModuleHandleW
GetStringTypeW
CreateFileW
RtlUnwind
EncodePointer
GetSystemTime
CloseHandle
GetModuleHandleA
GetProfileStringA
LoadLibraryA
GetProcAddress
GetLastError
ReadFile
GetProcessHeap
HeapCreate
GetCurrentProcessId
HeapFree
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
GetStartupInfoW
TlsAlloc
LeaveCriticalSection
EnterCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapSetInformation
GetCommandLineA
LocalFree
WideCharToMultiByte
HeapAlloc
GetFileSize
GetCurrentProcess
TerminateProcess
RaiseException
GetModuleFileNameW
CreateFileA
MultiByteToWideChar
DecodePointer
user32
LoadCursorA
DestroyMenu
EnableWindow
RegisterClassA
GetWindow
SetDlgItemTextA
EndPaint
DestroyWindow
CloseClipboard
GetWindowRect
PostQuitMessage
FillRect
DrawTextW
GetSubMenu
LoadStringA
LoadBitmapA
LoadMenuA
LoadIconA
DefFrameProcA
GetClientRect
GetWindowTextLengthA
SendMessageA
BeginPaint
InflateRect
OffsetRect
GetWindowTextA
InvalidateRect
GetWindowLongA
GetClipboardData
CreateWindowExA
GetDlgItem
DefWindowProcA
LoadAcceleratorsA
ShowWindow
SetMenu
GetSysColorBrush
FrameRect
IsDlgButtonChecked
CheckRadioButton
OpenClipboard
SetWindowTextA
UpdateWindow
gdi32
GetViewportOrgEx
FrameRgn
PatBlt
GetWindowExtEx
SetTextColor
DeleteDC
CreateDCA
SetBkMode
SelectObject
CreateCompatibleDC
DPtoLP
SetMapMode
CreateFontW
CreateRectRgn
SetViewportExtEx
GetViewportExtEx
GetStockObject
CreateSolidBrush
TextOutA
GetWindowOrgEx
comdlg32
GetOpenFileNameA
ole32
CoUninitialize
CoInitializeSecurity
CoInitialize
CoInitializeEx
CoSetProxyBlanket
CoCreateInstance
oleaut32
SysFreeString
VariantChangeType
VariantInit
VariantClear
SysAllocString
avicap32
capCreateCaptureWindowA
shlwapi
StrToIntA
StrChrA
comctl32
ord17
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ